Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/F47320C4E04111EE8F798E3DC4F9AE02.roa
File:                     F47320C4E04111EE8F798E3DC4F9AE02.roa (raw, json)
Hash identifier:          UW7+nv4irITMLcDjMG0OJ/5kJqb/tQLhLog1jaQcizo=
Subject key identifier:   F1:AB:0A:DB:A9:02:EE:D0:DA:67:A8:8B:53:39:F6:E9:6B:1D:D9:83
Certificate issuer:       /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial:       02E2
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/F47320C4E04111EE8F798E3DC4F9AE02.roa
Signing time:             Wed 01 May 2024 04:06:57 +0000
ROA not before:           Wed 01 May 2024 04:06:57 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     152639
IP address blocks:        103.183.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl
                          rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
        Validity
            Not Before: May  1 04:06:57 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=6631bfe1-dfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9d:0e:e0:f4:59:cd:e1:14:50:16:4c:24:18:
                    c1:49:04:8f:78:f5:ad:93:7d:1a:ec:05:02:47:f7:
                    0a:3b:54:cc:db:3d:77:c2:f6:00:d4:40:11:ff:a9:
                    48:06:b5:a1:13:45:10:6c:69:ca:4c:f7:8b:90:cf:
                    9a:a6:54:40:ea:ff:32:6e:dc:26:c2:71:b0:bb:39:
                    ae:50:a5:db:8e:f5:66:d4:2f:c8:d4:ce:2b:65:07:
                    90:f0:a6:5f:f7:f9:bf:ae:75:0b:20:f1:69:e3:ca:
                    07:fb:30:76:4c:de:2f:00:0c:d9:6a:9f:5a:4a:d5:
                    a7:e5:f1:9a:83:1a:0b:d0:d1:0e:4e:70:f8:16:5e:
                    42:a6:cd:dc:f7:8c:08:bc:d5:cf:34:02:78:70:8e:
                    a9:68:f3:fb:e5:02:88:6b:a4:9f:b2:df:e6:2b:38:
                    03:67:d7:b4:f7:f9:18:37:f7:04:5b:10:7a:7c:92:
                    cc:cd:fc:da:ce:6f:48:6b:a1:a3:f4:c5:90:19:33:
                    2d:ec:7b:e5:a7:4e:99:bc:0e:e6:3b:38:2b:c8:93:
                    31:43:3f:11:28:d6:3f:93:bf:86:8b:01:68:b5:2c:
                    1a:f1:a0:fc:72:38:69:29:ea:07:70:aa:40:ad:03:
                    2f:75:7e:e1:f0:70:83:f1:05:10:2f:98:29:b8:d5:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AB:0A:DB:A9:02:EE:D0:DA:67:A8:8B:53:39:F6:E9:6B:1D:D9:83
            X509v3 Authority Key Identifier:
                keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/F47320C4E04111EE8F798E3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:4a:60:40:74:c9:86:83:d5:b2:b0:10:d6:34:f2:1b:b5:
         75:b2:90:5f:0b:fa:10:f7:2d:4d:0c:c7:bb:83:cb:c1:ec:f4:
         1d:79:b2:59:03:f8:77:70:bf:c7:94:27:e5:be:4f:62:23:99:
         52:9a:06:a0:73:62:d1:e1:b9:2e:5b:9e:25:2f:36:fd:ba:ef:
         f9:6c:a6:3c:43:1a:c2:1e:6c:8f:ed:53:aa:1e:59:b6:25:2e:
         d1:e7:e9:ca:9e:46:db:b0:5e:46:9f:c8:be:8e:4c:ff:fe:f5:
         93:ce:37:54:62:00:8f:66:50:69:80:5b:1a:53:94:66:fe:a4:
         45:6f:05:29:27:44:2d:39:d6:e7:2b:a7:cf:01:ed:8a:7c:c5:
         6e:2c:8d:64:7e:4e:c8:03:e1:85:f6:ed:f4:d3:0e:38:1b:14:
         4d:93:bd:9d:a0:a7:71:32:34:4b:cb:e8:3f:66:a7:48:bc:79:
         52:39:b4:0b:ba:39:db:93:53:f2:e7:6a:af:96:72:b0:58:75:
         f4:b3:8b:df:ae:11:19:74:ae:02:9c:18:5e:39:bb:11:5d:5e:
         9b:e6:65:52:5f:54:44:0f:80:a5:a3:d0:61:84:fc:62:1d:56:
         dc:fc:d6:0b:57:7f:6b:75:94:07:80:f3:b2:1d:1f:24:1e:69:
         18:9f:4f:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3
Rjc1NDkzNEMwHhcNMjQwNTAxMDQwNjU3WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxYmZlMS1kZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3p0O4PRZzeEUUBZMJBjBSQSPePWtk30a7AUCR/cKO1TM2z13wvYA1EAR/6lI
BrWhE0UQbGnKTPeLkM+aplRA6v8ybtwmwnGwuzmuUKXbjvVm1C/I1M4rZQeQ8KZf
9/m/rnULIPFp48oH+zB2TN4vAAzZap9aStWn5fGagxoL0NEOTnD4Fl5Cps3c94wI
vNXPNAJ4cI6paPP75QKIa6Sfst/mKzgDZ9e09/kYN/cEWxB6fJLMzfzazm9Ia6Gj
9MWQGTMt7Hvlp06ZvA7mOzgryJMxQz8RKNY/k7+GiwFotSwa8aD8cjhpKeoHcKpA
rQMvdX7h8HCD8QUQL5gpuNXofQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPGrCtup
Au7Q2meoi1M59ulrHdmDMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD
NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTEwQTgvN0IyMDA3M0U5QzRFMTFFQ0IxNzQ4QjY4QzRGOUFFMDIvRjQ3MzIwQzRF
MDQxMTFFRThGNzk4RTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABntz8wDQYJKoZIhvcNAQELBQADggEBAIKsSmBAdMmGg9Wy
sBDWNPIbtXWykF8L+hD3LU0Mx7uDy8Hs9B15slkD+Hdwv8eUJ+W+T2IjmVKaBqBz
YtHhuS5bniUvNv267/lspjxDGsIebI/tU6oeWbYlLtHn6cqeRtuwXkafyL6OTP/+
9ZPON1RiAI9mUGmAWxpTlGb+pEVvBSknRC051ucrp88B7Yp8xW4sjWR+TsgD4YX2
7fTTDjgbFE2TvZ2gp3EyNEvL6D9mp0i8eVI5tAu6OduTU/Lnaq+WcrBYdfSzi9+u
ERl0rgKcGF45uxFdXpvmZVJfVEQPgKWj0GGE/GIdVtz81gtXf2t1lAeA87IdHyQe
aRifTzU=
-----END CERTIFICATE-----
Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org