Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa
File:                     C6537C4AAC5B11EDA8C03215C4F9AE02.roa (raw, json)
Hash identifier:          5vBxFMnpycwlDLPFtcSdU/UMyJ9E4X2NtB+rwKhh7hE=
Subject key identifier:   13:A7:14:8E:91:FC:83:2B:DE:6C:4D:25:3F:C8:9F:0F:F3:CB:E5:DB
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0126
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa
Signing time:             Tue 17 Oct 2023 04:15:24 +0000
ROA not before:           Tue 17 Oct 2023 04:15:24 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     58487
IP address blocks:        103.247.8.0/22 maxlen: 24
                          203.175.8.0/22 maxlen: 24
                          203.194.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Oct 17 04:15:24 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=652e0a5c-9750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:3c:5f:d7:e8:93:71:c9:b9:3b:22:10:34:
                    e0:c8:ca:d8:08:0a:04:78:0d:50:91:7a:72:50:ee:
                    bd:54:02:e2:23:8b:de:c4:99:0d:3c:8b:5c:43:d7:
                    5e:8e:40:56:8b:46:51:36:2c:7c:38:c0:17:22:7d:
                    99:9a:ed:7c:c6:e7:c3:af:b5:86:ab:f1:fb:6d:e8:
                    c0:d1:b7:cf:11:96:3b:02:ad:74:71:47:50:cc:90:
                    57:9e:ee:21:22:b4:a1:56:4a:8f:b8:71:ed:0d:4c:
                    af:94:71:88:61:32:9b:5e:4a:5c:66:62:83:a9:2c:
                    d3:6a:f8:94:03:32:a4:7f:bd:60:13:4b:a3:00:44:
                    17:5f:e3:c6:16:cc:43:aa:06:63:d0:57:42:97:ae:
                    18:e7:55:d4:53:c0:b1:17:b5:e5:88:f3:0e:c9:4b:
                    b7:b1:30:e2:62:7f:e2:fa:39:01:e7:1a:16:29:ce:
                    67:ce:f8:f0:54:d7:c4:1b:9f:0b:27:e5:be:81:94:
                    11:b3:74:3e:58:13:f8:55:f9:58:6e:8f:1d:a4:a4:
                    fd:20:d7:f8:cf:c7:8c:70:a4:bf:7a:20:e9:fe:34:
                    a1:20:7e:e9:76:13:48:ce:a4:ea:8d:02:4b:fc:96:
                    f1:bf:3c:01:61:4a:12:19:50:ad:d7:81:ca:70:47:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A7:14:8E:91:FC:83:2B:DE:6C:4D:25:3F:C8:9F:0F:F3:CB:E5:DB
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.8.0/22
                  203.175.8.0/22
                  203.194.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:a7:4b:b3:ab:81:d3:20:82:63:14:c7:7c:c9:fb:ed:34:9b:
         9b:dd:ee:5e:9c:75:0b:ff:e0:84:34:10:e9:95:5c:fd:22:05:
         99:84:a4:40:ad:8a:a4:df:cb:3d:a4:3c:82:3c:5c:ee:d4:5b:
         f6:d5:b0:a2:f5:1d:24:a4:7a:ca:0b:5a:56:84:52:81:fa:a0:
         9b:3d:c1:7c:66:58:98:14:5a:66:71:e9:fa:be:22:11:9c:b9:
         0e:ce:2b:0b:bb:2e:30:47:ab:08:48:de:78:bd:65:e0:8a:3a:
         cd:17:36:ba:c2:05:ca:b0:c6:f5:32:67:49:00:61:0e:69:af:
         da:54:e7:ff:d8:b4:c7:e5:4f:61:81:5b:b8:9a:16:3c:31:6d:
         44:ac:32:d0:69:4e:03:9d:b1:16:89:3a:cf:11:4c:88:5c:a5:
         42:43:87:12:1e:52:08:f4:99:c1:7e:24:da:68:14:04:64:77:
         c0:49:ed:ef:c7:92:a5:f2:b7:5b:83:35:c5:bc:d3:2a:aa:c0:
         54:e6:b0:f9:d0:5f:f9:e1:3f:32:8e:82:cf:54:59:db:63:4f:
         89:52:c0:79:dc:9b:21:2d:be:73:22:ef:d3:16:2c:b9:80:fd:
         b9:13:d1:10:8b:b8:40:21:af:b2:ee:d1:ae:c5:ac:4e:2f:76:
         7d:76:b4:be
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjMxMDE3MDQxNTI0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJlMGE1Yy05NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0EQ8X9fok3HJuTsiEDTgyMrYCAoEeA1QkXpyUO69VALiI4vexJkNPItcQ9de
jkBWi0ZRNix8OMAXIn2Zmu18xufDr7WGq/H7bejA0bfPEZY7Aq10cUdQzJBXnu4h
IrShVkqPuHHtDUyvlHGIYTKbXkpcZmKDqSzTaviUAzKkf71gE0ujAEQXX+PGFsxD
qgZj0FdCl64Y51XUU8CxF7XliPMOyUu3sTDiYn/i+jkB5xoWKc5nzvjwVNfEG58L
J+W+gZQRs3Q+WBP4VflYbo8dpKT9INf4z8eMcKS/eiDp/jShIH7pdhNIzqTqjQJL
/JbxvzwBYUoSGVCt14HKcEd97wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBOnFI6R
/IMr3mxNJT/Inw/zy+XbMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQzY1MzdDNEFB
QzVCMTFFREE4QzAzMjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJn9wgDBALLrwgDBALLwnAwDQYJKoZIhvcNAQELBQADggEB
ALqnS7OrgdMggmMUx3zJ++00m5vd7l6cdQv/4IQ0EOmVXP0iBZmEpECtiqTfyz2k
PII8XO7UW/bVsKL1HSSkesoLWlaEUoH6oJs9wXxmWJgUWmZx6fq+IhGcuQ7OKwu7
LjBHqwhI3ni9ZeCKOs0XNrrCBcqwxvUyZ0kAYQ5pr9pU5//YtMflT2GBW7iaFjwx
bUSsMtBpTgOdsRaJOs8RTIhcpUJDhxIeUgj0mcF+JNpoFARkd8BJ7e/HkqXyt1uD
NcW80yqqwFTmsPnQX/nhPzKOgs9UWdtjT4lSwHncmyEtvnMi79MWLLmA/bkT0RCL
uEAhr7Lu0a7FrE4vdn12tL4=
-----END CERTIFICATE-----
Generated at Fri May 3 06:18:53 2024 by rpki-client on console-ams.rpki-client.org