Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/F5231922306A11ECAC7AA64DC4F9AE02.roa
File:                     F5231922306A11ECAC7AA64DC4F9AE02.roa (raw, json)
Hash identifier:          vYnaxmsn5vsppe/5G2I+RF+3dKEs/plENyq4vTimQDM=
Subject key identifier:   43:B0:E5:75:81:3F:A1:E8:AA:EF:1E:8B:8D:80:74:80:4C:EC:CF:BE
Certificate issuer:       /CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E
Certificate serial:       089C
Authority key identifier: A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/F5231922306A11ECAC7AA64DC4F9AE02.roa
Signing time:             Sat 20 Apr 2024 21:40:00 +0000
ROA not before:           Sat 20 Apr 2024 21:40:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     147045
IP address blocks:        103.15.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl
                          rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E
        Validity
            Not Before: Apr 20 21:40:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66243630-21a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:d0:81:83:54:bb:49:b4:32:7a:e9:71:d2:
                    a7:cf:a7:78:cd:fb:1c:66:88:aa:32:16:e7:5b:06:
                    92:f4:6e:77:54:78:9d:0e:d3:48:b7:a6:22:b2:1d:
                    58:3d:fc:fe:90:24:4a:68:e9:38:e9:dc:6f:96:ae:
                    64:b7:70:89:d6:61:37:fb:28:34:d3:5b:ec:e7:5a:
                    5b:f7:ee:8e:f2:d9:12:07:e1:a5:4f:bc:0c:7d:d4:
                    77:e2:cf:30:cd:1d:f2:c4:4f:e5:f1:ec:82:83:63:
                    1f:92:29:b6:43:a2:55:62:2a:0c:2d:7a:c9:28:43:
                    cd:38:63:d3:ad:5c:3c:05:4b:66:1d:31:e2:8b:e5:
                    19:b4:8f:d6:89:1c:fe:07:20:02:9b:bd:58:53:73:
                    75:86:24:57:0f:ec:bf:d0:5d:84:74:a5:fe:fc:c5:
                    da:e2:dd:b9:d8:4d:e8:21:45:98:44:71:55:78:31:
                    ec:1a:c9:cf:e9:fb:d7:08:06:95:65:25:08:58:f1:
                    14:79:9a:26:f5:d9:0d:ea:fc:5c:5a:94:34:54:11:
                    cf:e5:69:cc:aa:86:c3:21:46:41:b7:c6:0f:46:2d:
                    c8:45:2e:03:8d:5f:2d:90:ab:cd:9a:a7:c2:90:1f:
                    dd:03:97:96:36:5a:78:3d:6c:9d:21:72:b0:72:a7:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B0:E5:75:81:3F:A1:E8:AA:EF:1E:8B:8D:80:74:80:4C:EC:CF:BE
            X509v3 Authority Key Identifier:
                keyid:A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/F5231922306A11ECAC7AA64DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:49:a9:cb:8d:5f:3a:de:f8:0a:b9:a2:bd:af:4c:8d:9a:7f:
         53:f1:25:c0:cb:96:7c:ef:3a:54:71:61:f0:c2:ff:f6:e7:7c:
         39:a7:ad:78:38:40:7a:9b:1e:fa:16:e8:7d:05:4c:61:1b:f4:
         8a:03:c2:41:cd:6e:09:3e:ec:ca:49:c0:16:08:51:bc:ce:9a:
         90:59:a2:42:b1:71:e9:5a:59:5c:45:27:f3:6c:9a:60:1a:6e:
         56:1f:e3:f1:51:3e:5f:16:40:07:83:26:c5:77:61:19:1a:95:
         af:09:4d:04:c9:d0:f7:da:a4:0c:4f:63:07:74:17:5a:07:18:
         82:2c:e2:ce:7d:bc:67:e3:b6:1e:e6:9c:d3:e4:80:72:fd:fc:
         02:17:aa:b4:9d:75:67:9b:aa:7f:69:df:0b:64:71:62:83:f5:
         f9:c5:a6:2f:06:b3:8b:3e:d1:44:ab:5d:8a:4a:e5:b7:f6:be:
         23:2d:22:65:e2:22:b7:16:d8:d7:83:f9:f0:c9:ca:ce:8d:73:
         d1:80:3f:0b:08:71:93:8e:80:25:35:32:b3:6f:ab:f9:85:b1:
         24:fa:11:8d:58:8d:00:9c:29:41:06:5e:7c:4c:2a:0f:a6:3a:
         82:38:f4:75:4b:3d:d2:80:09:97:66:29:c5:94:67:dc:2f:21:
         71:e9:b0:d5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA4RkExMTAvBgNVBAUTKEExMUUyQzIxNzlCMzZBOTY0N0I5NTFGQzYwMkQ3Nzkz
MDdCRkFFNkUwHhcNMjQwNDIwMjE0MDAwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI0MzYzMC0yMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMrQgYNUu0m0MnrpcdKnz6d4zfscZoiqMhbnWwaS9G53VHidDtNIt6Yish1Y
Pfz+kCRKaOk46dxvlq5kt3CJ1mE3+yg001vs51pb9+6O8tkSB+GlT7wMfdR34s8w
zR3yxE/l8eyCg2Mfkim2Q6JVYioMLXrJKEPNOGPTrVw8BUtmHTHii+UZtI/WiRz+
ByACm71YU3N1hiRXD+y/0F2EdKX+/MXa4t252E3oIUWYRHFVeDHsGsnP6fvXCAaV
ZSUIWPEUeZom9dkN6vxcWpQ0VBHP5WnMqobDIUZBt8YPRi3IRS4DjV8tkKvNmqfC
kB/dA5eWNlp4PWydIXKwcqeb7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEOw5XWB
P6Hoqu8ei42AdIBM7M++MB8GA1UdIwQYMBaAFKEeLCF5s2qWR7lR/GAtd5MHv65u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhGQS9BRENCMTVGRTk1
QzMxMUVBQUU2MjAxNDlDNEY5QUUwMi9vUjRzSVhtemFwWkh1Vkg4WUMxM2t3ZV9y
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29SNHNJWG16YXBaSHVWSDhZQzEza3dlX3JtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA4RkEvQURDQjE1RkU5NUMzMTFFQUFFNjIwMTQ5QzRGOUFFMDIvRjUyMzE5MjIz
MDZBMTFFQ0FDN0FBNjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnD34wDQYJKoZIhvcNAQELBQADggEBAFBJqcuNXzre+Aq5
or2vTI2af1PxJcDLlnzvOlRxYfDC//bnfDmnrXg4QHqbHvoW6H0FTGEb9IoDwkHN
bgk+7MpJwBYIUbzOmpBZokKxcelaWVxFJ/NsmmAablYf4/FRPl8WQAeDJsV3YRka
la8JTQTJ0PfapAxPYwd0F1oHGIIs4s59vGfjth7mnNPkgHL9/AIXqrSddWebqn9p
3wtkcWKD9fnFpi8Gs4s+0USrXYpK5bf2viMtImXiIrcW2NeD+fDJys6Nc9GAPwsI
cZOOgCU1MrNvq/mFsST6EY1YjQCcKUEGXnxMKg+mOoI49HVLPdKACZdmKcWUZ9wv
IXHpsNU=
-----END CERTIFICATE-----
Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org