Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
File:                     F15AD62031FA11EE96640F3EC4F9AE02.roa (raw, json)
Hash identifier:          zkL6UlqYAW8e9YwdBDFoUwI3TPfbxozxkK7SUGImOpI=
Subject key identifier:   94:20:30:51:21:E1:96:AD:F3:A9:6B:DB:45:A0:E3:A1:80:EB:09:D3
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       08D4
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
Signing time:             Thu 03 Aug 2023 12:40:35 +0000
ROA not before:           Thu 03 Aug 2023 12:40:35 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     149456
IP address blocks:        103.203.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Aug  3 12:40:35 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64cba043-210b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:16:a9:3e:ae:ac:f8:d2:62:da:40:ce:7d:
                    11:0f:29:28:65:98:52:01:0c:06:10:87:e1:f6:28:
                    31:b3:a5:e5:ec:0f:3d:a0:b9:6f:65:2e:34:8b:38:
                    4f:59:1f:29:15:82:e7:65:58:bb:c3:db:83:50:c0:
                    69:b5:83:ae:5c:f0:93:30:60:be:8e:30:c0:42:04:
                    92:49:ba:81:c2:e5:a2:05:a4:5b:7e:2f:b2:04:94:
                    da:12:d8:4e:c9:67:b2:c8:56:7f:ed:24:4b:e6:8a:
                    8c:91:11:d6:6d:c8:c5:5d:49:14:22:0c:ba:94:e1:
                    b9:a6:6e:28:ab:74:0b:45:d0:34:99:cb:5e:eb:a2:
                    f2:46:1b:ae:fe:95:ca:a6:2b:f4:62:bd:6f:59:3c:
                    8b:b8:7f:99:14:aa:d1:c4:0c:bd:81:46:a6:7d:8c:
                    ef:b0:3f:23:f5:2e:55:b1:49:00:d3:dd:be:61:c3:
                    b9:3e:cc:3c:63:88:83:85:85:22:eb:0c:6d:d4:3d:
                    32:a1:6c:3d:2d:9c:44:03:53:39:ba:73:97:8c:14:
                    a7:76:23:20:6e:19:ad:11:a0:a4:49:81:78:ee:1e:
                    6c:3e:d0:f5:fd:25:1e:75:96:5c:a8:91:56:59:28:
                    63:74:18:47:bf:31:49:d9:52:28:db:24:c6:5b:71:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:20:30:51:21:E1:96:AD:F3:A9:6B:DB:45:A0:E3:A1:80:EB:09:D3
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F15AD62031FA11EE96640F3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:02:4f:61:0b:50:85:00:12:8b:36:3b:b1:83:f3:7b:18:a4:
         85:ed:58:ba:3c:17:c7:58:b2:01:72:ab:37:44:6c:01:ef:60:
         b5:2a:e8:90:bd:ae:76:a9:b0:4a:05:99:b1:0b:2b:5b:c6:ea:
         8f:2e:de:7d:07:56:86:25:f1:2c:49:46:ca:76:3a:38:59:d3:
         fd:c3:26:6d:87:a6:dd:d1:43:dc:e8:64:59:d3:bd:b9:5e:5e:
         6f:98:8f:51:ac:41:08:bb:43:fd:44:83:89:d8:00:bd:70:eb:
         f9:55:81:96:b1:0c:60:10:62:8e:67:a9:46:84:63:27:6d:23:
         0b:5d:3b:f6:7b:98:14:7d:4a:c6:f5:f7:e2:a4:35:32:80:40:
         f1:e3:1f:f0:48:63:a7:61:a9:08:d7:5e:9c:22:cd:9c:c9:bf:
         ed:05:99:8f:3a:b6:f8:65:07:1a:4d:c8:45:e3:a6:5b:61:51:
         39:44:73:55:42:3d:74:1c:a8:0c:d7:71:4e:4d:42:d9:cc:08:
         13:5f:10:d9:d9:0f:b6:e0:fa:f8:27:af:4b:1c:6e:df:73:23:
         35:a7:34:76:52:3d:e8:a3:11:ef:4f:c1:ea:03:1e:cc:2d:b2:
         58:fa:00:f1:6b:11:15:1b:6f:09:d7:79:f7:1d:3e:3d:8b:fa:
         5c:1b:5c:6a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy
QTM2OTE3QkQwHhcNMjMwODAzMTI0MDM1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNiYTA0My0yMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzYWqT6urPjSYtpAzn0RDykoZZhSAQwGEIfh9igxs6Xl7A89oLlvZS40izhP
WR8pFYLnZVi7w9uDUMBptYOuXPCTMGC+jjDAQgSSSbqBwuWiBaRbfi+yBJTaEthO
yWeyyFZ/7SRL5oqMkRHWbcjFXUkUIgy6lOG5pm4oq3QLRdA0mcte66LyRhuu/pXK
piv0Yr1vWTyLuH+ZFKrRxAy9gUamfYzvsD8j9S5VsUkA092+YcO5Psw8Y4iDhYUi
6wxt1D0yoWw9LZxEA1M5unOXjBSndiMgbhmtEaCkSYF47h5sPtD1/SUedZZcqJFW
WShjdBhHvzFJ2VIo2yTGW3HazwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJQgMFEh
4Zat86lr20Wg46GA6wnTMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz
MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvRjE1QUQ2MjAz
MUZBMTFFRTk2NjQwRjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnyy8wDQYJKoZIhvcNAQELBQADggEBABECT2ELUIUAEos2
O7GD83sYpIXtWLo8F8dYsgFyqzdEbAHvYLUq6JC9rnapsEoFmbELK1vG6o8u3n0H
VoYl8SxJRsp2OjhZ0/3DJm2Hpt3RQ9zoZFnTvbleXm+Yj1GsQQi7Q/1Eg4nYAL1w
6/lVgZaxDGAQYo5nqUaEYydtIwtdO/Z7mBR9Ssb19+KkNTKAQPHjH/BIY6dhqQjX
XpwizZzJv+0FmY86tvhlBxpNyEXjplthUTlEc1VCPXQcqAzXcU5NQtnMCBNfENnZ
D7bg+vgnr0scbt9zIzWnNHZSPeijEe9PweoDHswtslj6APFrERUbbwnXefcdPj2L
+lwbXGo=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:20:25 2024 by rpki-client on console-ams.rpki-client.org