Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
File:                     E049FDF87A4511EBBB2D0A52C4F9AE02.roa (raw, json)
Hash identifier:          9vwYcXBwFADBgJCI4CTKPXBa1XtNu/WmiFxKAzXdPV8=
Subject key identifier:   87:DD:95:BC:69:02:9C:DC:AC:14:97:04:53:01:CB:33:B6:01:85:18
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       0E1F
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
Signing time:             Wed 10 May 2023 19:28:46 +0000
ROA not before:           Wed 10 May 2023 19:28:46 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     132825
IP address blocks:        103.113.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3615 (0xe1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 10 19:28:46 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=645bf06e-c1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:b4:53:b6:22:53:50:40:a9:a8:33:39:90:
                    0f:0e:3c:6b:ce:37:ba:ed:fa:15:da:cc:4e:c2:28:
                    39:f4:32:0d:8d:f0:e4:51:09:aa:95:6a:ff:d1:8b:
                    cd:7e:bd:bd:92:f0:d1:6e:b1:eb:00:e5:0b:c0:f8:
                    c8:34:98:46:36:1f:ee:b9:a7:26:11:d7:50:0d:17:
                    07:45:39:e6:e3:a5:7a:27:45:12:a0:5d:e8:e1:41:
                    5d:ee:85:96:f3:c7:1a:eb:2a:62:2a:51:00:22:5e:
                    46:67:2c:e6:f4:a2:25:a4:4c:65:d0:fd:ee:83:f6:
                    62:05:3f:e9:83:97:0a:0a:51:9f:5b:9f:22:cc:48:
                    a9:8f:b6:a5:74:9c:d4:38:90:1e:10:c7:cd:f6:24:
                    ab:af:e1:b7:89:aa:1e:fd:a8:74:c7:25:9a:08:75:
                    b3:7e:98:6c:da:ec:32:ad:e2:4a:89:fe:b8:0c:5f:
                    7b:67:d5:58:dc:23:ed:16:08:c7:05:53:94:0a:e8:
                    9d:66:2c:f7:f5:91:6c:b8:0e:5e:67:5f:1c:6a:d8:
                    74:4e:52:e5:92:7a:e4:74:d4:b7:0a:57:39:c0:fa:
                    ab:0a:66:cc:ab:2f:d3:98:bd:36:84:7c:e6:fc:5b:
                    06:85:0a:c4:df:2f:0d:b7:43:2a:6c:17:5c:2f:7b:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DD:95:BC:69:02:9C:DC:AC:14:97:04:53:01:CB:33:B6:01:85:18
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:26:db:6d:a2:a3:ae:a0:4a:12:03:57:25:82:3a:08:37:b4:
         ff:3b:6c:c4:d1:23:37:e2:8c:ed:49:c7:e4:ad:4c:5b:0b:77:
         60:6d:e9:5f:e1:03:ac:25:fa:71:9d:33:99:49:e5:3b:36:9c:
         e7:f8:43:8a:d0:74:84:71:7d:a0:79:39:00:80:e9:f7:9c:d2:
         8c:f9:8b:e3:d0:05:16:c7:7c:07:50:d8:f5:63:45:ec:11:92:
         3d:f7:f8:68:6d:1d:ac:42:aa:a1:e8:55:72:1c:3d:d2:82:4c:
         ae:24:65:10:d4:4c:9c:32:9b:1c:f5:e6:3b:e8:94:4f:a8:d8:
         02:77:a9:13:b2:8d:1d:08:f6:aa:11:1f:ce:64:65:35:9f:07:
         a5:70:0c:00:68:80:b1:cd:01:1d:c4:c5:9d:04:2a:ea:c0:96:
         0a:4f:2b:8d:b9:24:39:9b:a3:6c:ec:6f:1b:39:de:ab:9f:07:
         8b:3d:c8:33:a8:20:c5:78:d6:65:0e:b6:2d:be:80:ab:bf:98:
         f7:06:cf:29:72:0f:50:c2:0d:b9:a7:32:e9:a4:4e:d5:5c:de:
         97:c7:c2:79:b8:2e:d5:c2:82:73:f9:7f:ee:0b:eb:6c:63:4e:
         b0:93:1b:06:f0:2b:74:22:f4:d9:fe:dd:41:a9:8b:23:59:12:
         c1:af:1a:25
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2
RkZBQzQ2NjEwHhcNMjMwNTEwMTkyODQ2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViZjA2ZS1jMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2K0U7YiU1BAqagzOZAPDjxrzje67foV2sxOwig59DINjfDkUQmqlWr/0YvN
fr29kvDRbrHrAOULwPjINJhGNh/uuacmEddQDRcHRTnm46V6J0USoF3o4UFd7oWW
88ca6ypiKlEAIl5GZyzm9KIlpExl0P3ug/ZiBT/pg5cKClGfW58izEipj7aldJzU
OJAeEMfN9iSrr+G3iaoe/ah0xyWaCHWzfphs2uwyreJKif64DF97Z9VY3CPtFgjH
BVOUCuidZiz39ZFsuA5eZ18cath0TlLlknrkdNS3Clc5wPqrCmbMqy/TmL02hHzm
/FsGhQrE3y8Nt0MqbBdcL3vc2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIfdlbxp
ApzcrBSXBFMByzO2AYUYMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz
RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvRTA0OUZERjg3
QTQ1MTFFQkJCMkQwQTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJncVwwDQYJKoZIhvcNAQELBQADggEBANMm222io66gShID
VyWCOgg3tP87bMTRIzfijO1Jx+StTFsLd2Bt6V/hA6wl+nGdM5lJ5Ts2nOf4Q4rQ
dIRxfaB5OQCA6fec0oz5i+PQBRbHfAdQ2PVjRewRkj33+GhtHaxCqqHoVXIcPdKC
TK4kZRDUTJwymxz15jvolE+o2AJ3qROyjR0I9qoRH85kZTWfB6VwDABogLHNAR3E
xZ0EKurAlgpPK425JDmbo2zsbxs53qufB4s9yDOoIMV41mUOti2+gKu/mPcGzyly
D1DCDbmnMumkTtVc3pfHwnm4LtXCgnP5f+4L62xjTrCTGwbwK3Qi9Nn+3UGpiyNZ
EsGvGiU=
-----END CERTIFICATE-----
Generated at Thu May 16 20:25:57 2024 by rpki-client on console-ams.rpki-client.org