Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/B97A5C70771511EEBBCCCD1AC4F9AE02.roa
File:                     B97A5C70771511EEBBCCCD1AC4F9AE02.roa (raw, json)
Hash identifier:          +UvHfDsYPcQO2Qih7ly7+y8g8H1CLfx7+QoA+C6BaM8=
Subject key identifier:   90:6B:61:D8:63:D9:E7:4E:95:F9:26:2E:D3:1C:13:37:D5:05:88:A9
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       C3
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/B97A5C70771511EEBBCCCD1AC4F9AE02.roa
Signing time:             Tue 05 Dec 2023 04:55:01 +0000
ROA not before:           Tue 05 Dec 2023 04:55:01 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137997
IP address blocks:        103.48.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Dec  5 04:55:01 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=656ead25-8e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:44:80:74:4f:00:8b:d9:5f:c3:b4:2e:e5:
                    e4:36:f0:d7:8b:b4:55:bf:78:b5:0d:8d:a5:9e:a5:
                    48:9f:57:4c:f3:28:7b:3c:ff:b7:2f:de:cc:3f:29:
                    3b:82:0a:1f:e7:dc:d0:9e:d1:fc:d1:f7:cc:c7:e3:
                    b5:c3:63:16:75:f7:87:cb:b4:4e:32:86:0e:2d:7a:
                    7a:8f:ee:ca:4b:e8:3b:40:42:79:59:40:dd:59:cd:
                    0f:34:1d:ba:b9:e6:af:f6:59:5f:60:97:04:76:f2:
                    4b:1e:ef:c6:ea:02:0b:21:97:34:7e:34:68:dc:80:
                    ea:cb:4b:b6:c4:b1:cd:4e:0e:3a:62:72:67:66:4e:
                    66:65:12:b0:27:e2:5c:cc:66:68:71:4a:58:31:74:
                    ea:73:1e:d7:16:e4:a8:65:53:20:b1:3c:2e:c6:be:
                    f9:e5:b3:46:5a:49:56:58:9b:fe:82:d9:da:87:f1:
                    9e:d6:b3:72:61:6b:a1:24:63:d6:59:9f:71:f2:cd:
                    5c:7c:23:11:f6:9f:b2:b7:6a:c5:a5:19:77:8e:ca:
                    8b:0e:26:70:72:2d:46:79:29:03:64:f9:41:33:e0:
                    05:0a:e3:11:e8:50:38:54:f0:a6:35:de:03:43:fc:
                    26:44:84:34:52:51:81:23:86:64:ba:4d:4d:75:dd:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6B:61:D8:63:D9:E7:4E:95:F9:26:2E:D3:1C:13:37:D5:05:88:A9
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/B97A5C70771511EEBBCCCD1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:24:a2:d1:3d:01:f5:87:92:31:ff:65:8f:61:5d:9d:67:
         00:c2:fe:c1:0e:47:cd:7c:cf:30:6f:0f:ea:42:8e:32:e2:05:
         6c:1d:cc:cd:b5:52:ac:67:db:fc:0e:1e:c4:00:04:9d:34:87:
         47:44:b0:62:b2:1d:46:82:d3:07:8a:17:48:2c:a4:9c:3a:f6:
         cc:4f:0a:d2:94:01:1d:5e:d7:6b:ec:26:88:56:7b:da:db:70:
         8b:2f:69:fc:14:13:6c:bc:aa:7e:fc:5c:d2:3b:54:15:3f:01:
         ce:af:f1:99:b0:50:06:79:31:1c:69:ce:f8:c8:43:b5:e6:4e:
         4d:ef:8c:cb:ae:79:20:b2:43:88:9d:30:97:b4:4c:57:08:1d:
         e2:11:cc:02:88:e4:25:76:66:3a:47:c5:21:7e:13:cd:fc:a7:
         17:46:02:54:76:cc:66:57:2e:45:e1:a8:93:81:a5:a4:42:7c:
         6f:57:3a:9a:f9:19:69:d7:06:51:54:c3:8e:bb:d6:bb:18:81:
         9a:13:35:09:a5:0a:ff:4f:0b:51:c3:16:77:64:e0:40:47:68:
         78:a6:d0:5c:fb:33:38:ec:4f:a0:64:83:08:9d:14:cf:e5:ff:
         72:cb:e8:2f:4e:0d:d9:13:6c:17:b2:de:c4:c2:e1:17:6d:17:
         23:1b:1f:74
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3
RjMzOTNFN0YwHhcNMjMxMjA1MDQ1NTAxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTZlYWQyNS04ZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncVEgHRPAIvZX8O0LuXkNvDXi7RVv3i1DY2lnqVIn1dM8yh7PP+3L97MPyk7
ggof59zQntH80ffMx+O1w2MWdfeHy7ROMoYOLXp6j+7KS+g7QEJ5WUDdWc0PNB26
ueav9llfYJcEdvJLHu/G6gILIZc0fjRo3IDqy0u2xLHNTg46YnJnZk5mZRKwJ+Jc
zGZocUpYMXTqcx7XFuSoZVMgsTwuxr755bNGWklWWJv+gtnah/Ge1rNyYWuhJGPW
WZ9x8s1cfCMR9p+yt2rFpRl3jsqLDiZwci1GeSkDZPlBM+AFCuMR6FA4VPCmNd4D
Q/wmRIQ0UlGBI4Zkuk1Ndd2GEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJBrYdhj
2edOlfkmLtMcEzfVBYipMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2
MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJEREYvQTIxMjc2OEM3NjBCMTFFRDhDNkNGMjRFQzRGOUFFMDIvQjk3QTVDNzA3
NzE1MTFFRUJCQ0NDRDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnMKMwDQYJKoZIhvcNAQELBQADggEBAIjWJKLRPQH1h5Ix
/2WPYV2dZwDC/sEOR818zzBvD+pCjjLiBWwdzM21Uqxn2/wOHsQABJ00h0dEsGKy
HUaC0weKF0gspJw69sxPCtKUAR1e12vsJohWe9rbcIsvafwUE2y8qn78XNI7VBU/
Ac6v8ZmwUAZ5MRxpzvjIQ7XmTk3vjMuueSCyQ4idMJe0TFcIHeIRzAKI5CV2ZjpH
xSF+E838pxdGAlR2zGZXLkXhqJOBpaRCfG9XOpr5GWnXBlFUw4671rsYgZoTNQml
Cv9PC1HDFndk4EBHaHim0Fz7MzjsT6BkgwidFM/l/3LL6C9ODdkTbBey3sTC4Rdt
FyMbH3Q=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:33 2024 by rpki-client on console-ams.rpki-client.org