Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
File:                     5596B61C1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          JD7GXKp189dRL6KmdrK5eqEvJdB1dkzYucf68EzIjaI=
Subject key identifier:   38:70:FA:96:CA:DF:AA:01:95:CE:5C:65:80:17:F9:B9:D1:8E:4F:C3
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36D2
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:31:31 +0000
ROA not before:           Sat 08 Jul 2023 14:31:31 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55916
IP address blocks:        58.97.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14034 (0x36d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:31:31 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97342-4ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:24:84:de:ff:87:cb:55:9b:ba:0c:17:1a:
                    5e:c7:bb:47:3b:5d:32:6f:70:f8:4a:c4:cc:d3:7e:
                    0f:b9:f3:aa:03:08:25:79:65:0c:ba:12:ed:b6:4a:
                    1c:a5:ce:a0:5c:ce:49:6c:37:ab:66:f3:15:b6:7d:
                    ff:f9:e8:d2:81:62:22:32:db:de:ae:47:1a:b9:44:
                    48:7e:41:ea:70:05:fd:85:d5:c0:4d:33:f7:49:fa:
                    c7:eb:dc:a4:31:d9:31:5b:e5:73:73:53:da:23:81:
                    31:04:f5:77:0c:86:1d:ba:53:50:7d:b7:77:81:18:
                    f1:7f:26:c7:2d:77:74:cf:9c:8b:16:0c:58:be:f2:
                    af:49:a0:91:24:2a:f8:f8:2a:92:81:7e:3a:03:eb:
                    5e:ac:77:0f:2d:3b:ec:73:4e:3a:37:3a:06:22:27:
                    08:1c:c7:78:e6:e0:25:19:0d:9a:eb:fa:04:56:32:
                    75:e6:24:f7:78:a8:ab:bf:80:d3:30:d4:c3:ad:3d:
                    a7:ed:5a:2f:b8:a5:ef:88:a8:64:50:56:29:81:6b:
                    3b:bb:2f:78:cc:b3:62:8e:59:7e:94:7e:15:0e:be:
                    a6:ad:1e:94:c0:a7:1e:8a:5f:c7:25:98:c9:a6:4c:
                    d0:13:cc:98:69:b9:fd:ce:3b:65:5e:3c:92:9e:60:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:70:FA:96:CA:DF:AA:01:95:CE:5C:65:80:17:F9:B9:D1:8E:4F:C3
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:00:6c:3a:a1:f5:9a:3a:f9:64:16:eb:ff:9a:15:63:ed:
         0a:87:3c:a5:fb:3a:46:50:72:6d:95:a6:a0:6e:7e:98:26:ce:
         30:5f:29:9d:6b:87:27:4e:07:1e:2c:9b:6d:fe:2c:54:a5:fe:
         19:9f:aa:83:67:3b:dd:f9:af:65:7f:fe:27:e5:a1:58:80:e5:
         de:f0:98:e3:b5:14:fd:83:05:c2:d5:19:6a:62:b6:7e:9f:05:
         1d:ed:1d:14:6f:67:f6:1d:37:11:b3:04:2f:27:a7:8f:2b:03:
         45:e9:c7:1d:43:90:2b:23:1f:ce:0d:64:06:34:51:b0:e7:6a:
         ec:ee:50:34:b0:11:7a:08:da:15:1c:a5:5a:63:b7:6c:13:94:
         10:ba:13:b1:97:76:01:18:a6:3c:32:9f:85:57:2c:f9:28:e3:
         f1:bc:4e:5e:26:c5:3d:63:dc:b6:1b:b2:7b:61:24:65:74:8a:
         95:58:32:2d:ca:a0:36:76:eb:f5:ca:7f:52:c8:a0:c8:24:f2:
         36:3c:74:e9:eb:9b:ee:97:af:97:bc:d9:48:50:2b:a8:87:a2:
         79:27:ef:a4:be:5a:67:e7:8f:20:c1:ea:82:61:87:1e:1a:5e:
         b4:94:14:cd:34:62:1f:7b:1c:d2:a7:6b:e2:88:e1:17:90:07:
         50:c5:30:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTMxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzM0Mi00Y2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApoEkhN7/h8tVm7oMFxpex7tHO10yb3D4SsTM034PufOqAwgleWUMuhLttkoc
pc6gXM5JbDerZvMVtn3/+ejSgWIiMtverkcauURIfkHqcAX9hdXATTP3SfrH69yk
MdkxW+Vzc1PaI4ExBPV3DIYdulNQfbd3gRjxfybHLXd0z5yLFgxYvvKvSaCRJCr4
+CqSgX46A+terHcPLTvsc046NzoGIicIHMd45uAlGQ2a6/oEVjJ15iT3eKirv4DT
MNTDrT2n7VovuKXviKhkUFYpgWs7uy94zLNijll+lH4VDr6mrR6UwKceil/HJZjJ
pkzQE8yYabn9zjtlXjySnmBBBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhw+pbK
36oBlc5cZYAX+bnRjk/DMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTU5NkI2MUMx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA6YXowDQYJKoZIhvcNAQELBQADggEBACifAGw6ofWaOvlk
Fuv/mhVj7QqHPKX7OkZQcm2VpqBufpgmzjBfKZ1rhydOBx4sm23+LFSl/hmfqoNn
O935r2V//ifloViA5d7wmOO1FP2DBcLVGWpitn6fBR3tHRRvZ/YdNxGzBC8np48r
A0Xpxx1DkCsjH84NZAY0UbDnauzuUDSwEXoI2hUcpVpjt2wTlBC6E7GXdgEYpjwy
n4VXLPko4/G8Tl4mxT1j3LYbsnthJGV0ipVYMi3KoDZ26/XKf1LIoMgk8jY8dOnr
m+6Xr5e82UhQK6iHonkn76S+WmfnjyDB6oJhhx4aXrSUFM00Yh97HNKna+KI4ReQ
B1DFMCA=
-----END CERTIFICATE-----
Generated at Fri May 24 18:22:53 2024 by rpki-client on console-ams.rpki-client.org