Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/97A9EA446CE211EEA0262334C4F9AE02.roa
File:                     97A9EA446CE211EEA0262334C4F9AE02.roa (raw, json)
Hash identifier:          N3l8NbXI6PWZv8XLkMHP80swkTXCmSPPyHudla60h0Y=
Subject key identifier:   47:54:94:28:C9:D3:B0:18:BB:BB:BE:4F:D3:71:CE:BB:0E:00:B3:1B
Certificate issuer:       /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial:       04AB
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/97A9EA446CE211EEA0262334C4F9AE02.roa
Signing time:             Sat 13 Jul 2024 01:43:07 +0000
ROA not before:           Sat 13 Jul 2024 01:43:07 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     15083
IP address blocks:        103.115.170.0/24 maxlen: 24
                          103.115.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
                          rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
        Validity
            Not Before: Jul 13 01:43:07 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6691dbaa-f5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:60:b6:34:45:1f:ae:59:c9:58:c5:14:33:
                    a0:13:02:99:ed:94:92:8b:5f:ba:d1:db:ad:94:4d:
                    0c:92:ce:15:7d:df:cb:f5:d5:85:6d:51:e8:69:cc:
                    56:ad:7a:e5:53:4b:1e:09:b2:f8:20:ec:da:42:a9:
                    d2:f7:f3:81:52:91:61:66:cb:5f:ae:5b:76:ce:6f:
                    d5:9d:98:c8:d9:ce:4d:f9:11:20:c5:2c:f0:c7:9c:
                    17:9c:4a:9b:67:f7:a6:03:a5:99:4a:f0:22:60:73:
                    e2:f8:48:9f:b6:de:26:4f:d0:b3:dd:7e:09:4b:83:
                    06:b9:6e:b2:d9:2c:d6:8e:48:4c:72:40:a9:0f:67:
                    19:a2:88:92:cf:bf:eb:aa:b8:12:35:6f:57:86:e9:
                    5d:03:6f:7f:46:ca:a5:49:33:67:03:02:20:24:66:
                    9e:de:f5:79:16:ae:be:8b:34:11:6d:7c:35:23:65:
                    be:fa:8f:4d:ce:6d:23:93:be:02:6c:5b:f5:54:15:
                    8d:21:73:a7:42:af:03:ef:51:32:94:45:55:8e:84:
                    5c:d0:1c:3d:cb:d9:98:1c:1a:e5:ac:c2:1d:0d:65:
                    ec:c0:86:39:89:cc:1b:31:b2:ff:8a:72:d8:f2:3d:
                    c6:ef:3b:36:61:70:f6:1a:31:3d:49:9b:d3:91:f1:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:94:28:C9:D3:B0:18:BB:BB:BE:4F:D3:71:CE:BB:0E:00:B3:1B
            X509v3 Authority Key Identifier:
                keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/97A9EA446CE211EEA0262334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:b3:4c:3c:10:14:5d:19:fd:97:7b:53:b8:21:fe:f9:f8:
         e2:20:42:93:8e:7e:78:39:29:85:6a:6f:5e:61:b3:d8:d5:ca:
         5f:1f:81:43:2d:af:27:f3:95:0d:40:7b:3a:0f:79:35:e1:be:
         a3:14:d0:1d:6a:c2:35:e2:ff:b1:5b:b2:b0:df:33:45:e4:75:
         39:69:07:a5:20:ac:a3:64:67:23:18:db:fc:d6:0e:0f:3c:87:
         ac:5a:38:6a:20:41:c5:68:14:0c:a0:14:76:dc:8c:49:8c:40:
         2b:86:8c:28:01:e4:e5:c5:ed:42:52:26:66:da:ea:ab:57:98:
         5d:c2:80:e3:af:21:33:cd:4a:e9:51:57:a0:90:a5:c3:30:4c:
         38:41:5a:01:aa:0a:86:38:cc:a6:b2:c7:7e:a4:6e:98:66:72:
         6f:2d:b0:12:14:1d:8e:99:cd:0b:ab:c8:c1:fd:3f:56:dd:92:
         31:7a:f1:b7:29:a0:52:0f:50:24:1b:7e:3e:72:4b:0c:6e:6c:
         ff:9b:66:a6:b5:9e:af:14:61:40:5a:ba:ab:23:36:60:91:7e:
         9c:9b:0b:49:de:ab:72:05:2a:ec:7a:95:3d:01:47:93:c8:0f:
         b9:63:a9:ec:99:dc:96:d4:2d:4a:dd:56:6f:2c:6f:8b:d9:d9:
         9c:ac:0d:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3
REQyQzFENTMwHhcNMjQwNzEzMDE0MzA3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjkxZGJhYS1mNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6dgtjRFH65ZyVjFFDOgEwKZ7ZSSi1+60dutlE0Mks4Vfd/L9dWFbVHoacxW
rXrlU0seCbL4IOzaQqnS9/OBUpFhZstfrlt2zm/VnZjI2c5N+REgxSzwx5wXnEqb
Z/emA6WZSvAiYHPi+Eiftt4mT9Cz3X4JS4MGuW6y2SzWjkhMckCpD2cZooiSz7/r
qrgSNW9XhuldA29/RsqlSTNnAwIgJGae3vV5Fq6+izQRbXw1I2W++o9Nzm0jk74C
bFv1VBWNIXOnQq8D71EylEVVjoRc0Bw9y9mYHBrlrMIdDWXswIY5icwbMbL/inLY
8j3G7zs2YXD2GjE9SZvTkfEwpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEdUlCjJ
07AYu7u+T9NxzrsOALMbMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0
REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UxNTEvMTJBQ0Q2QkFGNERDMTFFQjhGN0RCOTQ5QzRGOUFFMDIvOTdBOUVBNDQ2
Q0UyMTFFRUEwMjYyMzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnc6owDQYJKoZIhvcNAQELBQADggEBACKos0w8EBRdGf2X
e1O4If75+OIgQpOOfng5KYVqb15hs9jVyl8fgUMtryfzlQ1AezoPeTXhvqMU0B1q
wjXi/7FbsrDfM0XkdTlpB6UgrKNkZyMY2/zWDg88h6xaOGogQcVoFAygFHbcjEmM
QCuGjCgB5OXF7UJSJmba6qtXmF3CgOOvITPNSulRV6CQpcMwTDhBWgGqCoY4zKay
x36kbphmcm8tsBIUHY6ZzQuryMH9P1bdkjF68bcpoFIPUCQbfj5ySwxubP+bZqa1
nq8UYUBauqsjNmCRfpybC0neq3IFKux6lT0BR5PID7ljqeyZ3JbULUrdVm8sb4vZ
2ZysDa4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:26:01 2024 by rpki-client on console-ams.rpki-client.org