Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
File:                     32538B4EBCE311EA953FBB5EC4F9AE02.roa (raw, json)
Hash identifier:          Q+f6CDvuXieanMUN2OEVHBNkRx3E+2cd6GUP+sW2+hE=
Subject key identifier:   A3:4B:D3:EC:A6:D6:5C:9F:6A:03:96:39:EE:DF:E7:1C:72:48:F8:8B
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       2FEC
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 16:12:20 +0000
ROA not before:           Fri 02 Jun 2023 16:12:20 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132827
IP address blocks:        103.10.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 15:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12268 (0x2fec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jun  2 16:12:20 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647a14e4-5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:6a:a6:31:6f:64:2c:7d:72:2a:17:02:45:
                    f3:49:25:75:78:4a:31:4b:62:e6:88:6f:dd:a8:32:
                    b4:bc:c8:d2:0a:5d:a3:05:61:3f:37:9a:f7:3d:5e:
                    32:cc:40:9e:94:19:b4:ba:3a:d3:fe:a0:46:83:0f:
                    34:bd:42:b3:7d:b7:e0:35:c2:0e:ba:27:41:95:81:
                    b0:96:2f:b5:a6:38:81:cf:2e:39:c2:b8:e8:ad:19:
                    64:d3:a7:ca:f5:47:82:0f:2b:4c:fd:7c:77:04:3d:
                    b0:e4:d4:99:68:e3:3a:f0:64:45:30:3a:ac:ee:e3:
                    d6:c6:62:ab:77:9b:42:d2:8c:07:fa:b1:78:4f:0c:
                    40:97:54:73:82:58:d6:53:29:48:8f:c7:6f:06:6a:
                    85:8f:22:6d:83:21:c9:fb:33:44:55:48:6b:22:a1:
                    3d:8c:03:80:2b:93:6a:ac:a4:5a:fb:d4:e2:94:21:
                    8a:3c:4a:f2:d6:a3:0f:e7:91:78:6d:8e:76:13:f4:
                    24:2b:a2:ce:33:ed:cd:09:f1:ff:aa:2e:57:59:37:
                    dc:93:b8:21:f5:d5:da:65:d3:9e:5e:55:af:75:4c:
                    be:a9:c3:d6:09:48:bd:30:53:51:c5:bf:60:71:40:
                    c1:1f:00:88:dc:75:e0:d9:be:0f:4a:10:c8:70:ec:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:D3:EC:A6:D6:5C:9F:6A:03:96:39:EE:DF:E7:1C:72:48:F8:8B
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:6f:ed:49:50:35:f6:54:7a:ea:ce:61:96:99:12:f8:ab:a9:
         61:4f:37:89:c0:27:30:b5:64:a7:ab:63:4a:82:44:5f:ae:d7:
         57:bd:26:43:fe:8f:e4:c8:73:4d:d6:03:5a:a3:9e:84:13:cc:
         ed:ad:76:d6:ec:07:87:5e:dd:82:18:28:f1:8d:96:c4:d3:a5:
         3f:6b:9c:13:2b:b1:51:2e:b1:48:fd:c8:6e:94:f3:ec:5c:17:
         b6:c4:93:d8:54:32:49:fc:d9:15:f9:7c:56:04:34:84:e8:8a:
         6e:fd:82:19:5b:74:93:b8:c3:f5:9a:24:e3:0e:19:53:64:21:
         45:43:fa:b4:b3:f8:7e:60:b3:a2:2c:8f:fd:09:6a:b4:18:59:
         63:ec:5e:c1:23:95:20:43:78:17:20:e1:ca:58:63:17:a8:d4:
         bb:5e:57:fd:01:0d:d5:4e:2f:8b:44:94:61:b6:21:82:10:53:
         ab:0f:47:0c:7e:2d:b1:10:f3:a7:5f:56:a5:54:ac:e8:cc:57:
         8d:31:9f:bc:be:3c:c9:c8:8f:b5:e8:e7:4d:52:6e:5f:05:a3:
         6a:de:6e:79:ed:ed:0a:69:75:db:49:ec:45:88:4e:c0:56:07:
         0a:e7:e4:83:3d:9a:48:fc:bc:f3:bf:72:c8:4e:1b:fb:a0:d9:
         61:bc:85:e7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICL+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG
OEJEMEY1QzkwHhcNMjMwNjAyMTYxMjIwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDdhMTRlNC01ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGxqpjFvZCx9cioXAkXzSSV1eEoxS2LmiG/dqDK0vMjSCl2jBWE/N5r3PV4y
zECelBm0ujrT/qBGgw80vUKzfbfgNcIOuidBlYGwli+1pjiBzy45wrjorRlk06fK
9UeCDytM/Xx3BD2w5NSZaOM68GRFMDqs7uPWxmKrd5tC0owH+rF4TwxAl1RzgljW
UylIj8dvBmqFjyJtgyHJ+zNEVUhrIqE9jAOAK5NqrKRa+9TilCGKPEry1qMP55F4
bY52E/QkK6LOM+3NCfH/qi5XWTfck7gh9dXaZdOeXlWvdUy+qcPWCUi9MFNRxb9g
cUDBHwCI3HXg2b4PShDIcOzPcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKNL0+ym
1lyfagOWOe7f5xxySPiLMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE
RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjE0NjEvRkNFOUE2ODBCREY1MTFFMjhBOTA0RkI0Njg4NjVDRUUvMzI1MzhCNEVC
Q0UzMTFFQTk1M0ZCQjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnCiYwDQYJKoZIhvcNAQELBQADggEBAJlv7UlQNfZUeurO
YZaZEvirqWFPN4nAJzC1ZKerY0qCRF+u11e9JkP+j+TIc03WA1qjnoQTzO2tdtbs
B4de3YIYKPGNlsTTpT9rnBMrsVEusUj9yG6U8+xcF7bEk9hUMkn82RX5fFYENITo
im79ghlbdJO4w/WaJOMOGVNkIUVD+rSz+H5gs6Isj/0JarQYWWPsXsEjlSBDeBcg
4cpYYxeo1LteV/0BDdVOL4tElGG2IYIQU6sPRwx+LbEQ86dfVqVUrOjMV40xn7y+
PMnIj7Xo501Sbl8Fo2rebnnt7QppddtJ7EWITsBWBwrn5IM9mkj8vPO/cshOG/ug
2WG8hec=
-----END CERTIFICATE-----
Generated at Thu May 16 17:51:50 2024 by rpki-client on console-ams.rpki-client.org