Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/97EFA28EE5A911ED80EF757BC4F9AE02.roa
File:                     97EFA28EE5A911ED80EF757BC4F9AE02.roa (raw, json)
Hash identifier:          FqYmcTF/6Y1nQYcY29/jdoG0ePxilWZunrJgFCUco84=
Subject key identifier:   48:0C:4E:84:71:63:63:D6:A1:22:11:3A:28:64:7C:1C:2F:E8:F7:E1
Certificate issuer:       /CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
Certificate serial:       30
Authority key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/97EFA28EE5A911ED80EF757BC4F9AE02.roa
Signing time:             Mon 17 Jul 2023 04:43:59 +0000
ROA not before:           Mon 17 Jul 2023 04:43:59 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     34985
IP address blocks:        103.96.0.0/24 maxlen: 24
                          103.96.3.0/24 maxlen: 24
                          113.212.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
        Validity
            Not Before: Jul 17 04:43:59 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b4c70e-0589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:ea:4d:7b:25:88:ca:8e:05:23:b7:f6:48:
                    53:0a:34:7c:90:ff:af:6f:9f:f8:37:55:49:02:49:
                    ab:2f:37:ff:cd:97:03:ee:f6:00:ff:ea:52:54:97:
                    67:78:39:f8:86:66:2d:ad:35:d1:54:af:51:ab:c6:
                    18:fb:8d:8f:8b:77:a1:dc:df:0d:70:51:07:17:ff:
                    e7:39:bc:75:29:47:06:46:88:48:0e:a7:b6:b5:7b:
                    ba:67:48:80:ac:e3:11:65:19:43:fe:01:71:0d:67:
                    1c:57:0c:e0:c5:9a:15:b6:1b:80:e4:d4:1d:8f:7d:
                    54:ca:53:8c:61:4a:4f:fe:ef:a8:59:7b:27:66:06:
                    5c:46:9b:3f:ba:ea:8e:53:4c:79:ee:5b:1b:a8:e4:
                    bc:0a:52:ad:75:61:19:59:7c:98:99:03:8e:59:c6:
                    2b:1c:a4:5c:78:df:94:12:5a:b0:20:9a:e4:f0:5a:
                    aa:72:6e:fc:fb:13:f3:9b:e3:ea:df:48:22:f1:0c:
                    5f:eb:a2:2c:82:cf:37:9d:e0:9e:3d:69:34:06:b4:
                    26:62:b0:93:c7:88:c8:d1:e1:cc:f5:47:7c:30:cd:
                    19:38:0b:a9:88:45:26:8a:11:cc:eb:3a:8e:06:60:
                    48:b5:56:6c:a2:0f:aa:60:c6:6f:bf:5e:42:ce:92:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0C:4E:84:71:63:63:D6:A1:22:11:3A:28:64:7C:1C:2F:E8:F7:E1
            X509v3 Authority Key Identifier:
                keyid:2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/97EFA28EE5A911ED80EF757BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.0.0/24
                  103.96.3.0/24
                  113.212.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:28:83:49:17:a5:30:7a:c9:dc:f0:05:4d:b9:5d:fa:98:bd:
         7b:76:f6:91:7e:ff:6d:cc:18:22:4a:9e:78:ed:59:6d:96:07:
         fc:1d:77:39:67:ba:c5:65:3c:c2:02:87:30:b0:25:ec:f2:91:
         ec:70:7c:d8:02:7b:e1:03:14:c2:e9:c0:41:58:11:51:2a:ff:
         36:a0:41:56:d5:65:4d:b2:4d:8c:7e:56:e8:e9:2c:8c:db:8d:
         78:87:29:5b:1f:8c:c5:07:e5:9f:1a:26:4a:7a:56:cb:35:23:
         39:11:21:dc:d3:a7:20:54:1b:96:f9:86:ab:09:c8:88:cd:71:
         cb:5c:d7:68:28:15:54:35:3b:c8:17:de:8b:d7:e8:e6:78:bc:
         da:c7:39:0e:ff:12:75:fd:fe:8c:83:7e:d7:7b:b7:2f:d3:b2:
         df:4b:37:77:08:b4:b4:92:02:eb:5b:20:a0:dc:dd:0f:1a:22:
         0f:3f:93:10:91:dd:dd:30:aa:55:35:23:9f:b5:be:e0:57:93:
         a5:3c:dc:46:11:b6:24:46:c1:25:d4:6a:d4:e2:5b:04:2c:04:
         4f:44:e7:d4:dd:95:da:fc:57:2a:4f:26:e1:10:8e:ac:0c:00:
         75:34:0f:5b:d7:2a:68:c7:1b:f6:da:f0:ce:b7:6b:88:ab:f0:
         bc:49:dc:3d
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NTExNDExMC8GA1UEBRMoMkM4OEJDNjBBMzg0Nzk3OTNCNTU0NzBDMzc3RUQyM0VB
MDJEMDcyMjAeFw0yMzA3MTcwNDQzNTlaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YjRjNzBlLTA1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCXwepNeyWIyo4FI7f2SFMKNHyQ/69vn/g3VUkCSasvN//NlwPu9gD/6lJUl2d4
OfiGZi2tNdFUr1Grxhj7jY+Ld6Hc3w1wUQcX/+c5vHUpRwZGiEgOp7a1e7pnSICs
4xFlGUP+AXENZxxXDODFmhW2G4Dk1B2PfVTKU4xhSk/+76hZeydmBlxGmz+66o5T
THnuWxuo5LwKUq11YRlZfJiZA45ZxiscpFx435QSWrAgmuTwWqpybvz7E/Ob4+rf
SCLxDF/roiyCzzed4J49aTQGtCZisJPHiMjR4cz1R3wwzRk4C6mIRSaKEczrOo4G
YEi1VmyiD6pgxm+/XkLOkiDzAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUSAxOhHFj
Y9ahIhE6KGR8HC/o9+EwHwYDVR0jBBgwFoAULIi8YKOEeXk7VUcMN37SPqAtByIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1MTE0LzM0RTE5RTg4RTVB
MjExRUQ4MDhDRjM3N0M0RjlBRTAyL0xJaThZS09FZVhrN1ZVY01OMzdTUHFBdEJ5
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTElpOFlLT0VlWGs3VlVjTU4zN1NQcUF0QnlJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTExNC8zNEUxOUU4OEU1QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi85N0VGQTI4RUU1
QTkxMUVEODBFRjc1N0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAGdgAAMEAGdgAwMEAHHUWDANBgkqhkiG9w0BAQsFAAOCAQEA
sCiDSRelMHrJ3PAFTbld+pi9e3b2kX7/bcwYIkqeeO1ZbZYH/B13OWe6xWU8wgKH
MLAl7PKR7HB82AJ74QMUwunAQVgRUSr/NqBBVtVlTbJNjH5W6OksjNuNeIcpWx+M
xQflnxomSnpWyzUjOREh3NOnIFQblvmGqwnIiM1xy1zXaCgVVDU7yBfei9fo5ni8
2sc5Dv8Sdf3+jIN+13u3L9Oy30s3dwi0tJIC61sgoNzdDxoiDz+TEJHd3TCqVTUj
n7W+4FeTpTzcRhG2JEbBJdRq1OJbBCwET0Tn1N2V2vxXKk8m4RCOrAwAdTQPW9cq
aMcb9trwzrdriKvwvEncPQ==
-----END CERTIFICATE-----
Generated at Sat May 11 07:51:06 2024 by rpki-client on console-ams.rpki-client.org