Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
File:                     F87DB8B440C811EEB681DC40C4F9AE02.roa (raw, json)
Hash identifier:          qoJIoB5IZhCrFKoONH6w1qM5F//MbDhtykwiUAx2/AY=
Subject key identifier:   8F:DF:36:78:7C:EB:F5:BC:B5:7E:45:CB:9E:16:D3:26:E9:55:FB:7A
Certificate issuer:       /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial:       340C
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
Signing time:             Sat 10 Aug 2024 15:41:05 +0000
ROA not before:           Sat 10 Aug 2024 15:41:05 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     396904
IP address blocks:        103.14.97.0/24 maxlen: 24
                          103.14.98.0/24 maxlen: 24
                          103.14.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13324 (0x340c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
        Validity
            Not Before: Aug 10 15:41:05 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66b78a11-6a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:68:9c:60:18:03:73:aa:90:ed:66:bd:51:
                    ea:61:b7:75:7a:24:1b:80:ee:af:37:fa:a2:da:ea:
                    f4:a6:5c:9b:92:5e:4a:30:4f:3b:4c:ae:75:a3:0d:
                    35:6d:5a:5d:b4:b0:27:d8:27:89:aa:a7:67:f9:ac:
                    bc:3c:a8:b7:55:a1:49:52:ce:d0:b9:0f:1e:10:6f:
                    6b:67:19:de:7e:92:bd:c8:8a:62:3d:bb:f4:ee:80:
                    e6:a4:f9:d2:e6:c3:5c:50:99:3b:0a:5a:93:f8:8b:
                    e1:48:51:e5:b5:e3:4a:07:0b:5a:ee:78:d8:71:2d:
                    5b:21:65:c4:38:4d:a6:b3:66:b5:12:33:15:43:a4:
                    1f:3d:8f:37:95:78:5d:0d:e4:8a:b6:31:df:bb:56:
                    61:c0:bc:06:f8:66:df:9a:87:b3:17:43:30:d4:e3:
                    ab:d7:a7:c2:2f:60:a0:7e:2d:f1:95:ba:b3:98:ce:
                    c2:5a:9c:e1:cc:8d:ce:e1:a6:b1:fe:fc:af:32:68:
                    e7:b1:ab:60:ba:94:ab:2d:cd:b1:e5:b0:24:69:77:
                    77:af:f1:3a:30:31:31:60:a3:c0:1b:3c:33:8c:de:
                    49:d3:c3:2a:bf:93:66:c2:d0:86:5f:71:b2:5f:c5:
                    79:91:76:12:75:0b:bd:46:3c:8a:f2:b6:a4:e3:11:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:36:78:7C:EB:F5:BC:B5:7E:45:CB:9E:16:D3:26:E9:55:FB:7A
            X509v3 Authority Key Identifier:
                keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.97.0-103.14.99.255

    Signature Algorithm: sha256WithRSAEncryption
         88:24:11:47:ca:ae:56:84:c4:42:8b:83:48:84:4b:ff:03:20:
         68:78:df:c1:d6:00:a9:e2:df:99:e4:2f:d4:6e:7c:3a:06:5a:
         92:54:40:2c:58:30:b2:86:19:ba:7c:e9:18:7f:4b:47:0b:0a:
         c7:d6:d6:11:02:65:39:36:3f:06:90:96:07:9e:8f:fb:b9:21:
         09:dc:18:c4:8b:06:0f:b3:46:07:2e:5d:30:b1:b4:fe:5a:80:
         5d:49:75:3a:11:35:f9:fe:6b:93:03:a5:95:ce:b3:d3:e4:b2:
         00:94:04:b9:09:66:18:c7:3c:20:54:66:7f:10:d7:9c:fc:37:
         3c:33:a7:1c:59:c4:c5:6b:03:b1:95:2c:a8:5c:be:52:72:2f:
         2f:08:4a:63:51:6e:9e:75:b3:79:c2:ef:cd:5d:48:eb:1f:b6:
         9f:8b:f1:46:f9:f3:33:48:d6:7a:d1:ff:da:15:ba:12:ff:fb:
         99:98:f5:37:d4:f1:2d:07:1b:af:2a:f4:b5:e8:15:52:ef:b8:
         80:e3:2b:e8:21:65:c8:3d:a3:2a:c7:d3:af:7f:4f:fd:7c:1c:
         24:81:04:1b:0e:e8:24:f8:77:b9:88:7f:b9:d9:a2:32:6c:a2:
         ad:17:d2:d1:ab:90:dd:79:16:9d:88:d3:31:1c:8a:ea:dc:df:
         99:b2:63:84
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICNAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND
QUU4QkY5MEQwHhcNMjQwODEwMTU0MTA1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmI3OGExMS02YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueZonGAYA3OqkO1mvVHqYbd1eiQbgO6vN/qi2ur0plybkl5KME87TK51ow01
bVpdtLAn2CeJqqdn+ay8PKi3VaFJUs7QuQ8eEG9rZxnefpK9yIpiPbv07oDmpPnS
5sNcUJk7ClqT+IvhSFHlteNKBwta7njYcS1bIWXEOE2ms2a1EjMVQ6QfPY83lXhd
DeSKtjHfu1ZhwLwG+GbfmoezF0Mw1OOr16fCL2Cgfi3xlbqzmM7CWpzhzI3O4aax
/vyvMmjnsatgupSrLc2x5bAkaXd3r/E6MDExYKPAGzwzjN5J08Mqv5NmwtCGX3Gy
X8V5kXYSdQu9RjyK8rak4xELiQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFI/fNnh8
6/W8tX5Fy54W0ybpVft6MB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE
QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThCQUYvMzJEOEUyMkUxREFCMTFFMkE5N0QyM0E5MDhCMDJDRDIvRjg3REI4QjQ0
MEM4MTFFRUI2ODFEQzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAGcOYQMEAmcOYDANBgkqhkiG9w0BAQsFAAOCAQEAiCQR
R8quVoTEQouDSIRL/wMgaHjfwdYAqeLfmeQv1G58OgZaklRALFgwsoYZunzpGH9L
RwsKx9bWEQJlOTY/BpCWB56P+7khCdwYxIsGD7NGBy5dMLG0/lqAXUl1OhE1+f5r
kwOllc6z0+SyAJQEuQlmGMc8IFRmfxDXnPw3PDOnHFnExWsDsZUsqFy+UnIvLwhK
Y1FunnWzecLvzV1I6x+2n4vxRvnzM0jWetH/2hW6Ev/7mZj1N9TxLQcbryr0tegV
Uu+4gOMr6CFlyD2jKsfTr39P/XwcJIEEGw7oJPh3uYh/udmiMmyirRfS0auQ3XkW
nYjTMRyK6tzfmbJjhA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org