Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/93D558E84A8411EE8643216EC4F9AE02.roa
File:                     93D558E84A8411EE8643216EC4F9AE02.roa (raw, json)
Hash identifier:          2GHJ1eE18Gw1U3Nhz428VPqQLi1QexDRz0jLOu9pd2U=
Subject key identifier:   D6:EB:0C:96:1C:A8:20:52:38:0C:FE:7F:A2:40:6C:61:5B:26:9E:3D
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       019C
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/93D558E84A8411EE8643216EC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 03:21:50 +0000
ROA not before:           Tue 03 Jun 2025 03:21:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150731
IP address blocks:        103.132.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: Jun  3 03:21:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e6a4d-da09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:dd:19:fd:5d:08:66:d4:a0:8a:e8:21:67:
                    c8:b8:fb:ff:9a:13:c4:6d:33:c2:59:38:d8:e3:23:
                    58:7b:8c:70:b2:bc:b3:aa:3c:bf:ac:69:25:46:1a:
                    3f:1c:41:02:0a:7b:54:8c:99:68:22:c0:3b:09:47:
                    d6:f0:4c:c0:c6:d1:e8:14:0f:8a:5c:a3:a9:12:fe:
                    1c:95:68:c8:9a:b9:86:a3:63:32:4d:2e:40:b1:2e:
                    5c:08:98:81:ac:1f:ee:c0:7a:82:42:20:bf:ae:3f:
                    45:88:c2:05:5f:a8:3a:c4:3c:1a:bd:f7:0e:67:59:
                    17:eb:27:8e:ad:3a:09:d5:4c:24:98:5c:a2:cc:b7:
                    42:42:8a:1c:b1:c1:61:a9:ab:db:63:fc:76:95:fc:
                    a1:d5:39:e2:5e:8e:00:f9:47:7e:c6:92:49:e7:fe:
                    11:4f:93:e6:4b:df:0d:96:02:5c:be:f5:9a:3a:72:
                    3e:1f:8a:0a:53:60:bc:8a:75:0d:55:f9:b8:0f:1b:
                    a6:c2:15:35:1e:d4:c6:2e:95:9e:31:a1:64:48:38:
                    5a:65:a9:5a:c6:f4:af:6f:a4:a9:6e:6f:7a:ba:2b:
                    ce:19:12:89:83:8c:32:e2:1e:35:b8:36:d2:34:0d:
                    78:36:de:2b:bb:96:2c:6d:59:82:60:64:c9:e1:e8:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:0C:96:1C:A8:20:52:38:0C:FE:7F:A2:40:6C:61:5B:26:9E:3D
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/93D558E84A8411EE8643216EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:86:d5:dc:53:0a:3d:e3:8c:61:97:23:84:5b:3f:be:ad:c5:
         97:83:34:3c:a7:98:65:ed:09:9d:4b:25:d4:5f:35:0b:61:78:
         cd:3c:da:a9:11:ee:68:38:60:10:1d:85:30:c5:e8:47:b5:c8:
         39:97:92:62:8c:ff:cc:97:22:68:55:2e:0c:0e:e8:2b:d5:92:
         fc:80:92:ff:9e:68:6e:a5:8d:d2:0c:18:ac:fa:f4:76:b9:7c:
         8c:fe:dc:d2:6e:a6:13:08:5b:e3:a6:b3:59:ea:52:1c:b9:a8:
         2d:b1:70:4f:bd:06:93:ac:7f:2f:a6:52:e8:06:d8:b1:ea:3c:
         58:d1:8e:25:71:d8:b0:df:93:69:04:e7:17:a5:c8:22:36:ea:
         56:a9:33:5d:47:9f:b2:36:7b:eb:d9:05:b0:56:69:a4:71:61:
         92:7d:50:a5:c8:61:18:56:6e:aa:3e:da:65:de:30:c8:a1:b4:
         62:07:61:f5:98:a3:5e:5e:82:64:da:dd:71:10:c8:f5:33:9a:
         21:48:74:e3:71:46:41:74:1a:57:de:9d:65:ef:1a:6f:df:9e:
         05:95:a0:83:8a:ba:7c:97:6a:b0:80:de:99:f0:bb:e3:6d:1e:
         e9:e1:ab:b4:01:e6:64:2a:ba:2d:23:e3:94:b9:5f:05:d7:54:
         9e:ec:2a:73
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4NTgxMTAvBgNVBAUTKDc4NDFBMDc4NkE3RDc4NDY0NTlGQjU5NzhCRkJCQjJE
OTBBMUVFRTcwHhcNMjUwNjAzMDMyMTUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlNmE0ZC1kYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNTdGf1dCGbUoIroIWfIuPv/mhPEbTPCWTjY4yNYe4xwsryzqjy/rGklRho/
HEECCntUjJloIsA7CUfW8EzAxtHoFA+KXKOpEv4clWjImrmGo2MyTS5AsS5cCJiB
rB/uwHqCQiC/rj9FiMIFX6g6xDwavfcOZ1kX6yeOrToJ1UwkmFyizLdCQoocscFh
qavbY/x2lfyh1TniXo4A+Ud+xpJJ5/4RT5PmS98NlgJcvvWaOnI+H4oKU2C8inUN
Vfm4DxumwhU1HtTGLpWeMaFkSDhaZalaxvSvb6Spbm96uivOGRKJg4wy4h41uDbS
NA14Nt4ru5YsbVmCYGTJ4ei94wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNbrDJYc
qCBSOAz+f6JAbGFbJp49MB8GA1UdIwQYMBaAFHhBoHhqfXhGRZ+1l4v7uy2Qoe7n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDg1OC8zMjU1MzhCNERE
QjkxMUVEODg4N0MxNjhDNEY5QUUwMi9lRUdnZUdwOWVFWkZuN1dYaV91N0xaQ2g3
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFR2dlR3A5ZUVaRm43V1hpX3U3TFpDaDd1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQ4NTgvMzI1NTM4QjREREI5MTFFRDg4ODdDMTY4QzRGOUFFMDIvOTNENTU4RTg0
QTg0MTFFRTg2NDMyMTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhCswDQYJKoZIhvcNAQELBQADggEBAFmG1dxTCj3jjGGX
I4RbP76txZeDNDynmGXtCZ1LJdRfNQtheM082qkR7mg4YBAdhTDF6Ee1yDmXkmKM
/8yXImhVLgwO6CvVkvyAkv+eaG6ljdIMGKz69Ha5fIz+3NJuphMIW+Oms1nqUhy5
qC2xcE+9BpOsfy+mUugG2LHqPFjRjiVx2LDfk2kE5xelyCI26lapM11Hn7I2e+vZ
BbBWaaRxYZJ9UKXIYRhWbqo+2mXeMMihtGIHYfWYo15egmTa3XEQyPUzmiFIdONx
RkF0GlfenWXvGm/fngWVoIOKunyXarCA3pnwu+NtHunhq7QB5mQqui0j45S5XwXX
VJ7sKnM=
-----END CERTIFICATE-----
Generated at Thu Jul 3 11:09:29 2025 by rpki-client