Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/5DB3B5AA145C11EFAE012A55C4F9AE02.roa
File:                     5DB3B5AA145C11EFAE012A55C4F9AE02.roa (raw, json)
Hash identifier:          IjBd7XUR2i0dTIqKZWCJ7zm+gZSogWBX4IMREVDmhgQ=
Subject key identifier:   F6:13:24:F7:2A:2B:17:5D:C9:73:A6:27:63:80:FA:06:8D:97:22:2F
Certificate issuer:       /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial:       C9
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/5DB3B5AA145C11EFAE012A55C4F9AE02.roa
Signing time:             Wed 07 May 2025 05:12:50 +0000
ROA not before:           Wed 07 May 2025 05:12:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137922
IP address blocks:        103.111.180.0/23 maxlen: 23
                          103.111.182.0/24 maxlen: 24
                          103.111.183.0/24 maxlen: 24
                          2402:a0c0::/48 maxlen: 48
                          2402:a0c0:1::/48 maxlen: 48
                          2402:a0c0:2::/48 maxlen: 48
                          2402:a0c0:3::/48 maxlen: 48
                          2402:a0c0:4::/48 maxlen: 48
                          2402:a0c0:5::/48 maxlen: 48
                          2402:a0c0:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
                          rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
        Validity
            Not Before: May  7 05:12:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681aebd2-b5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d5:9d:8d:f5:9a:fe:f3:b8:18:fb:68:4a:7a:
                    89:22:a3:11:34:de:d9:97:16:15:7d:88:06:d0:74:
                    99:d3:8f:30:d7:72:dd:f9:8a:97:c8:01:56:bf:6c:
                    fb:f6:87:00:82:69:3f:9a:28:d7:ed:8e:91:83:2c:
                    e0:49:b6:97:2f:91:ca:37:15:a0:c7:43:4c:64:5b:
                    81:09:ec:18:a9:73:71:29:04:21:3c:4d:f1:be:ac:
                    74:d4:91:b1:15:e6:19:6b:2f:16:90:7a:c1:9f:89:
                    b4:46:81:f2:57:47:b8:8c:71:a2:44:19:af:06:1b:
                    fd:b6:cd:15:10:61:6e:a5:3e:c0:70:6a:78:08:65:
                    89:34:f8:48:51:b8:7d:5a:3e:53:e9:11:f0:78:bd:
                    f4:76:fe:fa:22:cf:29:88:63:45:82:3b:56:ab:27:
                    f5:ff:6d:2c:bc:7d:f1:da:5b:72:83:9c:32:91:d7:
                    a1:92:f8:d5:7c:97:f5:54:d3:4d:e2:37:58:d7:bd:
                    7e:81:d2:50:6b:f8:b4:0b:6d:43:51:05:d3:46:c5:
                    d8:ee:76:16:98:9b:6e:ec:dc:06:d5:27:87:82:d9:
                    2a:49:b0:1c:1b:6d:30:f4:55:c1:31:28:39:e3:7c:
                    84:b9:69:34:eb:74:8b:ee:92:a5:54:55:13:4e:a4:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:13:24:F7:2A:2B:17:5D:C9:73:A6:27:63:80:FA:06:8D:97:22:2F
            X509v3 Authority Key Identifier:
                keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/5DB3B5AA145C11EFAE012A55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.180.0/22
                IPv6:
                  2402:a0c0::-2402:a0c0:6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:d9:d9:ab:66:92:49:69:a7:ba:d5:b9:b5:7c:91:be:68:
         4a:4a:0e:22:4e:bb:c8:55:a0:22:a6:43:7a:4a:89:6f:9d:5f:
         f1:56:c8:c6:18:9a:e9:95:46:5e:23:1f:44:1e:35:0c:03:e9:
         46:19:71:2d:c4:70:4c:95:14:8b:07:8a:34:eb:30:6f:e6:68:
         30:83:72:23:c0:a8:82:cd:62:79:33:52:9a:73:03:75:4d:23:
         93:3b:04:18:4a:95:67:30:22:6b:6d:3c:37:9c:68:95:81:9a:
         91:62:9b:b6:0e:38:b2:8c:08:c8:6e:3b:09:b1:bf:52:df:6a:
         78:1a:24:d7:72:9f:04:72:de:ed:74:a2:ff:64:d4:fb:4f:80:
         20:40:83:c1:fe:33:5d:62:1c:f7:bf:24:17:0c:54:b1:41:98:
         c4:78:dc:7f:26:4b:2e:28:39:ba:ce:29:3a:98:4b:09:7e:88:
         5a:f0:58:39:90:60:a7:fa:e1:84:5a:19:64:e5:3c:ab:05:89:
         62:dc:fc:f3:0b:83:7f:53:1b:c5:84:92:d7:fd:c3:42:88:14:
         a0:70:9e:97:48:8f:83:9e:ad:a1:52:04:03:fe:ba:b9:64:8a:
         b7:af:72:ef:37:18:3d:7a:5c:bf:eb:65:3d:b3:37:b3:d8:98:
         77:45:09:ea
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FEOTAxMTAvBgNVBAUTKDg4MDkxOEE4NzU2RjA0OTMxQTMyRjRDRUEzNDFDNEYy
M0ZBRDUwRUYwHhcNMjUwNTA3MDUxMjUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFhZWJkMi1iNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7tWdjfWa/vO4GPtoSnqJIqMRNN7ZlxYVfYgG0HSZ048w13Ld+YqXyAFWv2z7
9ocAgmk/mijX7Y6RgyzgSbaXL5HKNxWgx0NMZFuBCewYqXNxKQQhPE3xvqx01JGx
FeYZay8WkHrBn4m0RoHyV0e4jHGiRBmvBhv9ts0VEGFupT7AcGp4CGWJNPhIUbh9
Wj5T6RHweL30dv76Is8piGNFgjtWqyf1/20svH3x2ltyg5wykdehkvjVfJf1VNNN
4jdY171+gdJQa/i0C21DUQXTRsXY7nYWmJtu7NwG1SeHgtkqSbAcG20w9FXBMSg5
43yEuWk063SL7pKlVFUTTqRrEQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFPYTJPcq
KxddyXOmJ2OA+gaNlyIvMB8GA1UdIwQYMBaAFIgJGKh1bwSTGjL0zqNBxPI/rVDv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUQ5MC8wMzAwQzUxNDBG
MEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJKTWFNdlRPbzBIRThqLXRV
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lBa1lxSFZ2QkpNYU12VE9vMEhFOGotdFVPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0FEOTAvMDMwMEM1MTQwRjBBMTFFRjkwQzhBMTMyQzRGOUFFMDIvNURCM0I1QUEx
NDVDMTFFRkFFMDEyQTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMAwEAgABMAYDBAJnb7QwGAQCAAIwEjAQAwUGJAKgwAMHACQCoMAABjANBgkq
hkiG9w0BAQsFAAOCAQEAuffZ2atmkklpp7rVubV8kb5oSkoOIk67yFWgIqZDekqJ
b51f8VbIxhia6ZVGXiMfRB41DAPpRhlxLcRwTJUUiweKNOswb+ZoMINyI8Cogs1i
eTNSmnMDdU0jkzsEGEqVZzAia208N5xolYGakWKbtg44sowIyG47CbG/Ut9qeBok
13KfBHLe7XSi/2TU+0+AIECDwf4zXWIc978kFwxUsUGYxHjcfyZLLig5us4pOphL
CX6IWvBYOZBgp/rhhFoZZOU8qwWJYtz88wuDf1MbxYSS1/3DQogUoHCel0iPg56t
oVIEA/66uWSKt69y7zcYPXpcv+tlPbM3s9iYd0UJ6g==
-----END CERTIFICATE-----
Generated at Wed May 14 07:06:33 2025 by rpki-client