Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
File:                     B7A19306B43111EEB373D20BC4F9AE02.roa (raw, json)
Hash identifier:          p03IaXdoucRW+JeB0a3V5wQ0r6Xuoboe4Qb2cXTY05U=
Subject key identifier:   86:CE:94:A2:54:EA:2E:53:84:5C:ED:8F:69:D9:83:50:A7:CB:E9:4D
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       019A
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
Signing time:             Tue 29 Apr 2025 04:09:52 +0000
ROA not before:           Tue 29 Apr 2025 04:09:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150783
IP address blocks:        103.94.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
                          rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Apr 29 04:09:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6810510f-b7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:cb:56:fc:4e:92:d4:f4:98:c1:cd:70:22:
                    2f:bf:09:29:c9:56:0c:54:9f:29:71:86:db:fb:43:
                    ad:ed:90:70:53:bb:6b:34:0d:b4:d8:2f:e3:32:60:
                    2f:cf:74:e6:48:6f:8c:b8:6a:24:1d:3a:80:7a:a3:
                    74:a3:4f:eb:9f:94:fa:3e:73:4b:1b:6d:4e:15:e8:
                    36:1c:c6:75:1b:92:3a:31:39:1e:df:1b:58:bd:71:
                    4f:00:49:f8:50:b3:9f:f9:19:ea:f2:2d:c8:29:a2:
                    46:38:ee:08:18:98:f5:93:b7:8e:c1:2e:80:c2:32:
                    b0:71:d6:93:cc:c7:2d:e0:06:d5:f5:f0:a3:e1:6f:
                    c2:3e:c2:8b:bd:8e:19:27:4a:03:54:c6:dd:36:3b:
                    5a:c2:a3:15:f2:e1:e9:64:8e:28:aa:42:4b:b9:e5:
                    32:59:b7:0a:2f:72:c8:3f:01:c5:8b:db:a2:48:0d:
                    5c:f3:e9:3d:91:37:07:e6:ef:9c:27:5c:ee:b4:98:
                    06:cd:82:3f:01:91:ce:86:1b:77:04:f3:c8:57:4e:
                    10:e7:9b:75:b4:55:22:2b:12:da:4b:21:d7:5a:88:
                    4e:47:82:d4:ba:bd:7c:ab:6b:b1:a5:38:e7:71:c0:
                    ea:a9:27:00:9b:a3:83:66:8a:83:3e:30:9b:5d:e6:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CE:94:A2:54:EA:2E:53:84:5C:ED:8F:69:D9:83:50:A7:CB:E9:4D
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:4f:f9:12:bb:ac:4a:fb:88:a6:6e:e8:13:ad:24:06:c3:
         12:6a:bb:35:d9:93:7e:ce:83:3d:f4:69:c4:a3:ac:af:f3:66:
         d1:3d:dd:9c:fb:86:15:7c:10:24:98:c1:5a:f1:a1:4e:f2:f6:
         e7:73:97:64:b6:cf:69:3a:b7:5e:83:f4:c9:31:60:06:7c:d7:
         a9:b8:32:58:98:57:9e:8b:d4:f2:8c:85:df:5f:a4:94:99:71:
         14:9a:33:de:cd:53:c1:d2:9b:1d:80:ae:71:61:19:fd:69:63:
         37:1f:11:4f:37:ff:93:89:05:a8:1f:5c:7e:48:04:7f:93:08:
         92:a5:3a:f8:27:f4:db:40:3e:da:3e:d6:0e:25:84:d9:47:74:
         0e:c1:09:a7:02:e2:e6:7d:62:b1:d2:e2:1f:37:b9:4d:9e:ae:
         9c:09:49:3a:fd:af:a4:9a:f4:c7:62:6e:80:4d:62:73:82:1d:
         ad:f0:2a:87:d6:77:ed:3d:23:e0:96:43:27:40:3f:1f:08:03:
         33:da:12:50:e8:2e:82:e5:a6:dd:d0:93:28:5f:92:dd:ba:da:
         7b:6e:63:62:b8:6a:84:ae:bc:6d:58:01:64:d2:eb:d8:b7:0a:
         a1:99:f4:ee:e8:77:4a:d4:19:7e:d1:d2:a4:b1:1f:6f:f4:99:
         e9:cf:5f:12
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRjIxMTAvBgNVBAUTKDZBNzlCNzAzOUUzM0JFOUFFNjY5QzUxNjEwMzdFMDg0
MDExNzYyMEEwHhcNMjUwNDI5MDQwOTUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEwNTEwZi1iN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyuDLVvxOktT0mMHNcCIvvwkpyVYMVJ8pcYbb+0Ot7ZBwU7trNA202C/jMmAv
z3TmSG+MuGokHTqAeqN0o0/rn5T6PnNLG21OFeg2HMZ1G5I6MTke3xtYvXFPAEn4
ULOf+Rnq8i3IKaJGOO4IGJj1k7eOwS6AwjKwcdaTzMct4AbV9fCj4W/CPsKLvY4Z
J0oDVMbdNjtawqMV8uHpZI4oqkJLueUyWbcKL3LIPwHFi9uiSA1c8+k9kTcH5u+c
J1zutJgGzYI/AZHOhht3BPPIV04Q55t1tFUiKxLaSyHXWohOR4LUur18q2uxpTjn
ccDqqScAm6ODZoqDPjCbXeadUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIbOlKJU
6i5ThFztj2nZg1Cny+lNMB8GA1UdIwQYMBaAFGp5twOeM76a5mnFFhA34IQBF2IK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFGMi85OUY3QTM0QUQy
Q0QxMUVEODA2MDc3MjJDNEY5QUUwMi9hbm0zQTU0enZwcm1hY1VXRURmZ2hBRVhZ
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FubTNBNTR6dnBybWFjVVdFRGZnaEFFWFlnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0QxRjIvOTlGN0EzNEFEMkNEMTFFRDgwNjA3NzIyQzRGOUFFMDIvQjdBMTkzMDZC
NDMxMTFFRUIzNzNEMjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnXuowDQYJKoZIhvcNAQELBQADggEBAFO9T/kSu6xK+4im
bugTrSQGwxJquzXZk37Ogz30acSjrK/zZtE93Zz7hhV8ECSYwVrxoU7y9udzl2S2
z2k6t16D9MkxYAZ816m4MliYV56L1PKMhd9fpJSZcRSaM97NU8HSmx2ArnFhGf1p
YzcfEU83/5OJBagfXH5IBH+TCJKlOvgn9NtAPto+1g4lhNlHdA7BCacC4uZ9YrHS
4h83uU2erpwJSTr9r6Sa9MdiboBNYnOCHa3wKofWd+09I+CWQydAPx8IAzPaElDo
LoLlpt3Qkyhfkt262ntuY2K4aoSuvG1YAWTS69i3CqGZ9O7od0rUGX7R0qSxH2/0
menPXxI=
-----END CERTIFICATE-----
Generated at Tue May 13 15:12:07 2025 by rpki-client