Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/790E442A9B1711ECB256A31CC4F9AE02.roa
File:                     790E442A9B1711ECB256A31CC4F9AE02.roa (raw, json)
Hash identifier:          Fa6SdUbTPUudXOpSSwXnBEDK9cTtldS1jBd7HoHcy+4=
Subject key identifier:   CB:90:66:39:C6:2E:C5:3B:FB:09:8B:88:BD:56:A4:1E:02:BB:40:54
Certificate issuer:       /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Certificate serial:       0847
Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/790E442A9B1711ECB256A31CC4F9AE02.roa
Signing time:             Thu 12 Jun 2025 20:58:06 +0000
ROA not before:           Thu 12 Jun 2025 20:58:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140608
IP address blocks:        103.150.238.0/24 maxlen: 24
                          103.150.239.0/24 maxlen: 24
                          2001:df3:9880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl
                          rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
        Validity
            Not Before: Jun 12 20:58:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=684b3f5e-13ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:44:24:69:e2:ee:62:28:46:15:dc:c1:f6:
                    e0:61:15:79:96:cf:f2:9a:a5:10:08:0c:a6:b5:3b:
                    b7:3d:7d:2a:c1:85:8e:cd:2e:58:26:4d:9b:dd:34:
                    a7:81:e2:c4:5a:e8:da:36:82:c0:02:0d:a1:71:bb:
                    b8:73:a4:f6:3d:f4:93:46:fc:1f:f6:ba:29:89:f8:
                    32:3d:f8:34:a4:42:f0:f7:9e:6f:e4:d7:44:71:37:
                    14:55:8e:da:dc:24:fc:ef:26:f1:fb:fa:3c:7f:0e:
                    fb:99:7a:0b:39:9f:c4:71:50:0e:3a:59:96:b8:eb:
                    8b:cb:1a:0d:78:c6:f1:f4:81:37:3c:67:51:c4:b1:
                    8a:42:79:92:ca:2b:11:24:2f:6a:25:a0:9a:a4:65:
                    ee:42:72:5a:f3:4a:b5:bd:d3:42:05:36:3d:09:49:
                    d5:ab:d8:76:98:7c:ce:4c:00:3c:36:d1:e0:f3:a7:
                    9a:0e:fc:73:71:92:68:c6:c9:18:f4:43:bd:5a:94:
                    ef:65:25:60:30:8c:da:08:b9:4b:85:52:70:04:a9:
                    45:63:79:47:cb:68:cb:97:9e:88:9b:7e:f4:d8:14:
                    49:70:70:fb:37:2c:0c:ef:0d:24:58:c0:61:33:12:
                    91:49:e2:d3:23:a7:05:f9:20:b4:12:52:90:37:17:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:90:66:39:C6:2E:C5:3B:FB:09:8B:88:BD:56:A4:1E:02:BB:40:54
            X509v3 Authority Key Identifier:
                keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/790E442A9B1711ECB256A31CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.238.0/23
                IPv6:
                  2001:df3:9880::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:95:e1:67:ad:be:89:e1:c8:4b:be:ad:30:65:2f:0c:dc:30:
         87:6b:5b:17:a9:8e:64:2d:8e:09:1c:fc:34:5d:42:05:f6:e5:
         f3:2b:12:15:0a:c8:6b:d2:b5:30:ba:3e:07:6e:84:b3:95:f3:
         f6:92:c2:38:5a:92:19:b8:64:f1:9c:12:15:3d:3f:67:f0:3b:
         38:b2:52:b7:d8:67:ab:b4:66:56:7f:a1:78:d2:0f:54:63:ef:
         fc:88:2f:d1:54:69:10:6b:fb:21:27:15:7e:4c:a0:22:bc:dc:
         76:5c:1e:fa:50:57:ac:f6:0c:03:91:61:a8:25:27:3f:c0:3c:
         85:bc:df:82:ef:23:c8:cf:fd:cc:7e:8a:8a:e3:02:b0:58:c7:
         8c:b9:c6:17:64:a5:6a:19:13:65:c6:4e:a8:f7:2d:66:9d:50:
         0e:4f:69:83:54:8c:69:93:4f:7d:e7:2b:d8:40:a5:19:5a:d9:
         5d:f3:90:ef:9e:37:93:fd:92:00:12:c0:ac:2a:7b:3a:93:16:
         cc:74:ea:60:6b:42:f3:5c:5d:10:21:fb:3e:75:25:a9:90:38:
         63:38:c5:df:4c:fd:11:a4:a0:19:6c:1a:1e:ec:ef:26:54:38:
         e1:8b:89:58:9e:6e:62:68:65:1b:12:e5:e0:a4:12:91:21:86:
         f9:b6:c3:a3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE
NUY5Q0I3MzUwHhcNMjUwNjEyMjA1ODA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODRiM2Y1ZS0xM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA339EJGni7mIoRhXcwfbgYRV5ls/ymqUQCAymtTu3PX0qwYWOzS5YJk2b3TSn
geLEWujaNoLAAg2hcbu4c6T2PfSTRvwf9ropifgyPfg0pELw955v5NdEcTcUVY7a
3CT87ybx+/o8fw77mXoLOZ/EcVAOOlmWuOuLyxoNeMbx9IE3PGdRxLGKQnmSyisR
JC9qJaCapGXuQnJa80q1vdNCBTY9CUnVq9h2mHzOTAA8NtHg86eaDvxzcZJoxskY
9EO9WpTvZSVgMIzaCLlLhVJwBKlFY3lHy2jLl56Im3702BRJcHD7NywM7w0kWMBh
MxKRSeLTI6cF+SC0ElKQNxe+ywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMuQZjnG
LsU7+wmLiL1WpB4Cu0BUMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE
OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U0MTUvQkM2NjEwNkVERDk0MTFFQThBMkUyRDM3QzRGOUFFMDIvNzkwRTQ0MkE5
QjE3MTFFQ0IyNTZBMzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnlu4wDwQCAAIwCQMHACABDfOYgDANBgkqhkiG9w0BAQsF
AAOCAQEAJJXhZ62+ieHIS76tMGUvDNwwh2tbF6mOZC2OCRz8NF1CBfbl8ysSFQrI
a9K1MLo+B26Es5Xz9pLCOFqSGbhk8ZwSFT0/Z/A7OLJSt9hnq7RmVn+heNIPVGPv
/Igv0VRpEGv7IScVfkygIrzcdlwe+lBXrPYMA5FhqCUnP8A8hbzfgu8jyM/9zH6K
iuMCsFjHjLnGF2SlahkTZcZOqPctZp1QDk9pg1SMaZNPfecr2EClGVrZXfOQ7543
k/2SABLArCp7OpMWzHTqYGtC81xdECH7PnUlqZA4YzjF30z9EaSgGWwaHuzvJlQ4
4YuJWJ5uYmhlGxLl4KQSkSGG+bbDow==
-----END CERTIFICATE-----
Generated at Fri Jul 4 01:08:40 2025 by rpki-client