Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
File:                     1E1A1DB28C6A11EB91832D52C4F9AE02.roa (raw, json)
Hash identifier:          08/pz9r7rFsunGYiDiFExkUJ+XdUECI3LN6zHYHXOm4=
Subject key identifier:   9D:96:C2:CE:9F:00:C3:4D:25:B3:36:A5:F3:5F:61:D4:BD:29:89:E9
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       0664
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 23:20:50 +0000
ROA not before:           Mon 30 Jun 2025 23:20:50 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     139213
IP address blocks:        103.139.248.0/24 maxlen: 24
                          103.186.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Jun 30 23:20:50 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=68631bd2-6945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:f0:ef:8c:a2:13:d4:c6:32:ec:c6:a0:18:
                    f5:67:03:7c:96:34:c2:af:0f:c4:2c:4e:02:37:c9:
                    f2:8e:b8:c6:35:c2:23:ec:60:10:74:e1:7c:eb:6c:
                    65:94:98:b9:9f:16:a0:6d:3b:a0:79:7b:ae:62:ad:
                    4d:fd:01:49:70:3b:4d:db:77:50:18:0e:52:52:94:
                    85:64:e7:6e:4b:31:81:e0:e0:49:f6:08:23:3e:ce:
                    d5:28:0b:3b:cc:a7:16:dd:f7:31:52:d9:f3:e2:87:
                    d8:92:12:8a:ed:19:26:76:dd:bb:3a:d2:b0:89:fd:
                    25:20:bc:e5:05:2c:8e:1f:94:83:9d:3b:d2:cf:d8:
                    d2:8a:38:78:6b:4c:cb:66:09:ed:10:3c:28:f1:b9:
                    2a:04:f1:28:a7:83:c6:44:59:76:a9:4d:1b:cc:76:
                    5b:bc:6f:3d:3c:7b:03:4e:81:a6:51:68:40:f3:e6:
                    f5:38:6b:b2:67:15:f8:9d:c3:12:9e:7e:81:27:cb:
                    bb:92:d3:6f:f9:cd:2e:70:72:e1:41:1e:98:e3:f1:
                    6d:93:47:86:2d:83:60:c8:33:46:2c:39:a4:d6:e8:
                    95:a7:33:b8:11:53:09:38:e2:59:6c:97:f3:b4:a6:
                    ef:ea:4b:ff:8b:32:5e:d3:ee:00:2b:85:c2:8b:fe:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:96:C2:CE:9F:00:C3:4D:25:B3:36:A5:F3:5F:61:D4:BD:29:89:E9
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.248.0/24
                  103.186.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:61:0f:3a:5e:19:de:11:f5:4c:5d:a3:a6:b9:bf:d8:bc:ec:
         06:3c:4f:eb:67:55:e1:17:9d:6e:26:8d:36:30:ef:61:67:7b:
         5e:21:03:19:16:dc:eb:fc:dd:7f:aa:13:21:5e:6c:86:3d:0c:
         ae:af:09:14:c1:9f:8b:77:a0:2e:bb:53:6b:39:1b:2c:85:e6:
         1a:fa:29:6e:13:b4:5e:de:ee:37:4f:bd:54:db:01:a7:8f:f4:
         96:d8:5a:d8:61:e2:36:0b:43:79:89:49:34:22:36:f5:d2:e5:
         02:49:40:16:2a:f5:79:02:3c:60:bb:b9:1b:44:fc:34:be:92:
         3c:1f:22:65:68:c1:d8:6b:67:42:f6:7b:fd:46:53:23:1f:9d:
         a4:5c:a3:62:91:40:a1:3c:51:78:9e:41:b4:b0:b3:3b:ce:49:
         02:ac:5a:d1:ae:e2:d1:a1:2b:e6:51:fc:4f:07:cf:8b:48:ba:
         12:7f:91:ae:fe:83:6b:1a:44:cf:fa:2c:69:53:00:f8:31:f1:
         16:f1:48:36:43:05:65:23:7b:f0:ab:b7:2e:c4:fe:36:2b:be:
         29:e6:6a:cd:db:92:31:f6:53:cf:95:9a:ea:7c:91:b4:dc:ae:
         a8:8a:89:d9:30:e2:64:0b:a0:50:d9:3f:3c:c1:73:fc:4c:d0:
         29:7e:ee:48
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE1RTcxMTAvBgNVBAUTKEFDQzAxMTk0MzM4NzdGMEM3NDI4NTdCOEVBNTIwRjhE
QTRFRDA5NUEwHhcNMjUwNjMwMjMyMDUwWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODYzMWJkMi02OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAybHw74yiE9TGMuzGoBj1ZwN8ljTCrw/ELE4CN8nyjrjGNcIj7GAQdOF862xl
lJi5nxagbTugeXuuYq1N/QFJcDtN23dQGA5SUpSFZOduSzGB4OBJ9ggjPs7VKAs7
zKcW3fcxUtnz4ofYkhKK7Rkmdt27OtKwif0lILzlBSyOH5SDnTvSz9jSijh4a0zL
ZgntEDwo8bkqBPEop4PGRFl2qU0bzHZbvG89PHsDToGmUWhA8+b1OGuyZxX4ncMS
nn6BJ8u7ktNv+c0ucHLhQR6Y4/Ftk0eGLYNgyDNGLDmk1uiVpzO4EVMJOOJZbJfz
tKbv6kv/izJe0+4AK4XCi/4nZQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ2Wws6f
AMNNJbM2pfNfYdS9KYnpMB8GA1UdIwQYMBaAFKzAEZQzh38MdChXuOpSD42k7Qla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTVFNy9FOTU5REM3NjhD
NjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3eDBLRmU0NmxJUGphVHRD
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JNQVJsRE9IZnd4MEtGZTQ2bElQamFUdENWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUE1RTcvRTk1OURDNzY4QzY4MTFFQjg3MDQyRDUxQzRGOUFFMDIvMUUxQTFEQjI4
QzZBMTFFQjkxODMyRDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABni/gDBABnuuswDQYJKoZIhvcNAQELBQADggEBADdhDzpe
Gd4R9Uxdo6a5v9i87AY8T+tnVeEXnW4mjTYw72Fne14hAxkW3Ov83X+qEyFebIY9
DK6vCRTBn4t3oC67U2s5GyyF5hr6KW4TtF7e7jdPvVTbAaeP9JbYWthh4jYLQ3mJ
STQiNvXS5QJJQBYq9XkCPGC7uRtE/DS+kjwfImVowdhrZ0L2e/1GUyMfnaRco2KR
QKE8UXieQbSwszvOSQKsWtGu4tGhK+ZR/E8Hz4tIuhJ/ka7+g2saRM/6LGlTAPgx
8RbxSDZDBWUje/Crty7E/jYrvinmas3bkjH2U8+Vmup8kbTcrqiKidkw4mQLoFDZ
PzzBc/xM0Cl+7kg=
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:44:50 2025 by rpki-client