Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/5EF78FE650FF11F0B4CEA331C4F9AE02.roa
File:                     5EF78FE650FF11F0B4CEA331C4F9AE02.roa (raw, json)
Hash identifier:          Z62B0jnHVvY2jzsG/dfRq87dnZ8pUku0hBYOhlqYi64=
Subject key identifier:   C2:52:5D:98:0D:C4:35:82:F9:F3:F9:EF:7C:71:A8:85:5F:0D:B2:3C
Certificate issuer:       /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Certificate serial:       1230
Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/5EF78FE650FF11F0B4CEA331C4F9AE02.roa
Signing time:             Tue 24 Jun 2025 13:30:19 +0000
ROA not before:           Tue 24 Jun 2025 13:30:19 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     138403
IP address blocks:        103.124.180.0/24 maxlen: 24
                          103.124.181.0/24 maxlen: 24
                          2403:e3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl
                          rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4656 (0x1230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
        Validity
            Not Before: Jun 24 13:30:19 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=685aa86b-2268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:c2:1a:89:53:5f:ca:28:67:c4:9c:8b:1f:
                    65:ea:ba:95:b7:e9:29:6c:09:02:60:06:bc:e6:8d:
                    35:df:23:c0:93:ff:d2:76:b7:d9:11:36:cb:32:88:
                    51:05:75:77:00:f9:76:cc:e7:3c:70:d7:dc:58:76:
                    9a:c8:f9:e0:be:30:81:6e:34:2f:52:2c:89:f4:20:
                    4e:a2:88:fb:26:fd:ff:26:96:9f:da:bb:e9:53:82:
                    1e:21:46:78:49:4b:a4:ac:7f:a9:9c:bc:66:35:94:
                    c8:b9:f1:f4:e3:d7:fa:da:25:a0:46:d5:1d:00:1b:
                    0f:ba:2e:fc:6d:85:3f:2e:f5:92:a5:84:52:25:19:
                    54:86:10:2b:76:d9:44:66:d6:6c:f2:7b:3f:25:01:
                    5c:31:04:bd:97:f9:6b:2b:6a:b8:05:0c:e1:66:62:
                    ab:20:6b:94:02:6a:b3:70:8c:02:65:1f:50:06:71:
                    95:d0:89:01:9e:5e:3a:00:9b:90:27:e9:72:f9:dd:
                    b1:28:7e:1d:58:78:e6:e5:d3:e2:b2:6d:76:2b:e3:
                    4a:89:8c:42:7f:d2:49:9f:04:d6:c0:01:45:e6:d6:
                    e9:b1:98:e5:b1:52:bb:14:62:fa:f5:34:77:2a:8b:
                    78:a4:00:60:5a:ee:09:38:43:05:4e:08:b8:e0:67:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:5D:98:0D:C4:35:82:F9:F3:F9:EF:7C:71:A8:85:5F:0D:B2:3C
            X509v3 Authority Key Identifier:
                keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/5EF78FE650FF11F0B4CEA331C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.180.0/23
                IPv6:
                  2403:e3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:46:9c:ec:a5:21:51:86:04:a8:38:b0:5a:94:05:94:9a:e3:
         e1:40:30:bb:4c:65:ca:4b:57:9f:25:22:4c:7c:d8:64:50:5c:
         b3:8e:8a:54:28:fe:0f:06:f0:95:16:40:bb:71:e5:c7:54:59:
         bc:76:8a:de:a9:81:3e:74:69:7f:c8:4d:d9:73:78:f7:02:29:
         0c:11:9d:16:b3:73:4d:4f:0d:db:0e:54:01:c7:f7:05:c3:88:
         2d:f3:45:f0:a5:23:33:d2:bb:97:d5:0e:49:55:67:d3:8f:fb:
         db:70:57:88:c3:8b:b1:36:3b:ee:e7:df:29:c4:66:bd:7f:eb:
         ae:4e:81:88:da:cb:d3:f6:f6:a2:9c:dc:e9:13:60:4f:f8:4b:
         57:95:d7:f1:70:33:18:90:35:56:07:26:00:3b:e2:ee:8c:43:
         57:6a:da:74:14:62:af:66:74:6f:fd:99:48:8b:30:6f:62:89:
         50:3e:25:e6:c3:09:77:9d:8f:f8:2f:ec:0f:11:c4:21:8d:5c:
         fc:c2:01:9a:08:f7:f6:b8:9a:1b:74:84:89:01:14:7a:36:31:
         10:77:f9:b7:69:e7:47:9f:f5:e6:4c:0b:06:1f:4e:78:69:6f:
         3a:d6:fb:8a:2f:25:e0:10:c6:5b:a8:e6:de:26:aa:da:0b:ad:
         21:6f:1a:cc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF
Q0ZCMzM1MDUwHhcNMjUwNjI0MTMzMDE5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVhYTg2Yi0yMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPzCGolTX8ooZ8Scix9l6rqVt+kpbAkCYAa85o013yPAk//SdrfZETbLMohR
BXV3APl2zOc8cNfcWHaayPngvjCBbjQvUiyJ9CBOooj7Jv3/Jpaf2rvpU4IeIUZ4
SUukrH+pnLxmNZTIufH049f62iWgRtUdABsPui78bYU/LvWSpYRSJRlUhhArdtlE
ZtZs8ns/JQFcMQS9l/lrK2q4BQzhZmKrIGuUAmqzcIwCZR9QBnGV0IkBnl46AJuQ
J+ly+d2xKH4dWHjm5dPism12K+NKiYxCf9JJnwTWwAFF5tbpsZjlsVK7FGL69TR3
Kot4pABgWu4JOEMFTgi44GeVAwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMJSXZgN
xDWC+fP573xxqIVfDbI8MB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw
QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjFGRjcvMjE4NjJDNjRFMEMwMTFFODlFOUJGRTE1QzRGOUFFMDIvNUVGNzhGRTY1
MEZGMTFGMEI0Q0VBMzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnfLQwDQQCAAIwBwMFACQD48AwDQYJKoZIhvcNAQELBQAD
ggEBAKhGnOylIVGGBKg4sFqUBZSa4+FAMLtMZcpLV58lIkx82GRQXLOOilQo/g8G
8JUWQLtx5cdUWbx2it6pgT50aX/ITdlzePcCKQwRnRazc01PDdsOVAHH9wXDiC3z
RfClIzPSu5fVDklVZ9OP+9twV4jDi7E2O+7n3ynEZr1/665OgYjay9P29qKc3OkT
YE/4S1eV1/FwMxiQNVYHJgA74u6MQ1dq2nQUYq9mdG/9mUiLMG9iiVA+JebDCXed
j/gv7A8RxCGNXPzCAZoI9/a4mht0hIkBFHo2MRB3+bdp50ef9eZMCwYfTnhpbzrW
+4ovJeAQxluo5t4mqtoLrSFvGsw=
-----END CERTIFICATE-----
Generated at Fri Jul 4 01:14:16 2025 by rpki-client