Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
File:                     3D8F78D8772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier:          EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=
Subject key identifier:   A5:D8:81:E6:47:8B:66:53:C6:FC:7B:D3:D2:F1:7B:4D:FA:7D:ED:83
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       012A
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
Signing time:             Fri 09 May 2025 04:24:55 +0000
ROA not before:           Fri 09 May 2025 04:24:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142271
IP address blocks:        103.121.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: May  9 04:24:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681d8397-da64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:a3:c5:e1:e3:e8:c1:50:2e:a7:51:3f:64:
                    a1:d5:4c:0f:a5:af:37:3c:43:73:c3:e4:42:96:e0:
                    32:2c:83:12:ad:5c:f1:dc:f4:91:c4:be:43:ae:6c:
                    72:b7:a4:75:50:8c:50:67:08:e3:a9:2d:8d:c1:32:
                    fa:f7:e2:c2:f0:d0:78:f9:aa:7a:c6:34:cd:ba:ad:
                    94:0f:ca:86:76:a7:27:6e:40:78:37:7a:39:16:ac:
                    18:5b:d7:9b:62:d8:dc:30:d0:aa:98:9f:01:35:79:
                    c7:e8:a6:08:6a:e6:a3:55:d1:01:de:7d:2a:9e:cf:
                    47:50:0c:02:d8:87:d9:b2:b3:a1:12:60:50:0a:2b:
                    7b:19:96:8b:a8:e7:b4:2d:1d:fe:9f:37:10:d2:9a:
                    01:a2:d0:2a:31:57:5c:95:68:b3:46:ad:44:86:d3:
                    91:6c:15:ce:67:98:9e:41:28:d3:a9:7d:3b:7a:55:
                    b8:9c:9b:57:ee:42:c2:b7:2f:6c:c3:b4:ca:3c:f6:
                    1d:99:fe:bd:b0:a6:33:f2:9e:38:26:38:49:f3:fa:
                    f0:0a:e6:1e:be:4e:0a:70:0b:31:a2:ce:2a:fd:46:
                    03:13:87:ee:64:b5:fa:41:08:b9:cd:29:5b:d0:97:
                    a2:25:a7:be:51:90:7b:5d:b3:b8:79:e3:04:b1:4d:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D8:81:E6:47:8B:66:53:C6:FC:7B:D3:D2:F1:7B:4D:FA:7D:ED:83
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:52:68:9a:c2:93:82:af:0a:13:63:52:6c:65:cc:7f:2c:10:
         ff:c9:e5:fa:e0:9f:76:55:42:15:99:a8:e4:34:3e:4f:50:d2:
         c2:86:c3:a9:21:39:57:5e:a7:38:7a:fb:98:7e:a3:6b:b3:02:
         00:2e:86:49:2c:dd:c3:80:68:0d:7c:dd:01:e4:63:27:da:b0:
         5b:e6:4f:15:3f:6f:79:f3:fd:c6:a9:78:b6:f6:02:be:f2:e3:
         60:de:34:1c:74:e5:d6:04:70:08:24:28:8e:a5:6b:61:bf:74:
         b3:8a:80:d8:df:a8:ae:df:97:4f:24:53:35:f4:b6:42:f9:f7:
         37:d4:6c:86:2e:70:e1:57:e6:7e:2e:e1:dc:67:cf:ea:2c:81:
         c4:64:58:70:36:26:ec:20:1c:1b:c5:fe:2b:3c:61:6c:03:ef:
         e3:ef:2f:7f:8d:95:03:55:97:a8:55:ca:94:83:51:6b:6f:a3:
         5a:8d:9c:51:5d:34:46:38:c0:88:38:df:19:f6:0b:4a:7f:5f:
         92:ee:f8:1d:68:86:e9:38:e1:51:23:68:5d:c4:bf:6c:13:00:
         3b:dd:fb:93:03:2b:1f:31:92:76:67:b4:be:01:d1:79:10:6d:
         30:66:0e:11:98:ce:fb:3a:8d:22:46:47:1d:4d:7f:7f:cf:b0:
         fd:52:99:36
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjUwNTA5MDQyNDU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFkODM5Ny1kYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJejxeHj6MFQLqdRP2Sh1UwPpa83PENzw+RCluAyLIMSrVzx3PSRxL5Drmxy
t6R1UIxQZwjjqS2NwTL69+LC8NB4+ap6xjTNuq2UD8qGdqcnbkB4N3o5FqwYW9eb
YtjcMNCqmJ8BNXnH6KYIauajVdEB3n0qns9HUAwC2IfZsrOhEmBQCit7GZaLqOe0
LR3+nzcQ0poBotAqMVdclWizRq1EhtORbBXOZ5ieQSjTqX07elW4nJtX7kLCty9s
w7TKPPYdmf69sKYz8p44JjhJ8/rwCuYevk4KcAsxos4q/UYDE4fuZLX6QQi5zSlb
0JeiJae+UZB7XbO4eeMEsU1b0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXYgeZH
i2ZTxvx709Lxe036fe2DMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEE1NkEvMjZGQTE4MTg3NzI0MTFFRUExNjc0RTFGQzRGOUFFMDIvM0Q4Rjc4RDg3
NzI1MTFFRUEyRTM3NDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABneUAwDQYJKoZIhvcNAQELBQADggEBADRSaJrCk4KvChNj
UmxlzH8sEP/J5frgn3ZVQhWZqOQ0Pk9Q0sKGw6khOVdepzh6+5h+o2uzAgAuhkks
3cOAaA183QHkYyfasFvmTxU/b3nz/capeLb2Ar7y42DeNBx05dYEcAgkKI6la2G/
dLOKgNjfqK7fl08kUzX0tkL59zfUbIYucOFX5n4u4dxnz+osgcRkWHA2JuwgHBvF
/is8YWwD7+PvL3+NlQNVl6hVypSDUWtvo1qNnFFdNEY4wIg43xn2C0p/X5Lu+B1o
huk44VEjaF3Ev2wTADvd+5MDKx8xknZntL4B0XkQbTBmDhGYzvs6jSJGRx1Nf3/P
sP1SmTY=
-----END CERTIFICATE-----
Generated at Thu May 15 23:21:39 2025 by rpki-client