Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A277F485FEB11ED9401BC43C4F9AE02.roa
File:                     9A277F485FEB11ED9401BC43C4F9AE02.roa (raw, json)
Hash identifier:          Hab9kNoNanPzFU9oSbzeOmcTPqa0y+V87CphGyaQyec=
Subject key identifier:   B0:74:F2:29:4D:D2:F6:41:DA:C7:EC:35:6A:10:D1:EA:A4:D6:EC:D3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B264
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A277F485FEB11ED9401BC43C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:00:58 +0000
ROA not before:           Thu 08 May 2025 16:00:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134277
IP address blocks:        103.81.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45668 (0xb264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:00:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd53a-b667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:5a:cf:c9:d7:48:a0:41:c8:c3:bf:ff:2e:
                    f5:2f:33:2f:bc:7d:61:6c:22:83:1e:d1:74:93:9b:
                    ed:54:ff:dd:22:9d:da:42:64:02:44:b7:ec:32:1d:
                    ff:7c:8f:c8:55:6e:9a:41:20:66:1f:47:63:d0:92:
                    18:7b:5a:d0:2b:e9:74:c1:2e:c3:05:a5:d9:2f:28:
                    bb:0a:2a:a9:e4:0c:86:56:d3:43:20:58:e7:b0:9f:
                    bb:a5:38:e7:3d:6d:03:d2:0f:a5:80:e4:20:9c:ae:
                    29:58:f8:35:87:ab:f6:7f:24:5f:53:cf:b0:7f:f3:
                    33:53:e8:19:99:af:5d:98:c5:d7:bf:9e:a1:f6:bb:
                    c1:ad:22:d3:66:67:5d:96:73:80:55:69:f5:e2:5b:
                    34:f9:79:d7:3f:95:d8:a5:e0:d3:27:c4:20:13:b2:
                    4c:05:cf:90:1a:e8:32:2a:6e:17:64:d8:3e:36:a6:
                    1a:c9:3d:8f:02:7f:a5:89:df:63:c4:5a:53:6f:e8:
                    ba:f5:6f:d7:79:c0:64:ed:6a:f1:1a:03:10:a1:8f:
                    76:09:14:22:d4:d5:c6:3d:ca:7e:96:4d:56:80:61:
                    6f:63:e2:86:7a:49:51:d2:a2:56:5c:5d:f7:ad:60:
                    59:fa:bc:bd:fd:32:f8:78:22:8a:03:2c:80:0f:c1:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:74:F2:29:4D:D2:F6:41:DA:C7:EC:35:6A:10:D1:EA:A4:D6:EC:D3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A277F485FEB11ED9401BC43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:9f:69:e0:3c:42:9a:45:5d:88:99:f5:e6:44:bc:fb:c9:
         9c:2a:33:4b:19:eb:36:c0:2d:0d:07:e9:0c:97:43:27:31:28:
         81:1e:cb:86:d2:4b:ec:fe:64:90:7c:30:e0:15:bf:25:f8:76:
         2b:0d:bc:d9:99:8f:68:0d:46:32:fc:69:3d:62:4e:6a:4d:3d:
         31:8d:16:f5:cd:82:27:3f:dd:58:ba:e8:93:ba:63:2a:04:c4:
         0f:f8:1d:fe:8a:e6:85:ba:54:02:a6:22:f4:6d:53:48:f5:75:
         d7:8c:94:e1:0e:93:d1:0b:d7:23:e8:25:42:4d:14:14:9e:59:
         8d:47:20:cd:c5:eb:97:97:3c:5c:d0:7f:80:a2:65:3e:b3:6c:
         5d:52:8e:d6:01:58:ba:fd:81:09:96:1f:80:b8:1d:66:4c:09:
         17:68:50:ae:2a:48:2b:db:b1:46:45:92:d6:c5:f8:e3:fb:d3:
         f3:06:f1:a8:f5:29:3b:79:f6:59:d9:d3:1e:0c:09:31:dc:c3:
         83:f7:20:d9:db:0e:f0:59:8e:71:1d:8f:68:ec:48:eb:6c:ec:
         58:d3:36:a1:bb:f1:c6:ce:92:8b:cb:84:fc:10:49:4b:71:61:
         17:55:c6:74:a0:56:0a:56:b0:a0:6b:34:2a:ac:b3:85:ce:82:
         e0:79:6c:3f
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALJkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDA1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q1M2EtYjY2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJtAWs/J10igQcjDv/8u9S8zL7x9YWwigx7RdJOb7VT/3SKd2kJkAkS37DId
/3yPyFVumkEgZh9HY9CSGHta0CvpdMEuwwWl2S8ouwoqqeQMhlbTQyBY57Cfu6U4
5z1tA9IPpYDkIJyuKVj4NYer9n8kX1PPsH/zM1PoGZmvXZjF17+eofa7wa0i02Zn
XZZzgFVp9eJbNPl51z+V2KXg0yfEIBOyTAXPkBroMipuF2TYPjamGsk9jwJ/pYnf
Y8RaU2/ouvVv13nAZO1q8RoDEKGPdgkUItTVxj3KfpZNVoBhb2PihnpJUdKiVlxd
961gWfq8vf0y+HgiigMsgA/BeFMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSwdPIp
TdL2QdrH7DVqENHqpNbs0zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlBMjc3RjQ4
NUZFQjExRUQ5NDAxQkM0M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ1FYMA0GCSqGSIb3DQEBCwUAA4IBAQArTZ9p4DxCmkVd
iJn15kS8+8mcKjNLGes2wC0NB+kMl0MnMSiBHsuG0kvs/mSQfDDgFb8l+HYrDbzZ
mY9oDUYy/Gk9Yk5qTT0xjRb1zYInP91YuuiTumMqBMQP+B3+iuaFulQCpiL0bVNI
9XXXjJThDpPRC9cj6CVCTRQUnlmNRyDNxeuXlzxc0H+AomU+s2xdUo7WAVi6/YEJ
lh+AuB1mTAkXaFCuKkgr27FGRZLWxfjj+9PzBvGo9Sk7efZZ2dMeDAkx3MOD9yDZ
2w7wWY5xHY9o7EjrbOxY0zahu/HGzpKLy4T8EElLcWEXVcZ0oFYKVrCgazQqrLOF
zoLgeWw/
-----END CERTIFICATE-----
Generated at Tue May 13 01:17:26 2025 by rpki-client