Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A00110FA941A11EE84FC1C63C4F9AE02.roa
File:                     A00110FA941A11EE84FC1C63C4F9AE02.roa (raw, json)
Hash identifier:          37j1Z21CGVOFMrKYbUJvPLlQveo7BAMtm7+QHYnLRd8=
Subject key identifier:   CB:C9:AF:37:11:54:F7:DC:54:53:D5:E1:39:1B:E4:6F:E2:5F:3B:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B852
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A00110FA941A11EE84FC1C63C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:24:07 +0000
ROA not before:           Thu 08 May 2025 16:24:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150029
IP address blocks:        103.14.152.0/24 maxlen: 24
                          103.14.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47186 (0xb852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:24:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cdaa7-a5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:5f:16:73:b3:e7:5d:3e:34:c0:d8:0d:f2:
                    8f:cc:d7:ab:55:99:9a:21:f0:af:ac:42:ac:8a:65:
                    31:5e:ad:4d:f2:40:27:20:0c:7a:43:1a:0a:00:87:
                    21:cf:2a:9b:f7:ee:4c:6f:71:f3:e5:39:f0:c5:db:
                    ec:24:86:80:8f:c8:30:12:eb:d8:44:5e:e7:f7:a6:
                    10:8d:37:5b:bc:75:46:16:41:e5:d0:5c:53:f8:13:
                    57:0f:82:63:ff:bf:87:9b:06:c0:04:d5:9f:ab:65:
                    95:9c:3c:f1:d9:b8:fd:fd:33:6e:40:96:ee:ea:4f:
                    08:f9:30:4f:98:4f:e0:38:4c:88:88:93:95:d8:1d:
                    ae:50:2f:74:43:27:f5:e0:4f:71:bf:a0:c9:cb:30:
                    21:21:dd:8b:4c:b6:32:74:f7:40:ee:ed:e6:dd:da:
                    76:d9:9f:4c:08:f9:ab:24:8c:b5:5a:87:2b:d2:f3:
                    98:a2:6f:72:d5:c3:4a:09:12:bf:fc:91:c4:62:d4:
                    f7:8a:d2:77:60:a4:43:0d:38:fc:72:57:2d:b6:90:
                    f0:2f:de:16:13:33:03:be:b0:d4:27:cd:50:ee:8a:
                    c0:6c:8e:e0:47:b2:4d:e0:bb:78:85:96:78:bc:69:
                    55:31:9f:ea:73:b8:d1:cc:4b:c0:45:94:72:65:72:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:AF:37:11:54:F7:DC:54:53:D5:E1:39:1B:E4:6F:E2:5F:3B:E3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A00110FA941A11EE84FC1C63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:3f:94:be:10:b3:72:60:56:08:05:c8:b1:3e:e8:ce:10:
         08:02:8d:4b:e8:20:09:7e:4b:58:b1:7c:34:d5:f4:86:46:13:
         b0:1e:34:18:d5:c3:03:2a:d9:8b:3b:a0:03:4c:ff:11:cc:0b:
         66:4f:af:43:26:3b:1a:4e:8d:d8:1e:e5:0f:cd:1e:a5:90:01:
         b0:a2:15:45:42:fb:2f:76:15:04:11:d2:6c:53:05:48:b5:5a:
         9b:e3:ad:64:bf:8e:4d:5d:fb:9c:b1:43:3c:3b:86:89:55:1d:
         91:20:35:c8:d8:07:6d:4f:2f:e3:0e:96:35:85:e6:80:b6:65:
         5f:e7:f5:40:85:d8:bb:7d:32:43:1a:3d:5b:8c:8a:88:1d:8c:
         0b:02:23:3b:49:47:1c:fd:6d:aa:58:56:6b:3d:c0:b2:91:ce:
         0e:de:5f:bc:e6:77:24:eb:21:03:42:2b:56:30:bc:aa:be:44:
         ad:f6:cc:d5:24:10:3c:4c:04:0e:0a:4b:31:4b:7a:8f:d7:96:
         0e:83:59:e5:91:a0:1e:7f:50:3e:16:4e:6d:b9:df:51:be:ff:
         ee:83:f9:83:88:aa:6b:35:27:4a:9e:81:21:cc:6f:8a:37:17:
         07:ad:d2:d3:10:65:16:21:f8:48:e3:e6:3b:65:5b:04:66:af:
         32:35:8d:78
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALhSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjQwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2RhYTctYTVkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtZXxZzs+ddPjTA2A3yj8zXq1WZmiHwr6xCrIplMV6tTfJAJyAMekMaCgCH
Ic8qm/fuTG9x8+U58MXb7CSGgI/IMBLr2ERe5/emEI03W7x1RhZB5dBcU/gTVw+C
Y/+/h5sGwATVn6tllZw88dm4/f0zbkCW7upPCPkwT5hP4DhMiIiTldgdrlAvdEMn
9eBPcb+gycswISHdi0y2MnT3QO7t5t3adtmfTAj5qySMtVqHK9LzmKJvctXDSgkS
v/yRxGLU94rSd2CkQw04/HJXLbaQ8C/eFhMzA76w1CfNUO6KwGyO4EeyTeC7eIWW
eLxpVTGf6nO40cxLwEWUcmVyiPECAwEAAaOCApUwggKRMB0GA1UdDgQWBBTLya83
EVT33FRT1eE5G+Rv4l874zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EwMDExMEZB
OTQxQTExRUU4NEZDMUM2M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZw6YMA0GCSqGSIb3DQEBCwUAA4IBAQBqOD+UvhCzcmBW
CAXIsT7ozhAIAo1L6CAJfktYsXw01fSGRhOwHjQY1cMDKtmLO6ADTP8RzAtmT69D
JjsaTo3YHuUPzR6lkAGwohVFQvsvdhUEEdJsUwVItVqb461kv45NXfucsUM8O4aJ
VR2RIDXI2AdtTy/jDpY1heaAtmVf5/VAhdi7fTJDGj1bjIqIHYwLAiM7SUcc/W2q
WFZrPcCykc4O3l+85nck6yEDQitWMLyqvkSt9szVJBA8TAQOCksxS3qP15YOg1nl
kaAef1A+Fk5tud9Rvv/ug/mDiKprNSdKnoEhzG+KNxcHrdLTEGUWIfhI4+Y7ZVsE
Zq8yNY14
-----END CERTIFICATE-----
Generated at Tue May 13 05:06:35 2025 by rpki-client