Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B110E48C99DC11EBAE9D633DC4F9AE02.roa
File:                     B110E48C99DC11EBAE9D633DC4F9AE02.roa (raw, json)
Hash identifier:          ioeECaoTo0QqUvH5waom3uBX0dr2SXV5DokcA0qSINQ=
Subject key identifier:   0F:AC:42:4A:95:55:8C:D1:93:87:AA:75:1D:F1:CD:E9:44:2C:B5:2F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B24B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B110E48C99DC11EBAE9D633DC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:00:36 +0000
ROA not before:           Thu 08 May 2025 16:00:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134047
IP address blocks:        103.27.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45643 (0xb24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:00:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd524-1bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:42:97:ec:87:de:f9:bb:78:e5:66:d0:70:
                    50:ae:42:64:be:ef:8c:8d:ff:46:bf:1c:eb:da:09:
                    2f:70:a2:71:c6:1b:76:3a:52:d3:8a:de:78:2c:4e:
                    be:76:92:83:83:d6:3d:1a:d0:45:42:af:85:71:f5:
                    a2:45:0d:eb:cb:76:ca:27:48:bc:09:f4:3c:90:9d:
                    f9:05:b1:df:6d:ce:40:3d:9f:de:7d:90:4b:9f:ed:
                    db:50:90:47:65:4a:67:b2:a5:7a:79:95:e3:c7:c6:
                    5e:b1:95:d4:44:e0:e3:85:ea:49:7b:7f:e1:ad:bc:
                    11:82:0b:de:51:07:46:e9:3b:c4:4e:b6:da:fc:1b:
                    26:40:4c:88:df:79:7d:17:b1:d5:72:56:98:de:85:
                    1d:2e:d6:f2:7f:e5:be:65:9c:71:47:fd:88:5b:60:
                    2f:8b:d0:02:b2:a2:6c:dd:67:c3:34:d5:8f:06:4a:
                    e9:33:3d:62:12:5e:80:65:67:db:6e:51:b0:bc:0c:
                    0b:2a:4f:df:e4:d3:cc:6e:72:70:e2:48:c1:d3:b9:
                    8c:dc:ca:ad:fd:eb:d4:16:af:ef:2e:dd:b5:1b:e3:
                    92:94:70:31:62:01:50:c9:38:5f:be:35:0f:e7:03:
                    ff:52:d3:33:97:6a:56:c5:cf:36:f3:40:8a:7f:99:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:42:4A:95:55:8C:D1:93:87:AA:75:1D:F1:CD:E9:44:2C:B5:2F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B110E48C99DC11EBAE9D633DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:3c:88:90:84:db:35:5c:48:a6:4c:30:2a:ca:74:6a:a5:
         72:b4:14:23:0b:c2:cd:29:55:f2:31:d7:ac:be:14:d3:c3:79:
         38:b7:8e:6f:51:9f:e1:04:9b:58:e0:74:dc:83:3c:a3:05:6b:
         67:fe:b3:cb:62:56:7b:e9:3f:2c:90:f7:77:25:f0:b9:02:cd:
         3c:b4:23:1b:a4:a4:6d:18:b9:63:94:1c:6c:7a:71:f9:c5:3d:
         fd:dd:63:28:b3:db:81:76:8d:5b:cd:1c:cb:eb:66:b8:31:52:
         00:c8:dc:db:d8:7e:bf:0f:aa:86:75:28:79:de:19:03:0c:ad:
         9d:70:b1:42:a2:72:19:37:28:5f:a4:71:1d:0a:bd:b9:4c:75:
         b3:64:ea:b6:bd:ea:c6:dd:7e:bc:7f:a8:25:bf:02:83:d1:b8:
         91:09:28:c8:1e:63:7a:4f:c7:a3:65:3c:14:fd:ff:ac:cd:cc:
         0f:2a:31:ec:1f:1b:5c:11:b9:27:2f:12:af:2b:3a:99:37:86:
         3d:75:f2:ff:a4:8c:8c:7d:5f:a4:76:3e:ce:1f:66:72:c4:a0:
         4f:8a:8f:50:a7:2a:ff:4d:6e:07:eb:60:b3:6d:bd:bd:c8:df:
         63:6a:da:b1:38:2c:00:41:09:fe:d7:72:cc:30:68:a2:75:ea:
         08:39:bd:13
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALJLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDAzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q1MjQtMWJmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL0QQpfsh975u3jlZtBwUK5CZL7vjI3/Rr8c69oJL3CiccYbdjpS04reeCxO
vnaSg4PWPRrQRUKvhXH1okUN68t2yidIvAn0PJCd+QWx323OQD2f3n2QS5/t21CQ
R2VKZ7KlenmV48fGXrGV1ETg44XqSXt/4a28EYIL3lEHRuk7xE622vwbJkBMiN95
fRex1XJWmN6FHS7W8n/lvmWccUf9iFtgL4vQArKibN1nwzTVjwZK6TM9YhJegGVn
225RsLwMCypP3+TTzG5ycOJIwdO5jNzKrf3r1Bav7y7dtRvjkpRwMWIBUMk4X741
D+cD/1LTM5dqVsXPNvNAin+ZR70CAwEAAaOCApUwggKRMB0GA1UdDgQWBBQPrEJK
lVWM0ZOHqnUd8c3pRCy1LzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IxMTBFNDhD
OTlEQzExRUJBRTlENjMzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZxswMA0GCSqGSIb3DQEBCwUAA4IBAQCK7TyIkITbNVxI
pkwwKsp0aqVytBQjC8LNKVXyMdesvhTTw3k4t45vUZ/hBJtY4HTcgzyjBWtn/rPL
YlZ76T8skPd3JfC5As08tCMbpKRtGLljlBxsenH5xT393WMos9uBdo1bzRzL62a4
MVIAyNzb2H6/D6qGdSh53hkDDK2dcLFConIZNyhfpHEdCr25THWzZOq2verG3X68
f6glvwKD0biRCSjIHmN6T8ejZTwU/f+szcwPKjHsHxtcEbknLxKvKzqZN4Y9dfL/
pIyMfV+kdj7OH2ZyxKBPio9Qpyr/TW4H62Czbb29yN9jatqxOCwAQQn+13LMMGii
deoIOb0T
-----END CERTIFICATE-----
Generated at Tue May 13 01:32:59 2025 by rpki-client