Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
File:                     E1DA593EF22511EC88BA5369C4F9AE02.roa (raw, json)
Hash identifier:          cqHqEV7xAsnez3YQtyHI7Lsa80mrPtz2cR1pc3XxiAg=
Subject key identifier:   7A:75:F6:54:7E:88:A2:27:5F:26:D2:F7:6E:C5:80:A3:C1:8A:7F:97
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B1A1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:57:56 +0000
ROA not before:           Thu 08 May 2025 15:57:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133235
IP address blocks:        103.231.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45473 (0xb1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:57:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd484-5de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:2d:9e:38:da:4d:66:35:34:db:cb:8f:24:
                    6d:60:8f:2a:f0:59:7e:3b:46:35:16:b1:af:6d:cb:
                    6f:6b:d9:3b:28:ab:41:f6:f0:f0:19:ac:44:9b:a3:
                    06:1c:85:ee:09:cb:30:73:e0:63:88:99:d6:a6:e0:
                    72:fc:22:ea:80:96:73:60:7c:13:dc:24:b1:ac:9d:
                    47:7d:58:c0:be:ba:f5:11:23:4b:1a:de:a8:00:4f:
                    c6:2e:cb:d8:16:4d:79:ae:97:ad:17:ea:23:01:c1:
                    b9:95:07:37:85:a5:2a:53:d9:f2:5f:d1:94:50:a2:
                    21:29:04:10:f0:f9:fb:f7:2a:dc:32:6d:07:80:10:
                    41:c2:31:33:47:da:37:76:ee:cb:9c:e7:76:22:a6:
                    63:ca:28:0b:71:c2:f0:99:e9:0b:d2:5e:2f:de:57:
                    45:86:fe:ab:4c:4f:60:d0:a7:e7:76:4d:33:23:6c:
                    45:d2:bb:fb:74:28:31:cf:1a:27:c8:cd:3d:cb:01:
                    74:e0:e1:ed:85:25:82:d4:99:86:5e:d8:89:fb:8f:
                    8d:11:c9:c9:39:63:49:72:81:6b:85:7c:38:19:5d:
                    40:93:03:8f:97:56:8d:81:1d:b9:3f:50:6d:d1:8c:
                    13:20:d5:8b:09:43:eb:ae:5e:c7:d3:55:83:33:25:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:F6:54:7E:88:A2:27:5F:26:D2:F7:6E:C5:80:A3:C1:8A:7F:97
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:29:04:e1:6d:d5:48:48:0b:c3:28:e7:f3:fa:af:80:40:19:
         0c:4d:79:c1:ae:eb:6e:cb:1e:4d:5e:3b:3d:3d:b3:42:d3:dd:
         4c:45:23:0e:32:a0:b5:a8:b9:b6:20:68:5a:41:86:79:00:10:
         94:c3:14:4b:5f:85:95:e2:f4:43:2c:fa:57:81:18:12:9e:b4:
         c8:62:e9:c7:2d:35:d4:8d:8f:0e:35:ff:20:7a:50:78:d6:ff:
         c9:32:bd:da:04:af:91:fd:14:34:27:73:5b:c7:8a:b6:b9:04:
         de:d2:87:af:ef:e2:42:aa:4b:2d:0b:4a:76:f6:76:ec:95:ec:
         6d:58:8b:c1:10:4b:03:7f:58:27:c8:ff:82:22:cc:3a:63:79:
         52:ed:eb:54:76:ed:5b:41:86:23:f9:d2:69:fa:2d:95:53:dd:
         9a:f0:41:f0:b6:a3:ad:72:0d:69:00:2f:33:f4:5e:7c:d6:92:
         84:f4:a4:6d:e3:ca:96:3c:ad:dc:15:83:97:8a:26:43:ed:fc:
         ed:32:ae:b0:a2:b5:98:47:bd:0f:85:45:c3:98:1e:32:eb:58:
         25:9a:12:51:d6:2d:d4:c7:dc:dc:72:c0:01:1f:96:d4:54:f0:
         6a:4f:69:ff:15:21:c2:d6:99:36:fa:ff:5f:ed:7a:4b:3a:b6:
         43:c9:53:45
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALGhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE1NTc1NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q0ODQtNWRlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIqLZ442k1mNTTby48kbWCPKvBZfjtGNRaxr23Lb2vZOyirQfbw8BmsRJuj
BhyF7gnLMHPgY4iZ1qbgcvwi6oCWc2B8E9wksaydR31YwL669REjSxreqABPxi7L
2BZNea6XrRfqIwHBuZUHN4WlKlPZ8l/RlFCiISkEEPD5+/cq3DJtB4AQQcIxM0fa
N3buy5zndiKmY8ooC3HC8JnpC9JeL95XRYb+q0xPYNCn53ZNMyNsRdK7+3QoMc8a
J8jNPcsBdODh7YUlgtSZhl7YifuPjRHJyTljSXKBa4V8OBldQJMDj5dWjYEduT9Q
bdGMEyDViwlD665ex9NVgzMl0ZMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR6dfZU
foiiJ18m0vduxYCjwYp/lzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UxREE1OTNF
RjIyNTExRUM4OEJBNTM2OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ+cgMA0GCSqGSIb3DQEBCwUAA4IBAQCDKQThbdVISAvD
KOfz+q+AQBkMTXnBrutuyx5NXjs9PbNC091MRSMOMqC1qLm2IGhaQYZ5ABCUwxRL
X4WV4vRDLPpXgRgSnrTIYunHLTXUjY8ONf8gelB41v/JMr3aBK+R/RQ0J3Nbx4q2
uQTe0oev7+JCqkstC0p29nbslextWIvBEEsDf1gnyP+CIsw6Y3lS7etUdu1bQYYj
+dJp+i2VU92a8EHwtqOtcg1pAC8z9F581pKE9KRt48qWPK3cFYOXiiZD7fztMq6w
orWYR70PhUXDmB4y61glmhJR1i3Ux9zccsABH5bUVPBqT2n/FSHC1pk2+v9f7XpL
OrZDyVNF
-----END CERTIFICATE-----
Generated at Tue May 13 19:51:26 2025 by rpki-client