Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
File:                     45865ED62B7411EF9E28ED19C4F9AE02.roa (raw, json)
Hash identifier:          G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=
Subject key identifier:   D8:7B:79:1F:5F:E0:02:95:B2:03:6C:C2:AF:5B:24:15:99:A6:16:27
Certificate issuer:       /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial:       1E73
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
Signing time:             Sun 04 May 2025 16:23:57 +0000
ROA not before:           Sun 04 May 2025 16:23:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149515
IP address blocks:        103.74.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
                          rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 16:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7795 (0x1e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
        Validity
            Not Before: May  4 16:23:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6817949d-b234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:e3:16:07:f2:88:92:d1:bf:41:0c:da:1d:
                    9c:91:81:f3:1e:07:40:2e:a8:2a:69:df:fd:6d:28:
                    e9:d0:1a:06:06:51:52:6d:96:7c:1b:27:c3:ca:8e:
                    5a:ba:74:96:1d:72:4a:3e:73:19:8a:22:ea:3f:1a:
                    58:d2:76:b8:bd:76:f7:09:17:8f:12:4b:a1:f3:1c:
                    79:1f:67:e6:f5:b1:3b:e4:08:c8:0e:64:00:d0:3e:
                    ef:13:87:10:be:2e:6e:15:75:9c:e9:22:38:93:54:
                    ef:7b:09:c2:e1:4a:00:15:6e:a6:68:30:74:75:71:
                    6d:43:d2:5c:fc:02:2b:d0:7c:41:90:7e:2f:c6:f8:
                    88:b0:7b:23:9b:d5:ae:a3:8f:8c:c5:e8:c5:78:9b:
                    2c:ac:81:7b:56:30:8f:d6:a9:b4:1e:71:38:d0:f0:
                    ed:3b:46:94:46:44:49:ec:85:4f:1f:82:70:5b:9a:
                    51:90:c9:cf:96:cc:44:a7:74:3c:74:d9:a4:44:8f:
                    53:92:d1:3f:61:ee:fd:6e:82:61:b0:f4:66:34:72:
                    44:52:f0:a4:b9:84:3f:65:a8:c5:80:8c:24:d0:ec:
                    0d:ee:26:a4:cb:a1:9d:79:41:e0:11:38:72:4e:a9:
                    0b:43:2b:ec:e8:d7:d1:e3:79:cd:98:5f:6b:f3:f5:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:79:1F:5F:E0:02:95:B2:03:6C:C2:AF:5B:24:15:99:A6:16:27
            X509v3 Authority Key Identifier:
                keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:74:78:a7:01:dd:c6:0d:f6:bb:50:a0:9c:49:22:13:71:70:
         1f:e8:72:74:da:f3:7a:4f:9d:f6:9c:ed:63:3d:74:c7:13:bb:
         80:99:72:4e:da:26:7f:98:9d:72:01:e7:d1:ec:57:f5:d8:ee:
         3a:6d:99:9a:5f:d9:66:02:18:01:20:e2:8c:4c:d0:53:9d:4c:
         b4:b8:ed:bd:1d:b7:07:76:e8:22:e1:aa:6c:f5:58:2e:ec:fc:
         bb:7a:07:3e:85:37:8a:a2:e7:eb:81:fd:32:c0:a8:ac:68:77:
         7a:35:16:c3:88:d2:5e:46:ff:fa:c1:35:f3:75:9a:94:d9:20:
         7a:78:e3:3d:10:c6:69:eb:bb:90:e6:ca:77:41:4a:54:8d:4e:
         75:c7:81:39:e0:d9:93:db:27:c0:92:70:2c:79:22:f2:10:c6:
         75:a5:19:20:57:be:b6:8c:3f:fc:66:a6:b3:61:13:83:f2:95:
         74:f1:c8:3b:76:65:5c:e3:e1:61:3c:7c:e0:b8:54:e4:8d:ea:
         5d:94:16:f4:8f:18:a5:2a:83:4b:81:82:c4:21:5e:f1:ea:6d:
         23:c8:47:42:e1:a5:4c:47:92:0f:b2:67:37:be:c4:09:86:b3:
         4b:73:22:7d:cb:ed:8e:6e:9f:b0:78:74:7f:f2:f0:56:84:c4:
         29:cd:32:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy
MjI3MkMzNUEwHhcNMjUwNTA0MTYyMzU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE3OTQ5ZC1iMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBHjFgfyiJLRv0EM2h2ckYHzHgdALqgqad/9bSjp0BoGBlFSbZZ8GyfDyo5a
unSWHXJKPnMZiiLqPxpY0na4vXb3CRePEkuh8xx5H2fm9bE75AjIDmQA0D7vE4cQ
vi5uFXWc6SI4k1TvewnC4UoAFW6maDB0dXFtQ9Jc/AIr0HxBkH4vxviIsHsjm9Wu
o4+MxejFeJssrIF7VjCP1qm0HnE40PDtO0aURkRJ7IVPH4JwW5pRkMnPlsxEp3Q8
dNmkRI9TktE/Ye79boJhsPRmNHJEUvCkuYQ/ZajFgIwk0OwN7iaky6GdeUHgEThy
TqkLQyvs6NfR43nNmF9r8/XGkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNh7eR9f
4AKVsgNswq9bJBWZphYnMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0
OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM3N0QvN0Q0QkZFMDY3NDk5MTFFNkIwMjUyQjg0QzRGOUFFMDIvNDU4NjVFRDYy
Qjc0MTFFRjlFMjhFRDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnSrwwDQYJKoZIhvcNAQELBQADggEBAJJ0eKcB3cYN9rtQ
oJxJIhNxcB/ocnTa83pPnfac7WM9dMcTu4CZck7aJn+YnXIB59HsV/XY7jptmZpf
2WYCGAEg4oxM0FOdTLS47b0dtwd26CLhqmz1WC7s/Lt6Bz6FN4qi5+uB/TLAqKxo
d3o1FsOI0l5G//rBNfN1mpTZIHp44z0Qxmnru5DmyndBSlSNTnXHgTng2ZPbJ8CS
cCx5IvIQxnWlGSBXvraMP/xmprNhE4PylXTxyDt2ZVzj4WE8fOC4VOSN6l2UFvSP
GKUqg0uBgsQhXvHqbSPIR0LhpUxHkg+yZze+xAmGs0tzIn3L7Y5un7B4dH/y8FaE
xCnNMmQ=
-----END CERTIFICATE-----
Generated at Thu May 15 15:32:15 2025 by rpki-client