Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/797BF786FB2C11EFA405F334C4F9AE02.roa
File:                     797BF786FB2C11EFA405F334C4F9AE02.roa (raw, json)
Hash identifier:          zI34h0FmFtZZLolHCnykLI2wVD3iOXp1eKhUZqTjA48=
Subject key identifier:   F8:CC:78:74:FE:47:AC:1E:62:54:FB:BC:BA:CC:3A:32:71:E2:9E:5E
Certificate issuer:       /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial:       104B
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/797BF786FB2C11EFA405F334C4F9AE02.roa
Signing time:             Fri 02 May 2025 17:56:51 +0000
ROA not before:           Fri 02 May 2025 17:56:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18190
IP address blocks:        103.114.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
                          rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 17:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4171 (0x104b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
        Validity
            Not Before: May  2 17:56:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68150763-7391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:06:2c:c2:c8:69:37:d4:b6:f9:aa:2d:fd:
                    69:a0:e9:f0:9b:dd:20:bd:0f:cf:5f:e4:d8:ca:92:
                    20:7e:ce:4b:f2:ba:3f:79:88:da:4b:67:d6:35:d1:
                    ea:1f:b7:7a:8a:e8:b2:f2:14:02:7a:57:f1:3c:02:
                    1a:54:2c:2c:cc:c0:fa:c3:74:da:f6:c2:0f:b0:d7:
                    c7:02:37:76:7e:1d:27:2a:ba:9a:71:7a:6a:3c:8d:
                    90:42:b2:26:86:2b:cd:b2:68:1f:3b:0f:7e:21:d8:
                    00:f3:c6:7e:f8:85:9f:01:ef:1c:c1:46:93:1a:74:
                    84:64:ee:00:86:c1:46:a6:c0:7a:0a:16:3b:e1:7e:
                    0c:e6:62:f7:64:e3:de:c3:66:1f:61:fd:4b:0d:11:
                    97:4f:89:91:6a:20:6b:54:63:fa:5a:dd:09:f0:21:
                    ec:42:c2:b1:b0:0b:38:0c:bc:bb:0d:c6:dd:5a:c5:
                    2d:33:94:4d:69:9a:5e:cf:43:b4:84:59:fc:10:87:
                    21:ac:59:c4:49:dd:d0:d4:e3:1b:46:50:08:14:27:
                    f2:e7:cb:d5:13:56:63:9e:32:55:2f:c6:e1:16:4c:
                    a1:32:9c:21:d3:b4:5b:24:7d:6e:83:f3:42:fe:5d:
                    42:9d:f2:dd:70:79:6b:b4:a3:82:78:35:4b:49:f6:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CC:78:74:FE:47:AC:1E:62:54:FB:BC:BA:CC:3A:32:71:E2:9E:5E
            X509v3 Authority Key Identifier:
                keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/797BF786FB2C11EFA405F334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:d3:08:09:df:fe:72:31:f7:83:7d:83:be:79:72:70:49:
         ec:d6:d7:65:a3:01:cf:a9:80:76:09:26:2c:81:71:2f:f9:08:
         e5:31:cb:d1:fe:24:37:2b:64:39:00:d2:61:1e:9d:09:b7:cd:
         a3:78:29:b6:f2:88:c4:f4:ea:b0:57:11:8d:a6:4f:5e:b2:fa:
         90:62:42:b3:0d:39:00:c9:c1:77:b1:5e:1a:1d:2c:d2:9b:52:
         96:8b:42:12:2b:63:81:8c:1f:ef:b6:03:53:8c:d0:b1:2e:f0:
         a4:af:2b:76:05:df:d4:fc:72:70:8b:9d:6a:78:c8:c0:0a:f1:
         d2:82:bd:1d:79:9a:29:45:45:ca:c0:70:ce:21:a1:66:b9:f1:
         b4:fe:81:b9:ea:9b:12:75:6a:ba:30:2d:05:61:e0:ae:72:db:
         fa:9b:ed:5b:fd:71:be:54:db:e9:f1:cd:07:18:d2:17:d4:fe:
         e6:4f:d2:29:98:b1:ed:d4:8e:63:0a:0b:55:d8:b8:63:ee:c6:
         49:af:1f:a2:9d:9e:ee:3a:bd:44:cb:3a:58:92:be:13:85:9d:
         bd:cd:9b:c2:6a:d8:cd:bd:45:9c:44:d8:f3:a7:aa:3b:ff:34:
         d9:31:cc:44:55:49:bc:57:b7:3c:28:de:a4:00:58:15:d3:d4:
         02:a5:77:90
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1
MUEyMzUwQUYwHhcNMjUwNTAyMTc1NjUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE1MDc2My03MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjQGLMLIaTfUtvmqLf1poOnwm90gvQ/PX+TYypIgfs5L8ro/eYjaS2fWNdHq
H7d6iuiy8hQCelfxPAIaVCwszMD6w3Ta9sIPsNfHAjd2fh0nKrqacXpqPI2QQrIm
hivNsmgfOw9+IdgA88Z++IWfAe8cwUaTGnSEZO4AhsFGpsB6ChY74X4M5mL3ZOPe
w2YfYf1LDRGXT4mRaiBrVGP6Wt0J8CHsQsKxsAs4DLy7DcbdWsUtM5RNaZpez0O0
hFn8EIchrFnESd3Q1OMbRlAIFCfy58vVE1ZjnjJVL8bhFkyhMpwh07RbJH1ug/NC
/l1CnfLdcHlrtKOCeDVLSfbvLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPjMeHT+
R6weYlT7vLrMOjJx4p5eMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB
ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIxMEEvQTUzOEFEQjgzQTgyMTFFOUE0QzI4MTJDQzRGOUFFMDIvNzk3QkY3ODZG
QjJDMTFFRkE0MDVGMzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncggwDQYJKoZIhvcNAQELBQADggEBADjP0wgJ3/5yMfeD
fYO+eXJwSezW12WjAc+pgHYJJiyBcS/5COUxy9H+JDcrZDkA0mEenQm3zaN4Kbby
iMT06rBXEY2mT16y+pBiQrMNOQDJwXexXhodLNKbUpaLQhIrY4GMH++2A1OM0LEu
8KSvK3YF39T8cnCLnWp4yMAK8dKCvR15milFRcrAcM4hoWa58bT+gbnqmxJ1arow
LQVh4K5y2/qb7Vv9cb5U2+nxzQcY0hfU/uZP0imYse3UjmMKC1XYuGPuxkmvH6Kd
nu46vUTLOliSvhOFnb3Nm8Jq2M29RZxE2POnqjv/NNkxzERVSbxXtzwo3qQAWBXT
1AKld5A=
-----END CERTIFICATE-----
Generated at Fri May 16 13:53:44 2025 by rpki-client