Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/AD47BEC4320611EE845F4A5AC4F9AE02.roa
File:                     AD47BEC4320611EE845F4A5AC4F9AE02.roa (raw, json)
Hash identifier:          sG8+UmvydEBpSAr4fmNDZH+yixCCNVcNuUvyoD1Dy2E=
Subject key identifier:   A4:AC:26:57:4B:94:D6:C8:BA:74:64:1B:FD:87:0A:B8:3E:05:87:D9
Certificate issuer:       /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial:       0161
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/AD47BEC4320611EE845F4A5AC4F9AE02.roa
Signing time:             Thu 01 May 2025 03:10:03 +0000
ROA not before:           Thu 01 May 2025 03:10:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     131214
IP address blocks:        103.19.170.0/23 maxlen: 24
                          103.73.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
                          rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
        Validity
            Not Before: May  1 03:10:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6812e60b-0a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:76:d7:e8:fe:c7:ca:be:da:4e:b6:40:bf:
                    f2:17:cd:1f:ce:91:8f:53:3b:aa:7d:94:61:14:78:
                    a0:a4:01:3d:c0:5a:9b:d7:bd:2c:71:d0:a1:fd:1b:
                    51:04:6c:dc:cd:45:8c:93:b9:1b:12:5d:95:03:76:
                    16:9c:f5:00:5f:f8:b7:11:36:7d:d6:55:53:61:de:
                    1b:ea:bd:cb:e9:db:75:88:e5:cd:18:06:ae:b4:3f:
                    f4:50:01:8f:2c:04:98:9c:6b:ae:d3:12:d6:b7:67:
                    d1:11:e5:0b:38:b5:75:40:bb:37:44:09:82:aa:46:
                    e8:89:97:a8:ca:2f:7f:a6:3e:a6:ba:5e:a1:b5:d7:
                    07:fc:05:25:a6:e2:f3:34:50:ed:39:87:44:94:5f:
                    3d:ee:4c:1a:f3:ca:14:06:8c:6a:65:fc:b2:86:7b:
                    3f:62:a5:36:76:91:fa:7b:30:62:5b:b8:75:e5:10:
                    48:8f:a5:b5:4d:d2:e5:74:d6:24:61:df:f1:8a:42:
                    0b:a9:9b:12:3c:3f:5e:ac:85:5f:76:59:b0:f8:e7:
                    2c:70:d1:7e:d1:9b:9b:aa:3e:9a:d5:0a:3a:3f:8d:
                    7e:5d:9d:26:76:1d:03:1f:42:bd:48:f9:2c:90:de:
                    89:04:94:b7:96:1e:49:6f:b8:25:04:f5:12:b3:37:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AC:26:57:4B:94:D6:C8:BA:74:64:1B:FD:87:0A:B8:3E:05:87:D9
            X509v3 Authority Key Identifier:
                keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/AD47BEC4320611EE845F4A5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.170.0/23
                  103.73.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:3c:20:12:e8:4b:58:94:80:7a:23:3d:c6:0a:db:6a:60:cf:
         16:ac:fa:e5:0c:2e:57:c5:2f:2b:09:a3:69:83:4c:a6:6c:e0:
         52:5c:2d:00:13:73:86:06:c6:a9:58:4f:70:4c:b6:50:31:92:
         0b:f6:62:b6:b5:41:f5:9d:b4:70:97:81:86:2f:9f:23:af:72:
         da:ae:a1:b1:1c:c0:70:e5:e8:67:3f:23:1f:b3:87:af:ea:69:
         a1:d7:f3:66:2d:50:35:c1:c1:a1:00:75:4d:62:be:26:d8:f4:
         eb:46:0c:16:b2:eb:d3:22:c8:31:28:d3:e0:e0:e9:80:7d:2e:
         19:a9:49:50:21:04:a2:63:7d:28:22:f2:a8:06:c5:65:47:69:
         21:df:e0:12:ee:38:26:4d:e3:68:89:5f:64:db:d4:92:dd:52:
         cf:61:6e:07:60:fa:8d:4b:59:5b:f6:56:cb:2d:24:68:8a:a9:
         a4:0c:f5:08:9f:5a:5e:8b:9e:cf:0e:10:42:76:3d:eb:58:4c:
         5b:07:b7:ca:3d:d2:f2:f5:ea:82:83:3f:9b:86:fb:a3:f6:43:
         cb:73:48:9c:be:e0:17:c5:f8:48:4e:af:26:a2:e3:e2:e6:2c:
         29:51:8a:73:f0:f8:d7:46:12:c9:50:8a:8d:5c:53:06:24:9f:
         a1:19:42:94
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE
NTMzM0RBNEYwHhcNMjUwNTAxMDMxMDAzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEyZTYwYi0wYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJ121+j+x8q+2k62QL/yF80fzpGPUzuqfZRhFHigpAE9wFqb170scdCh/RtR
BGzczUWMk7kbEl2VA3YWnPUAX/i3ETZ91lVTYd4b6r3L6dt1iOXNGAautD/0UAGP
LASYnGuu0xLWt2fREeULOLV1QLs3RAmCqkboiZeoyi9/pj6mul6htdcH/AUlpuLz
NFDtOYdElF897kwa88oUBoxqZfyyhns/YqU2dpH6ezBiW7h15RBIj6W1TdLldNYk
Yd/xikILqZsSPD9erIVfdlmw+OcscNF+0Zubqj6a1Qo6P41+XZ0mdh0DH0K9SPks
kN6JBJS3lh5Jb7glBPUSszdTiwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKSsJldL
lNbIunRkG/2HCrg+BYfZMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx
ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Q3QTQvM0NDNzE5OTYxMTg3MTFFRUIzOUZFMjQzQzRGOUFFMDIvQUQ0N0JFQzQz
MjA2MTFFRTg0NUY0QTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnE6oDBAFnSXAwDQYJKoZIhvcNAQELBQADggEBAI08IBLo
S1iUgHojPcYK22pgzxas+uUMLlfFLysJo2mDTKZs4FJcLQATc4YGxqlYT3BMtlAx
kgv2Yra1QfWdtHCXgYYvnyOvctquobEcwHDl6Gc/Ix+zh6/qaaHX82YtUDXBwaEA
dU1ivibY9OtGDBay69MiyDEo0+Dg6YB9LhmpSVAhBKJjfSgi8qgGxWVHaSHf4BLu
OCZN42iJX2Tb1JLdUs9hbgdg+o1LWVv2VsstJGiKqaQM9QifWl6Lns8OEEJ2PetY
TFsHt8o90vL16oKDP5uG+6P2Q8tzSJy+4BfF+EhOryai4+LmLClRinPw+NdGEslQ
io1cUwYkn6EZQpQ=
-----END CERTIFICATE-----
Generated at Thu May 15 00:26:44 2025 by rpki-client