Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/E5C4974689CF11EAA39AF441C4F9AE02.roa
File:                     E5C4974689CF11EAA39AF441C4F9AE02.roa (raw, json)
Hash identifier:          S/+GQ9LaNR6oJzl2BIn9qWcVDZWjqUHkpie5l4NiGuc=
Subject key identifier:   D6:5B:E8:10:E2:56:BF:7A:53:FA:91:C1:07:AB:72:4E:3E:D1:B9:03
Certificate issuer:       /CN=A91CE285/serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
Certificate serial:       09AE
Authority key identifier: 5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/E5C4974689CF11EAA39AF441C4F9AE02.roa
Signing time:             Sun 04 May 2025 20:00:06 +0000
ROA not before:           Sun 04 May 2025 20:00:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140585
IP address blocks:        103.150.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 19:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478 (0x9ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE285, serialNumber=5F8AF35973FD4FA563F33B7376534682107BC8F9
        Validity
            Not Before: May  4 20:00:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6817c746-296c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:fb:82:fa:9e:96:f9:b1:8c:94:1d:7a:fd:
                    73:f1:9e:2c:ca:04:6f:17:e2:fc:2b:88:98:2d:e6:
                    ff:49:9f:72:5a:02:f9:a3:70:8e:64:0a:24:b3:06:
                    d4:be:7a:da:84:c4:a4:94:a4:9f:03:41:5d:d6:3c:
                    6e:ca:85:f7:16:be:f9:23:34:b5:09:67:79:0e:d1:
                    4c:7a:79:99:1d:81:6f:5f:db:8a:0a:7d:04:56:8c:
                    37:cd:2e:a7:d0:92:4b:a6:bb:94:9c:f8:2b:45:dd:
                    00:03:7c:55:0f:14:fc:18:19:ff:22:a8:46:8e:4f:
                    8b:05:18:02:08:15:4b:12:ae:af:e8:2c:63:de:de:
                    55:2b:94:e1:52:a5:d7:5c:4c:5f:18:ef:d3:03:a5:
                    9e:68:e2:d9:8e:51:49:d3:dd:c9:26:26:5d:3a:0d:
                    e4:fd:98:c4:19:df:a6:eb:20:f1:7c:b4:b8:57:60:
                    bd:a0:75:d7:e9:e0:38:b7:a5:38:03:11:59:5b:bb:
                    e5:31:3f:b1:15:b9:2e:61:d1:1a:d3:ca:c6:26:85:
                    7e:5f:cb:43:43:bf:f8:36:74:03:2e:35:de:e1:1b:
                    4c:5e:c5:08:7a:a4:8e:a6:a2:d2:7a:d5:85:f3:49:
                    9a:c2:61:e8:20:3d:b8:e4:1b:e9:c0:04:1f:3d:58:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5B:E8:10:E2:56:BF:7A:53:FA:91:C1:07:AB:72:4E:3E:D1:B9:03
            X509v3 Authority Key Identifier:
                keyid:5F:8A:F3:59:73:FD:4F:A5:63:F3:3B:73:76:53:46:82:10:7B:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/X4rzWXP9T6Vj8ztzdlNGghB7yPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X4rzWXP9T6Vj8ztzdlNGghB7yPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE285/5E1648B684BC11EAA5262263C4F9AE02/E5C4974689CF11EAA39AF441C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:24:79:67:ae:6d:47:a2:1a:68:38:33:a7:5e:4b:0b:62:6a:
         31:3d:03:a4:90:3d:f8:33:ec:70:ee:19:8d:d2:06:79:22:03:
         23:85:a9:0b:dc:44:d7:b0:d8:bd:01:96:d6:4a:98:0a:f4:40:
         12:b7:b4:80:07:be:a9:78:7b:03:75:56:55:11:bb:84:a2:0c:
         01:df:dd:ee:a2:6c:3a:51:64:04:2b:3c:ef:ab:3f:e3:84:fc:
         d0:13:da:5f:87:b0:e6:f3:25:27:e8:55:47:f1:d9:00:d3:6a:
         a0:6b:86:19:2e:f8:63:9a:41:dc:8b:dd:23:c4:f1:d0:03:1a:
         f3:2c:e3:b8:08:f4:7e:17:48:38:f6:05:a5:3c:e6:48:d5:28:
         ea:b3:e9:13:69:6e:61:c8:63:3c:ea:ae:4f:b7:4d:ca:cc:88:
         5b:59:5d:e8:8b:0f:af:81:bd:d1:b8:d0:5c:67:ba:48:db:10:
         1b:37:c5:f6:96:13:05:10:1c:33:3a:41:17:ee:0b:4d:f4:f7:
         ab:d2:03:7d:27:ca:5e:d6:c7:e1:6a:5d:ca:b3:3a:db:1e:b5:
         26:c4:a2:3b:4d:3e:80:9d:74:7f:b0:3e:85:a1:a7:2e:87:6b:
         e8:f9:c1:de:4c:79:25:b7:db:a1:da:3a:41:36:a6:3c:f0:90:
         62:33:ca:5d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UyODUxMTAvBgNVBAUTKDVGOEFGMzU5NzNGRDRGQTU2M0YzM0I3Mzc2NTM0Njgy
MTA3QkM4RjkwHhcNMjUwNTA0MjAwMDA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE3Yzc0Ni0yOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4H7gvqelvmxjJQdev1z8Z4sygRvF+L8K4iYLeb/SZ9yWgL5o3COZAokswbU
vnrahMSklKSfA0Fd1jxuyoX3Fr75IzS1CWd5DtFMenmZHYFvX9uKCn0EVow3zS6n
0JJLpruUnPgrRd0AA3xVDxT8GBn/IqhGjk+LBRgCCBVLEq6v6Cxj3t5VK5ThUqXX
XExfGO/TA6WeaOLZjlFJ093JJiZdOg3k/ZjEGd+m6yDxfLS4V2C9oHXX6eA4t6U4
AxFZW7vlMT+xFbkuYdEa08rGJoV+X8tDQ7/4NnQDLjXe4RtMXsUIeqSOpqLSetWF
80mawmHoID245BvpwAQfPVjMsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNZb6BDi
Vr96U/qRwQerck4+0bkDMB8GA1UdIwQYMBaAFF+K81lz/U+lY/M7c3ZTRoIQe8j5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4NS81RTE2NDhCNjg0
QkMxMUVBQTUyNjIyNjNDNEY5QUUwMi9YNHJ6V1hQOVQ2Vmo4enR6ZGxOR2doQjd5
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g0cnpXWFA5VDZWajh6dHpkbE5HZ2hCN3lQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0UyODUvNUUxNjQ4QjY4NEJDMTFFQUE1MjYyMjYzQzRGOUFFMDIvRTVDNDk3NDY4
OUNGMTFFQUEzOUFGNDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlqYwDQYJKoZIhvcNAQELBQADggEBAGYkeWeubUeiGmg4
M6deSwtiajE9A6SQPfgz7HDuGY3SBnkiAyOFqQvcRNew2L0BltZKmAr0QBK3tIAH
vql4ewN1VlURu4SiDAHf3e6ibDpRZAQrPO+rP+OE/NAT2l+HsObzJSfoVUfx2QDT
aqBrhhku+GOaQdyL3SPE8dADGvMs47gI9H4XSDj2BaU85kjVKOqz6RNpbmHIYzzq
rk+3TcrMiFtZXeiLD6+BvdG40FxnukjbEBs3xfaWEwUQHDM6QRfuC03096vSA30n
yl7Wx+FqXcqzOtsetSbEojtNPoCddH+wPoWhpy6Ha+j5wd5MeSW326HaOkE2pjzw
kGIzyl0=
-----END CERTIFICATE-----
Generated at Tue May 13 13:28:02 2025 by rpki-client