Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9E7F692C2ADF11F0B3006D40C4F9AE02.roa
File:                     9E7F692C2ADF11F0B3006D40C4F9AE02.roa (raw, json)
Hash identifier:          +5a166Qflas3aLR9Nf7vhA89ozfefd/BEiGQIYX5xJM=
Subject key identifier:   BC:85:71:C6:2D:F7:6A:E9:39:B2:2D:B9:63:9C:94:06:DA:B1:2E:C2
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       037B
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9E7F692C2ADF11F0B3006D40C4F9AE02.roa
Signing time:             Wed 07 May 2025 01:07:18 +0000
ROA not before:           Wed 07 May 2025 01:07:18 +0000
ROA not after:            Thu 28 Aug 2025 00:00:00 +0000
asID:                     142063
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: May  7 01:07:18 2025 GMT
            Not After : Aug 28 00:00:00 2025 GMT
        Subject: CN=681ab245-e45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:59:b0:8e:29:e8:78:b3:17:e7:32:48:08:
                    bf:06:01:95:a3:31:bc:3f:bb:5e:df:50:76:f1:5d:
                    13:a7:2a:b2:35:0e:c3:d7:d1:b5:6b:32:69:36:d3:
                    2e:79:40:33:1c:63:c6:6a:1e:2f:90:ba:34:2c:e4:
                    c1:68:46:2f:33:ed:f0:39:50:77:34:7b:84:32:11:
                    bd:40:c4:c6:bc:e0:05:82:7a:52:b6:4e:91:5b:03:
                    00:31:4b:86:e9:1c:d8:ff:eb:07:24:3d:17:81:89:
                    73:1b:31:9a:80:36:36:f1:4a:e3:80:b1:a2:e6:ad:
                    04:0e:78:0e:e5:ea:be:04:9f:f5:fb:43:7d:67:df:
                    88:53:7d:d9:e9:73:e4:71:4f:ef:28:c8:a6:d6:d6:
                    77:ef:a5:e4:ad:ab:7c:f3:97:e6:bc:22:7e:78:be:
                    5f:14:b5:a3:d9:03:00:ae:41:9d:76:65:ae:52:c7:
                    22:2e:bf:24:1e:98:16:8e:5a:c1:9f:a7:02:8c:0f:
                    2e:ea:53:68:97:3b:21:1c:5c:57:46:10:47:8f:ac:
                    50:a2:e1:49:26:f2:a0:1c:c7:59:7a:ee:d0:1e:77:
                    fb:ed:9f:aa:1b:a6:2e:83:c4:39:e2:6f:73:be:21:
                    84:a7:52:24:fd:0b:33:cd:2e:19:08:21:ed:29:a8:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:85:71:C6:2D:F7:6A:E9:39:B2:2D:B9:63:9C:94:06:DA:B1:2E:C2
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9E7F692C2ADF11F0B3006D40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b3:e1:3c:14:7e:28:22:30:c0:c1:04:52:27:be:83:ef:56:
         f6:f9:f2:a5:65:c7:70:fe:96:05:43:18:bd:01:8b:79:fd:71:
         c6:a4:dd:93:d6:69:57:7f:a1:6f:19:d8:d4:ce:c4:2e:89:4e:
         42:0a:05:04:71:1b:b6:19:ff:94:30:db:4e:fb:52:c9:3c:e4:
         42:55:26:49:fc:c9:f9:6b:b0:1b:b3:58:17:c9:8e:5c:7a:b9:
         64:fe:e1:bc:98:ba:b5:a4:66:7c:c5:bd:dc:21:63:7c:d5:01:
         76:4e:be:8b:60:73:d4:51:73:bc:f5:65:bb:11:16:df:bb:36:
         ba:81:dd:da:80:56:0b:3c:89:31:19:04:f1:c7:bf:54:f8:62:
         fe:7c:f5:69:3e:81:80:39:44:44:9f:7a:72:0c:37:6c:50:a7:
         20:f2:3a:b5:22:2d:d9:a9:a2:40:29:af:82:8f:ca:a0:6a:f8:
         cc:10:1f:07:52:bd:3a:33:df:40:9b:db:ab:20:5f:37:a8:ba:
         e2:b8:b3:00:42:ee:dc:3c:16:48:a5:74:e2:db:c6:29:64:51:
         12:1f:5b:55:30:dc:63:e3:40:90:8c:92:71:ed:b7:bc:9e:e6:
         11:f8:a1:d5:e1:1d:9b:e2:01:34:79:3b:af:3e:21:74:91:0a:
         3c:e2:a5:b2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3
QUJGOTdERTMwHhcNMjUwNTA3MDEwNzE4WhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFhYjI0NS1lNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ihZsI4p6HizF+cySAi/BgGVozG8P7te31B28V0TpyqyNQ7D19G1azJpNtMu
eUAzHGPGah4vkLo0LOTBaEYvM+3wOVB3NHuEMhG9QMTGvOAFgnpStk6RWwMAMUuG
6RzY/+sHJD0XgYlzGzGagDY28UrjgLGi5q0EDngO5eq+BJ/1+0N9Z9+IU33Z6XPk
cU/vKMim1tZ376Xkrat885fmvCJ+eL5fFLWj2QMArkGddmWuUsciLr8kHpgWjlrB
n6cCjA8u6lNolzshHFxXRhBHj6xQouFJJvKgHMdZeu7QHnf77Z+qG6Yug8Q54m9z
viGEp1Ik/QszzS4ZCCHtKagxqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLyFccYt
92rpObItuWOclAbasS7CMB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx
N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDc3NzEvNTVGMkYwRkVCMTdEMTFFQ0I5NzM2MjQxQzRGOUFFMDIvOUU3RjY5MkMy
QURGMTFGMEIzMDA2RDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrKYwDQYJKoZIhvcNAQELBQADggEBAFCz4TwUfigiMMDB
BFInvoPvVvb58qVlx3D+lgVDGL0Bi3n9ccak3ZPWaVd/oW8Z2NTOxC6JTkIKBQRx
G7YZ/5Qw2077Usk85EJVJkn8yflrsBuzWBfJjlx6uWT+4byYurWkZnzFvdwhY3zV
AXZOvotgc9RRc7z1ZbsRFt+7NrqB3dqAVgs8iTEZBPHHv1T4Yv589Wk+gYA5RESf
enIMN2xQpyDyOrUiLdmpokApr4KPyqBq+MwQHwdSvToz30Cb26sgXzeouuK4swBC
7tw8FkildOLbxilkURIfW1Uw3GPjQJCMknHtt7ye5hH4odXhHZviATR5O68+IXSR
CjzipbI=
-----END CERTIFICATE-----
Generated at Wed May 14 01:16:21 2025 by rpki-client