Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/7482AB4A3DC511EB8276EA19C4F9AE02.roa
File:                     7482AB4A3DC511EB8276EA19C4F9AE02.roa (raw, json)
Hash identifier:          xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=
Subject key identifier:   C5:9A:2C:1D:9B:C1:EE:6F:AA:F6:95:3B:F0:92:8F:02:D9:CE:83:A8
Certificate issuer:       /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638
Certificate serial:       1568
Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/7482AB4A3DC511EB8276EA19C4F9AE02.roa
Signing time:             Sun 04 May 2025 16:54:54 +0000
ROA not before:           Sun 04 May 2025 16:54:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     131278
IP address blocks:        103.110.192.0/24 maxlen: 24
                          103.110.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 16:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5480 (0x1568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638
        Validity
            Not Before: May  4 16:54:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68179bdd-ccdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:48:1a:3d:92:8c:7c:0a:9f:35:26:f0:26:
                    dd:47:2f:c5:c7:57:7d:99:bd:c4:24:9e:ff:bd:69:
                    4e:1d:34:0f:9d:63:06:e5:da:22:9c:27:cd:7f:4c:
                    f4:0b:25:2c:1e:88:fa:0f:34:47:a7:f3:26:d8:4b:
                    58:87:da:be:6c:99:6f:92:cc:75:66:ce:7d:3a:d9:
                    2d:d7:7b:b2:b9:32:c0:82:ee:88:9a:46:84:09:79:
                    24:ae:94:62:c4:00:b3:d7:eb:98:30:f8:dd:16:97:
                    e5:25:41:fa:5f:78:7e:09:78:b0:49:5f:53:92:23:
                    f6:b3:63:23:e0:15:b9:2f:4a:8e:27:49:f7:39:b4:
                    1d:f1:d4:61:bd:2e:19:a4:13:3d:e3:4c:90:ff:1f:
                    5e:0f:87:f5:31:f4:ca:c2:62:a7:4d:4a:f9:30:a9:
                    a4:63:b4:21:9c:77:bd:58:0f:3b:57:ea:b5:ef:03:
                    f6:36:a3:bf:54:95:76:f9:29:59:b5:8c:d2:30:41:
                    98:2a:b4:2f:fe:2f:5b:dc:02:c8:a0:77:07:70:c3:
                    69:9e:a8:ee:7c:20:78:2e:13:65:45:e7:e7:fe:d3:
                    22:08:51:53:a6:88:80:99:16:8e:7c:cb:a7:8e:85:
                    6d:42:be:73:36:84:62:a0:79:ee:6c:42:1a:a5:c3:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:2C:1D:9B:C1:EE:6F:AA:F6:95:3B:F0:92:8F:02:D9:CE:83:A8
            X509v3 Authority Key Identifier:
                keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/7482AB4A3DC511EB8276EA19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:99:83:f0:b8:14:fe:77:cf:4d:86:a9:59:40:2e:ca:27:c1:
         e5:1c:2f:aa:0c:44:fd:fc:d4:e7:61:e6:b7:4f:24:c5:b7:f2:
         f5:2e:1d:a3:32:75:3a:11:4a:7f:2b:33:5f:82:52:db:3d:b7:
         6c:eb:06:69:9e:55:07:46:8a:51:8e:61:2e:2e:0d:c2:9e:38:
         68:55:56:f6:2f:29:63:58:32:ac:16:37:19:83:1f:39:9f:80:
         dd:c6:15:ec:ed:fc:94:c6:dc:dd:6e:a7:87:8c:5b:b6:f8:27:
         f4:b6:fd:eb:cd:6b:f3:ab:35:5a:75:a6:f2:fd:17:45:c1:3d:
         82:73:1e:e6:2c:16:d3:2b:74:47:5f:dc:0f:82:f8:ef:9b:52:
         92:32:f1:ad:7d:c3:48:7b:f7:97:5d:de:42:db:c0:36:a8:e2:
         12:84:67:de:52:7b:d0:96:02:aa:12:ac:15:06:4a:44:25:9a:
         2e:71:27:66:99:f1:9f:65:7b:ad:ee:61:1a:86:cc:28:5f:4c:
         63:d4:ae:c2:38:f6:0b:d2:2c:93:97:b2:59:05:b1:59:2b:31:
         55:26:da:5a:04:a7:06:a5:0e:7b:61:07:d4:7b:52:08:b5:27:
         62:7b:44:a4:b2:bb:57:fb:ff:c5:47:f4:fc:d3:a7:f3:cf:6e:
         f4:7e:f1:63
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5
NjNDM0Y2MzgwHhcNMjUwNTA0MTY1NDU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE3OWJkZC1jY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPNIGj2SjHwKnzUm8CbdRy/Fx1d9mb3EJJ7/vWlOHTQPnWMG5doinCfNf0z0
CyUsHoj6DzRHp/Mm2EtYh9q+bJlvksx1Zs59Otkt13uyuTLAgu6ImkaECXkkrpRi
xACz1+uYMPjdFpflJUH6X3h+CXiwSV9TkiP2s2Mj4BW5L0qOJ0n3ObQd8dRhvS4Z
pBM940yQ/x9eD4f1MfTKwmKnTUr5MKmkY7QhnHe9WA87V+q17wP2NqO/VJV2+SlZ
tYzSMEGYKrQv/i9b3ALIoHcHcMNpnqjufCB4LhNlRefn/tMiCFFTpoiAmRaOfMun
joVtQr5zNoRioHnubEIapcN93wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMWaLB2b
we5vqvaVO/CSjwLZzoOoMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4
RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REQwMEUvODAwRTNGNzIzOEUzMTFFODg5NzdGQjBGQzRGOUFFMDIvNzQ4MkFCNEEz
REM1MTFFQjgyNzZFQTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnbsAwDQYJKoZIhvcNAQELBQADggEBAC6Zg/C4FP53z02G
qVlALsonweUcL6oMRP381Odh5rdPJMW38vUuHaMydToRSn8rM1+CUts9t2zrBmme
VQdGilGOYS4uDcKeOGhVVvYvKWNYMqwWNxmDHzmfgN3GFezt/JTG3N1up4eMW7b4
J/S2/evNa/OrNVp1pvL9F0XBPYJzHuYsFtMrdEdf3A+C+O+bUpIy8a19w0h795dd
3kLbwDao4hKEZ95Se9CWAqoSrBUGSkQlmi5xJ2aZ8Z9le63uYRqGzChfTGPUrsI4
9gvSLJOXslkFsVkrMVUm2loEpwalDnthB9R7Ugi1J2J7RKSyu1f7/8VH9PzTp/PP
bvR+8WM=
-----END CERTIFICATE-----
Generated at Fri May 16 05:06:36 2025 by rpki-client