Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
File:                     14AD3D427E9D11EC914D4A6DC4F9AE02.roa (raw, json)
Hash identifier:          iIiLthCmbedJRo28SgXjSnyh36vN7rpzHjXfoOnGfcE=
Subject key identifier:   47:A9:3F:E6:E5:D1:BB:73:20:55:CE:2A:2A:69:19:18:3A:61:45:95
Certificate issuer:       /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial:       03FC
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
Signing time:             Thu 03 Jul 2025 01:04:21 +0000
ROA not before:           Thu 03 Jul 2025 01:04:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137956
IP address blocks:        103.118.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
        Validity
            Not Before: Jul  3 01:04:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6865d715-bf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:2a:6f:1c:10:e0:4b:c0:0d:71:6d:d7:41:
                    05:43:13:29:66:a8:e8:59:81:10:14:de:20:36:48:
                    07:20:ec:3b:3c:b6:f9:2b:c3:a3:9d:fc:97:dc:14:
                    a1:ef:a9:00:22:3f:59:f2:e9:f3:5d:1e:ec:ff:3c:
                    f1:c5:d9:4a:73:13:c1:e3:cc:f5:f8:38:c2:f1:ca:
                    68:e4:f4:d0:35:17:8b:f9:a4:07:a3:23:63:af:69:
                    a3:30:9d:9c:de:6d:c5:c8:17:08:2b:fa:64:fa:af:
                    b6:ec:b1:8c:eb:70:75:ff:ec:31:24:ad:9b:f6:6c:
                    e5:ed:3c:ce:14:cb:62:8f:fb:34:95:3c:dd:51:15:
                    0c:97:69:4d:34:fd:8d:1a:16:25:66:ec:5f:58:05:
                    16:75:5a:f8:8c:58:7d:ae:3e:94:1c:b3:84:3b:8a:
                    e8:cc:fc:63:c0:b5:35:e6:d2:fe:8d:ef:27:72:1a:
                    99:33:8c:ce:46:4f:cf:b8:01:50:f0:80:e1:22:2a:
                    d5:a7:0f:03:b2:38:40:74:c1:e5:ec:df:e0:b8:fa:
                    d5:05:64:41:ff:b4:c7:72:38:ec:df:ab:1b:c2:66:
                    0e:a9:1d:ec:c4:39:b0:d7:80:35:34:e3:54:da:65:
                    ee:c1:21:7f:40:84:8e:2f:b6:b2:22:53:ba:fd:5e:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A9:3F:E6:E5:D1:BB:73:20:55:CE:2A:2A:69:19:18:3A:61:45:95
            X509v3 Authority Key Identifier:
                keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/14AD3D427E9D11EC914D4A6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:9c:09:f1:a4:f7:e8:6e:d4:a5:99:b1:f6:37:ca:60:c8:
         87:e0:c5:c3:99:13:9c:88:6e:a6:ab:f9:aa:a7:1b:63:74:81:
         81:ee:27:ad:96:32:15:73:5b:67:cc:96:87:f9:20:3f:30:9a:
         1e:4d:b4:38:25:a0:23:c9:24:88:49:cc:b6:3c:0f:74:62:a9:
         f6:b0:c9:f0:b8:d3:33:81:ce:ef:78:46:ef:2f:39:d6:de:23:
         9f:3b:ef:0a:a6:54:83:e3:fb:ea:42:06:db:0a:65:40:34:18:
         5c:8c:91:d1:15:40:75:71:11:cd:ba:89:23:b7:1f:2a:db:b1:
         35:06:04:bc:c2:a7:b8:01:f3:c4:60:36:3a:0c:b3:7b:09:55:
         3a:c9:08:38:b9:49:08:cb:bc:fe:fe:de:7d:7b:92:4e:e7:5c:
         d2:d3:f8:d5:05:56:cf:33:0f:ae:ed:1e:bb:81:56:2a:3e:1f:
         82:9a:77:2c:3d:4d:d8:d2:95:57:27:95:b1:31:e1:c5:6f:3f:
         a8:fe:9a:25:1b:f7:26:d6:ce:59:b0:f2:fc:23:45:d6:6e:fa:
         86:f4:bb:4b:c5:14:bd:52:db:e1:39:9b:49:2e:f8:fe:53:d8:
         9c:98:a8:ff:99:d1:2f:5e:a7:41:d0:4b:e0:e1:73:6d:4a:88:
         eb:fb:6e:4e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF
Q0M2NjNFRUQwHhcNMjUwNzAzMDEwNDIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY1ZDcxNS1iZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7M4qbxwQ4EvADXFt10EFQxMpZqjoWYEQFN4gNkgHIOw7PLb5K8OjnfyX3BSh
76kAIj9Z8unzXR7s/zzxxdlKcxPB48z1+DjC8cpo5PTQNReL+aQHoyNjr2mjMJ2c
3m3FyBcIK/pk+q+27LGM63B1/+wxJK2b9mzl7TzOFMtij/s0lTzdURUMl2lNNP2N
GhYlZuxfWAUWdVr4jFh9rj6UHLOEO4rozPxjwLU15tL+je8nchqZM4zORk/PuAFQ
8IDhIirVpw8DsjhAdMHl7N/guPrVBWRB/7THcjjs36sbwmYOqR3sxDmw14A1NONU
2mXuwSF/QISOL7ayIlO6/V7ixQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEepP+bl
0btzIFXOKippGRg6YUWVMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF
OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTg1QzUvODkzQzY0RjY3RTlBMTFFQ0E1QUQ2NzZCQzRGOUFFMDIvMTRBRDNENDI3
RTlEMTFFQzkxNEQ0QTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABndjIwDQYJKoZIhvcNAQELBQADggEBAJhPnAnxpPfobtSl
mbH2N8pgyIfgxcOZE5yIbqar+aqnG2N0gYHuJ62WMhVzW2fMlof5ID8wmh5NtDgl
oCPJJIhJzLY8D3RiqfawyfC40zOBzu94Ru8vOdbeI5877wqmVIPj++pCBtsKZUA0
GFyMkdEVQHVxEc26iSO3HyrbsTUGBLzCp7gB88RgNjoMs3sJVTrJCDi5SQjLvP7+
3n17kk7nXNLT+NUFVs8zD67tHruBVio+H4Kadyw9TdjSlVcnlbEx4cVvP6j+miUb
9ybWzlmw8vwjRdZu+ob0u0vFFL1S2+E5m0ku+P5T2JyYqP+Z0S9ep0HQS+Dhc21K
iOv7bk4=
-----END CERTIFICATE-----
Generated at Thu Jul 3 13:18:42 2025 by rpki-client