Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
File:                     92B377C82CB011F0A2E86B16C4F9AE02.roa (raw, json)
Hash identifier:          jOhNPwVgr8IgRDHfIrJJZGVjc3Pfqrjw7RoDj2c/Y0o=
Subject key identifier:   6D:B4:31:A1:63:63:08:D6:9B:3A:B1:88:79:69:A6:DC:9A:EA:05:F2
Certificate issuer:       /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial:       33
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
Signing time:             Fri 09 May 2025 08:35:33 +0000
ROA not before:           Fri 09 May 2025 08:35:33 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     153494
IP address blocks:        103.60.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
        Validity
            Not Before: May  9 08:35:33 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=681dbe55-293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:df:f4:5a:93:c1:a1:ee:0d:18:c4:de:ce:
                    6f:51:e9:02:fa:9b:3b:46:f4:24:63:30:71:cd:2f:
                    55:4f:7e:98:b6:72:e5:d7:60:97:e0:de:29:03:c6:
                    0f:42:ab:7e:e8:7e:43:20:44:c4:64:fd:86:bb:82:
                    b2:76:05:cf:3f:b1:6b:b7:f8:6b:3f:d4:93:fb:34:
                    2c:b4:06:dc:04:94:de:74:7c:4d:c8:da:1d:79:32:
                    17:ab:38:61:3d:ff:f2:1d:3b:b8:cf:87:2f:63:cb:
                    54:2d:43:b6:ad:3e:6e:6a:ca:04:9b:08:8f:d4:81:
                    50:4f:70:52:cf:26:f3:27:08:72:9e:dc:41:51:f0:
                    69:24:14:cf:6e:80:8e:a2:f1:0c:30:94:fb:c3:94:
                    16:5e:96:cc:27:12:f3:28:33:42:3f:f6:0b:d3:d9:
                    a4:0a:c9:73:57:09:e6:77:7c:ea:6e:2a:1d:a2:40:
                    81:6f:b1:69:72:da:8e:42:5f:f6:e5:64:15:a8:7d:
                    0f:c6:c6:00:af:8e:75:70:46:cd:83:83:6d:12:6a:
                    02:86:42:d6:3c:02:81:42:23:5f:d4:90:92:e3:f4:
                    e8:01:e6:ed:78:bb:75:88:3f:96:24:81:b9:5f:cd:
                    73:1d:40:0b:4c:7e:8e:f8:1a:0b:ba:7b:e8:7b:7b:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B4:31:A1:63:63:08:D6:9B:3A:B1:88:79:69:A6:DC:9A:EA:05:F2
            X509v3 Authority Key Identifier:
                keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ab:a5:96:6f:45:7d:e1:34:6d:08:b5:dc:03:08:95:12:66:
         63:ce:3c:19:d3:09:fb:83:54:1f:51:0a:9f:ed:b9:09:e1:aa:
         43:46:e1:c7:d1:82:7c:38:3e:62:ee:f8:91:ad:bc:4a:3d:9d:
         71:c4:75:3c:51:a5:59:14:ab:d5:d6:73:d6:46:7c:61:df:06:
         3e:74:39:ad:2b:bd:d2:9a:be:5b:b1:39:1a:00:57:ee:5b:bb:
         53:bd:d6:ca:35:bd:31:df:b7:87:37:3b:56:88:94:45:44:f4:
         3d:5c:10:cc:1c:b5:82:c1:91:c3:14:d3:ea:01:af:fd:ff:67:
         bb:ea:59:f2:f6:f2:90:e2:83:40:9e:99:f8:f6:54:a7:d9:6c:
         cd:0e:d4:36:a4:1e:65:fa:dc:3f:35:40:4e:ad:a0:da:ed:f7:
         35:c9:6a:6b:d0:19:36:31:48:34:82:81:ad:b2:46:c5:58:c7:
         d1:e9:b4:4b:26:43:a4:52:59:65:5c:a6:ca:d7:ff:24:09:3a:
         e5:af:3c:58:be:7a:74:a8:a2:35:82:58:2d:8e:58:54:84:c1:
         a1:18:85:48:cc:6a:03:5d:ca:39:1d:d9:54:f8:cd:4f:ac:c3:
         2c:d4:ea:54:d9:74:f5:97:b4:05:57:11:86:07:b7:94:b1:2e:
         f7:c0:14:57
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RTk2RTExMC8GA1UEBRMoMjQyOUEzRUU1MDg4RjNENDUzNzJBOEUzQjM2ODM0Qzc1
RUFFNkQyOTAeFw0yNTA1MDkwODM1MzNaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MWRiZTU1LTI5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyrd/0WpPBoe4NGMTezm9R6QL6mztG9CRjMHHNL1VPfpi2cuXXYJfg3ikDxg9C
q37ofkMgRMRk/Ya7grJ2Bc8/sWu3+Gs/1JP7NCy0BtwElN50fE3I2h15MherOGE9
//IdO7jPhy9jy1QtQ7atPm5qygSbCI/UgVBPcFLPJvMnCHKe3EFR8GkkFM9ugI6i
8QwwlPvDlBZelswnEvMoM0I/9gvT2aQKyXNXCeZ3fOpuKh2iQIFvsWly2o5CX/bl
ZBWofQ/GxgCvjnVwRs2Dg20SagKGQtY8AoFCI1/UkJLj9OgB5u14u3WIP5Ykgblf
zXMdQAtMfo74Ggu6e+h7ewmrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbbQxoWNj
CNabOrGIeWmm3JrqBfIwHwYDVR0jBBgwFoAUJCmj7lCI89RTcqjjs2g0x16ubSkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTZFLzIzRDJGMTZFRUMy
MTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJT
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkNtajdsQ0k4OVJUY3FqanMyZzB4MTZ1YlNrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi85MkIzNzdDODJD
QjAxMUYwQTJFODZCMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmc8QDANBgkqhkiG9w0BAQsFAAOCAQEAkKullm9FfeE0bQi1
3AMIlRJmY848GdMJ+4NUH1EKn+25CeGqQ0bhx9GCfDg+Yu74ka28Sj2dccR1PFGl
WRSr1dZz1kZ8Yd8GPnQ5rSu90pq+W7E5GgBX7lu7U73WyjW9Md+3hzc7VoiURUT0
PVwQzBy1gsGRwxTT6gGv/f9nu+pZ8vbykOKDQJ6Z+PZUp9lszQ7UNqQeZfrcPzVA
Tq2g2u33Nclqa9AZNjFINIKBrbJGxVjH0em0SyZDpFJZZVymytf/JAk65a88WL56
dKiiNYJYLY5YVITBoRiFSMxqA13KOR3ZVPjNT6zDLNTqVNl09Ze0BVcRhge3lLEu
98AUVw==
-----END CERTIFICATE-----
Generated at Wed May 14 10:37:47 2025 by rpki-client