Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/F85D97D8278411F0B46E4A7FC4F9AE02.roa
File:                     F85D97D8278411F0B46E4A7FC4F9AE02.roa (raw, json)
Hash identifier:          gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=
Subject key identifier:   82:92:A3:BB:C6:49:0B:7B:4B:E8:4F:09:67:26:69:A1:24:72:37:74
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       0387
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/F85D97D8278411F0B46E4A7FC4F9AE02.roa
Signing time:             Fri 02 May 2025 18:40:50 +0000
ROA not before:           Fri 02 May 2025 18:40:50 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149633
IP address blocks:        103.183.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 00:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: May  2 18:40:50 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=681511b2-9f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:7b:77:5f:36:c9:0e:96:2e:74:01:cc:cd:
                    2f:7e:cc:f6:76:e3:bb:7f:e6:97:21:d4:30:6a:de:
                    5a:ce:28:13:0d:80:38:76:21:fe:54:82:c9:68:2e:
                    ee:e1:92:37:42:d9:f1:ec:3f:5c:1a:29:03:e8:92:
                    ea:b5:b1:2c:a5:a5:b5:b7:a0:f5:fc:32:3a:bd:f7:
                    77:89:1c:d3:2b:52:46:1d:cf:f1:28:80:f2:10:80:
                    fa:c6:cc:ce:2c:25:ff:f2:ac:ac:27:bb:83:4f:6e:
                    12:3d:5c:d9:12:7d:74:e8:cb:76:ba:c2:da:0c:c1:
                    9a:ad:05:b2:7e:b4:9b:21:d5:ec:2a:41:46:3e:0c:
                    4b:6b:a8:29:71:2f:5f:67:84:d6:8b:de:c0:d2:37:
                    89:9d:ba:b9:49:c2:46:78:cd:34:ad:4e:67:30:3a:
                    ce:ff:f3:a7:e7:e0:83:d0:ca:14:7e:d0:0d:d3:d7:
                    b0:59:4a:73:77:24:62:75:bf:47:8f:88:ff:e1:fb:
                    2d:dd:f0:b3:99:05:24:78:db:2a:60:5c:65:34:87:
                    da:84:62:b9:7b:d5:fd:cf:c9:b5:cf:40:7b:1f:0a:
                    ca:d4:c5:8b:00:a2:25:b1:f2:dc:1d:2e:ca:98:bd:
                    b6:98:d3:6b:fd:a9:09:60:c1:f6:5b:33:e1:a1:6f:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:A3:BB:C6:49:0B:7B:4B:E8:4F:09:67:26:69:A1:24:72:37:74
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/F85D97D8278411F0B46E4A7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:8b:a4:39:99:20:c4:a1:dd:9d:25:fe:4f:4e:da:0d:4c:
         6f:54:ba:96:61:8e:0c:77:8b:98:d4:f7:e6:44:b0:48:da:a5:
         97:37:93:a1:a6:d0:ae:5e:81:d4:5d:36:ce:4b:19:de:ca:88:
         50:33:c6:6a:c9:4c:e2:0e:13:72:cf:0d:e9:a9:71:b1:53:3d:
         db:67:05:60:89:9b:47:cb:ca:5d:d2:2f:c2:95:f6:61:60:7d:
         18:64:e7:58:c0:86:69:4b:31:bc:59:21:f5:c7:3b:42:20:b0:
         75:fb:43:14:2a:ba:75:04:4f:b4:ee:f0:74:ce:d2:ec:38:d6:
         39:25:1c:ea:8a:ba:80:2e:76:49:90:59:47:36:05:94:55:b5:
         84:c1:57:3f:8e:d5:f8:2e:1c:1b:e4:40:b5:44:3e:f9:5e:76:
         b7:57:30:c5:47:bc:fe:85:cf:85:67:e5:99:26:b7:a8:68:23:
         58:0c:16:dc:ee:bb:64:bc:12:f2:0b:46:ab:4c:67:d3:7d:92:
         9c:3e:ad:bf:de:1c:55:53:26:ee:89:fa:0d:41:de:c2:3d:45:
         a2:8b:0a:44:ab:74:a0:1a:cc:c6:12:bc:39:7d:e3:fb:03:02:
         8c:7c:81:47:42:23:15:e3:2c:8c:26:85:23:d8:8a:54:4a:43:
         1a:20:4b:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD
MDQ1RjBDMjcwHhcNMjUwNTAyMTg0MDUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE1MTFiMi05ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5x7d182yQ6WLnQBzM0vfsz2duO7f+aXIdQwat5azigTDYA4diH+VILJaC7u
4ZI3Qtnx7D9cGikD6JLqtbEspaW1t6D1/DI6vfd3iRzTK1JGHc/xKIDyEID6xszO
LCX/8qysJ7uDT24SPVzZEn106Mt2usLaDMGarQWyfrSbIdXsKkFGPgxLa6gpcS9f
Z4TWi97A0jeJnbq5ScJGeM00rU5nMDrO//On5+CD0MoUftAN09ewWUpzdyRidb9H
j4j/4fst3fCzmQUkeNsqYFxlNIfahGK5e9X9z8m1z0B7HwrK1MWLAKIlsfLcHS7K
mL22mNNr/akJYMH2WzPhoW8TdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIKSo7vG
SQt7S+hPCWcmaaEkcjd0MB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw
NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjJERkIvOUZDQUFERkVBMDUwMTFFQzk3QkY4RDcyQzRGOUFFMDIvRjg1RDk3RDgy
Nzg0MTFGMEI0NkU0QTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABntxAwDQYJKoZIhvcNAQELBQADggEBAG3ii6Q5mSDEod2d
Jf5PTtoNTG9UupZhjgx3i5jU9+ZEsEjapZc3k6Gm0K5egdRdNs5LGd7KiFAzxmrJ
TOIOE3LPDempcbFTPdtnBWCJm0fLyl3SL8KV9mFgfRhk51jAhmlLMbxZIfXHO0Ig
sHX7QxQqunUET7Tu8HTO0uw41jklHOqKuoAudkmQWUc2BZRVtYTBVz+O1fguHBvk
QLVEPvledrdXMMVHvP6Fz4Vn5Zkmt6hoI1gMFtzuu2S8EvILRqtMZ9N9kpw+rb/e
HFVTJu6J+g1B3sI9RaKLCkSrdKAazMYSvDl94/sDAox8gUdCIxXjLIwmhSPYilRK
QxogS2k=
-----END CERTIFICATE-----
Generated at Thu May 15 11:19:18 2025 by rpki-client