Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/D07411B6661211ECBCD61A65C4F9AE02.roa
File:                     D07411B6661211ECBCD61A65C4F9AE02.roa (raw, json)
Hash identifier:          /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=
Subject key identifier:   F1:4A:EA:99:32:F0:FA:59:9C:21:B8:8D:DC:53:9C:92:66:8A:ED:A1
Certificate issuer:       /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial:       2135
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/D07411B6661211ECBCD61A65C4F9AE02.roa
Signing time:             Thu 20 Feb 2025 16:23:23 +0000
ROA not before:           Thu 20 Feb 2025 16:23:23 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     64092
IP address blocks:        103.210.60.0/22 maxlen: 24
                          2404:6280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
                          rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8501 (0x2135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
        Validity
            Not Before: Feb 20 16:23:23 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67b756fb-28e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:80:49:72:e8:57:56:eb:08:2e:06:3d:4e:
                    86:6d:16:af:b8:68:c6:ea:ea:c2:5e:3f:4a:fb:bd:
                    11:98:d1:5f:eb:26:c5:04:40:ad:40:ae:24:80:ab:
                    cd:54:ec:82:73:f1:f8:27:c5:e7:14:6b:37:59:da:
                    d1:df:2d:b4:8b:88:fe:2e:d7:13:77:f9:4b:07:fc:
                    df:91:fe:b9:8c:e6:1b:3f:a4:ed:f1:b6:9b:9c:61:
                    7d:c4:e0:68:e9:3a:00:89:f0:d6:36:65:3e:21:42:
                    f5:eb:42:9e:ed:fc:50:93:00:b9:2f:45:7c:73:8d:
                    d9:a7:60:a5:92:eb:64:93:dd:d8:b3:b1:66:c1:9f:
                    c4:e1:02:0c:90:cf:28:7e:db:9f:b1:b1:0f:c4:78:
                    67:6c:f3:a4:ac:70:e3:87:65:31:3b:9c:83:c3:31:
                    cb:11:7c:a7:9c:8f:1a:36:62:1e:ce:7a:11:6d:72:
                    2d:7e:af:23:dc:f8:3c:d5:d1:08:31:0c:69:e6:e4:
                    4e:ee:fc:75:ab:f0:51:58:69:74:9d:09:95:6c:36:
                    3f:d9:5a:24:db:01:fa:cb:0f:a9:1d:b6:11:50:52:
                    d4:eb:11:0b:fa:28:d1:ac:6a:46:28:ec:0e:2c:9e:
                    d4:c0:1b:30:a9:d5:c7:df:02:42:9b:0e:cb:cb:e3:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:EA:99:32:F0:FA:59:9C:21:B8:8D:DC:53:9C:92:66:8A:ED:A1
            X509v3 Authority Key Identifier:
                keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/D07411B6661211ECBCD61A65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.60.0/22
                IPv6:
                  2404:6280::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:57:14:f7:18:94:9f:b4:e3:2e:a5:b2:da:f5:c5:55:9f:
         dd:ca:dc:d0:fa:1c:1c:06:6c:b3:bf:a0:dd:d9:12:9b:98:cc:
         29:e5:00:d6:c4:bb:a2:a1:5a:71:40:f8:15:99:b0:5a:e9:d9:
         d9:8f:f3:72:79:e9:2e:36:53:ee:05:9f:68:a4:f0:b8:3d:0b:
         3f:c2:23:f7:e4:a0:b8:05:7e:04:19:f9:ee:6c:5c:6a:63:c6:
         bb:4d:63:b7:01:78:7e:fc:ae:e5:0c:aa:14:cb:21:4a:a6:d6:
         e2:f0:1c:d3:9c:5d:a6:d3:b3:fc:ff:cc:ee:c5:66:1e:bc:59:
         ad:18:62:02:12:ea:25:2d:0d:31:e2:36:11:02:43:5a:90:39:
         02:e3:ab:98:49:36:17:e7:53:ab:26:77:15:0c:c4:f6:3d:42:
         c5:fe:6f:6e:53:b4:db:1e:83:7d:3b:a6:19:16:e6:d2:2d:be:
         32:23:79:63:ad:5b:23:f4:0d:97:e8:ad:a0:2b:55:3e:d7:4e:
         ed:78:fe:36:6d:01:43:bd:c7:d2:9b:e6:3a:e2:d7:0e:8f:a3:
         8a:b8:c2:60:c3:33:06:24:5e:d2:ed:c2:06:a8:9f:9a:3b:47:
         36:3c:9f:43:80:4f:35:59:00:a1:6c:dd:14:5b:2b:33:5b:63:
         00:7b:bf:6b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICITUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE
MUJBRjAyREYwHhcNMjUwMjIwMTYyMzIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2I3NTZmYi0yOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQeASXLoV1brCC4GPU6GbRavuGjG6urCXj9K+70RmNFf6ybFBECtQK4kgKvN
VOyCc/H4J8XnFGs3WdrR3y20i4j+LtcTd/lLB/zfkf65jOYbP6Tt8babnGF9xOBo
6ToAifDWNmU+IUL160Ke7fxQkwC5L0V8c43Zp2Clkutkk93Ys7FmwZ/E4QIMkM8o
ftufsbEPxHhnbPOkrHDjh2UxO5yDwzHLEXynnI8aNmIeznoRbXItfq8j3Pg81dEI
MQxp5uRO7vx1q/BRWGl0nQmVbDY/2Vok2wH6yw+pHbYRUFLU6xEL+ijRrGpGKOwO
LJ7UwBswqdXH3wJCmw7Ly+O7qQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPFK6pky
8PpZnCG4jdxTnJJmiu2hMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx
MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY4RkQvOUE3OTk2NDRFMTExMTFFNUFCMDE3NzI3QzRGOUFFMDIvRDA3NDExQjY2
NjEyMTFFQ0JDRDYxQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJn0jwwDQQCAAIwBwMFACQEYoAwDQYJKoZIhvcNAQELBQAD
ggEBAB7CVxT3GJSftOMupbLa9cVVn93K3ND6HBwGbLO/oN3ZEpuYzCnlANbEu6Kh
WnFA+BWZsFrp2dmP83J56S42U+4Fn2ik8Lg9Cz/CI/fkoLgFfgQZ+e5sXGpjxrtN
Y7cBeH78ruUMqhTLIUqm1uLwHNOcXabTs/z/zO7FZh68Wa0YYgIS6iUtDTHiNhEC
Q1qQOQLjq5hJNhfnU6smdxUMxPY9QsX+b25TtNseg307phkW5tItvjIjeWOtWyP0
DZforaArVT7XTu14/jZtAUO9x9Kb5jri1w6Po4q4wmDDMwYkXtLtwgaon5o7RzY8
n0OATzVZAKFs3RRbKzNbYwB7v2s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:26:34 2025 by rpki-client