Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          q+uV3fVbgUY/YIwdT9ujbDYddJKvMQjHbSJQSVc9Kls=
Subject key identifier:   2E:B3:A6:F6:74:C0:30:0C:34:E1:D0:9D:4B:C5:0A:F3:DC:AE:24:D4
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0775
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Sun 06 Apr 2025 21:32:10 +0000
ROA not before:           Sun 06 Apr 2025 21:32:10 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Apr  6 21:32:10 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67f2f2d9-b28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:0d:69:be:0a:58:55:fc:92:71:67:8f:69:
                    34:d1:0c:83:9f:0c:1d:34:db:35:5a:c5:57:68:16:
                    03:54:15:f3:f2:64:7b:5a:c9:7d:f7:73:82:01:a5:
                    20:5e:df:85:49:5d:69:68:c3:04:d5:3e:6e:e8:d3:
                    63:5b:a0:55:13:e3:cb:c8:b4:75:40:af:c8:ab:ee:
                    82:d8:6c:22:54:05:dd:26:90:ac:36:3b:7b:a8:ec:
                    c1:5b:ae:14:13:5f:33:b5:c3:62:c6:1e:91:68:ca:
                    43:12:34:7a:6e:04:6f:ae:5d:34:ec:60:4e:50:a1:
                    fb:2f:d8:f6:06:55:10:c0:9f:19:87:44:bd:45:a0:
                    63:17:e9:79:a9:82:57:85:2d:18:eb:94:bc:53:50:
                    bf:ea:30:49:f2:22:bd:8f:e2:3e:86:65:40:76:ff:
                    cf:0c:1b:36:b4:92:9c:70:c8:4d:75:fd:6d:21:82:
                    4e:33:4f:fd:73:dc:16:db:4d:dc:b0:08:d0:ac:16:
                    6f:09:8b:ea:6f:4c:fc:3f:87:62:c1:08:1e:e1:18:
                    f2:f9:84:af:01:da:40:b7:05:ec:99:ee:13:d5:47:
                    e4:b1:37:94:f7:a7:8a:b7:45:41:b8:c8:42:e8:d1:
                    0d:31:b1:4a:10:56:57:ef:c2:be:8a:d3:ef:f0:65:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B3:A6:F6:74:C0:30:0C:34:E1:D0:9D:4B:C5:0A:F3:DC:AE:24:D4
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:79:a2:73:da:04:c9:f5:99:d8:0b:ac:d7:66:95:01:6b:
         4f:af:71:4a:ff:ba:82:42:c2:7c:39:34:ce:cf:d1:e2:aa:4b:
         86:f8:07:47:ee:ed:c8:70:79:e8:dd:eb:4c:c3:5b:55:30:1f:
         57:56:5b:8d:01:9e:65:1e:f3:9b:f7:6b:1c:65:19:e8:5d:76:
         30:55:be:e0:ea:1c:d0:10:59:3b:30:f4:51:3d:fe:3c:e2:03:
         d9:c9:5b:a9:bf:f0:c4:80:7f:9c:d8:d7:e7:fb:49:e7:3b:19:
         84:a2:38:dc:3d:c6:b4:56:75:4a:48:48:1e:c8:49:3e:3e:f8:
         3f:44:9c:04:81:5e:d0:d7:50:8a:36:72:c9:0d:7e:22:5f:3f:
         11:b7:6d:5a:5e:ff:1c:34:26:bc:b1:28:fc:6c:33:b2:47:b1:
         52:c8:c7:d7:bb:ca:f8:36:70:a7:7c:4a:00:dc:25:a7:34:ab:
         39:0e:b0:5c:2b:c5:54:78:bb:b3:9a:7f:46:2a:8d:d0:06:02:
         fc:99:1c:66:d0:52:a3:97:87:01:b8:d0:55:16:29:e5:66:f0:
         22:f4:af:ae:75:a3:5f:34:b8:46:0c:fa:d9:a8:b7:b1:1a:1a:
         94:39:af:50:6f:bd:dc:5b:8f:3a:18:4c:c7:de:fc:dc:92:bf:
         61:13:36:22
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjUwNDA2MjEzMjEwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2YyZjJkOS1iMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwusNab4KWFX8knFnj2k00QyDnwwdNNs1WsVXaBYDVBXz8mR7Wsl993OCAaUg
Xt+FSV1paMME1T5u6NNjW6BVE+PLyLR1QK/Iq+6C2GwiVAXdJpCsNjt7qOzBW64U
E18ztcNixh6RaMpDEjR6bgRvrl007GBOUKH7L9j2BlUQwJ8Zh0S9RaBjF+l5qYJX
hS0Y65S8U1C/6jBJ8iK9j+I+hmVAdv/PDBs2tJKccMhNdf1tIYJOM0/9c9wW203c
sAjQrBZvCYvqb0z8P4diwQge4Rjy+YSvAdpAtwXsme4T1UfksTeU96eKt0VBuMhC
6NENMbFKEFZX78K+itPv8GXb+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFC6zpvZ0
wDAMNOHQnUvFCvPcriTUMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvOTg2NTczNDIx
MzJFMTFGMEI1ODhEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnnPUwDQYJKoZIhvcNAQELBQADggEBAG6FeaJz2gTJ9ZnY
C6zXZpUBa0+vcUr/uoJCwnw5NM7P0eKqS4b4B0fu7chweejd60zDW1UwH1dWW40B
nmUe85v3axxlGehddjBVvuDqHNAQWTsw9FE9/jziA9nJW6m/8MSAf5zY1+f7Sec7
GYSiONw9xrRWdUpISB7IST4++D9EnASBXtDXUIo2cskNfiJfPxG3bVpe/xw0Jryx
KPxsM7JHsVLIx9e7yvg2cKd8SgDcJac0qzkOsFwrxVR4u7Oaf0YqjdAGAvyZHGbQ
UqOXhwG40FUWKeVm8CL0r651o180uEYM+tmot7EaGpQ5r1BvvdxbjzoYTMfe/NyS
v2ETNiI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:08 2025 by rpki-client