Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/E54A88DE595F11EFB2BAB431C4F9AE02.roa
File:                     E54A88DE595F11EFB2BAB431C4F9AE02.roa (raw, json)
Hash identifier:          Ec1bkGQTqxF1oTL6UjSssM5GunX3miqPVFaIr/V5Yp8=
Subject key identifier:   F0:C0:9A:91:B9:F5:75:D0:2A:DB:73:48:E9:B2:72:35:0C:62:CE:EB
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0E6E
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/E54A88DE595F11EFB2BAB431C4F9AE02.roa
Signing time:             Thu 24 Apr 2025 17:46:47 +0000
ROA not before:           Thu 24 Apr 2025 17:46:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152475
IP address blocks:        103.136.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3694 (0xe6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Apr 24 17:46:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680a7906-871d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:0f:24:ef:af:5d:a1:a5:91:ea:f9:96:85:
                    de:a0:5e:15:7b:65:20:1f:93:b2:8d:c4:84:8c:b8:
                    c9:73:cb:82:54:44:92:e5:6d:17:ea:db:a7:26:09:
                    9d:c6:31:88:97:0e:38:f2:a1:91:22:8f:6d:de:72:
                    8e:13:79:07:1e:1a:01:36:7e:42:55:c0:c0:ca:fa:
                    7f:e2:a4:cc:e3:a2:d2:7c:60:9c:df:60:42:e2:c8:
                    2c:91:ae:36:19:79:ea:f1:b4:fc:3e:08:ad:a7:3f:
                    87:94:3c:e4:85:26:30:3c:74:87:3a:3c:42:1a:8b:
                    e1:b2:cb:60:e2:7a:87:13:ed:cd:28:eb:81:69:5c:
                    d2:f7:1e:bf:5b:ef:9f:0d:8e:5a:70:2d:b9:75:25:
                    51:b4:32:9e:9c:a1:b3:3a:08:eb:ef:94:63:f1:35:
                    7d:90:0a:cd:c8:ad:c9:84:de:2f:73:6c:c0:d3:63:
                    87:b9:ea:da:b3:24:f3:82:8a:8e:d6:e7:9b:19:5c:
                    b0:c9:6c:62:b7:5a:5b:62:29:46:e8:f5:f7:cc:88:
                    c8:7e:ef:08:89:71:5b:34:67:bf:d2:f6:60:0c:96:
                    f4:81:79:d3:9a:90:f6:ee:b4:2f:70:b1:ca:bc:1c:
                    44:6f:ed:90:4d:b2:2b:ea:0f:ae:d2:10:3f:5a:68:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C0:9A:91:B9:F5:75:D0:2A:DB:73:48:E9:B2:72:35:0C:62:CE:EB
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/E54A88DE595F11EFB2BAB431C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:79:bb:e9:47:f3:a4:19:4e:7f:ea:32:af:5a:41:32:0e:fa:
         83:17:ac:95:44:3f:f1:50:ea:47:56:8f:1b:af:32:d7:b7:1c:
         11:cd:ee:eb:65:b8:af:f4:9c:5f:a2:fc:cc:0c:81:ea:79:1d:
         80:4c:50:66:9e:e5:8c:ef:7b:99:bb:e4:68:f4:55:88:0e:47:
         cc:eb:ae:78:11:5c:c0:b3:d7:0d:fb:99:4d:a7:fe:09:9a:72:
         8f:8d:98:12:b3:42:78:f1:d7:d5:dd:a9:30:81:e1:df:2c:85:
         ab:b8:52:be:46:ea:da:1f:59:6e:ef:1f:29:6b:62:7d:b6:0c:
         08:46:06:cb:6a:63:60:6d:96:c0:86:db:0e:47:98:85:bc:4b:
         8e:80:bc:72:33:e0:69:93:9a:a1:85:42:b0:1c:87:21:49:b2:
         57:53:bf:bd:d2:d2:28:ab:35:1d:eb:5a:8a:46:d1:1c:39:ac:
         3c:4c:bf:3f:29:18:93:16:c8:7b:43:d2:61:f7:a6:59:32:4b:
         32:1f:1d:32:8b:32:57:f6:cf:63:b8:01:d3:30:1c:49:1c:a3:
         63:ef:f8:cd:13:fc:30:43:d5:1a:8f:19:af:cc:77:ea:92:03:
         43:46:a0:f0:60:7c:3e:36:89:35:20:8d:10:b2:fd:8b:ce:8d:
         76:d3:f1:6c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4
OTVGQzQ3REUwHhcNMjUwNDI0MTc0NjQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODBhNzkwNi04NzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSUPJO+vXaGlker5loXeoF4Ve2UgH5OyjcSEjLjJc8uCVESS5W0X6tunJgmd
xjGIlw448qGRIo9t3nKOE3kHHhoBNn5CVcDAyvp/4qTM46LSfGCc32BC4sgska42
GXnq8bT8Pgitpz+HlDzkhSYwPHSHOjxCGovhsstg4nqHE+3NKOuBaVzS9x6/W++f
DY5acC25dSVRtDKenKGzOgjr75Rj8TV9kArNyK3JhN4vc2zA02OHuerasyTzgoqO
1uebGVywyWxit1pbYilG6PX3zIjIfu8IiXFbNGe/0vZgDJb0gXnTmpD27rQvcLHK
vBxEb+2QTbIr6g+u0hA/WmjjAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPDAmpG5
9XXQKttzSOmycjUMYs7rMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD
MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvRTU0QTg4REU1
OTVGMTFFRkIyQkFCNDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniCMwDQYJKoZIhvcNAQELBQADggEBAHF5u+lH86QZTn/q
Mq9aQTIO+oMXrJVEP/FQ6kdWjxuvMte3HBHN7utluK/0nF+i/MwMgep5HYBMUGae
5Yzve5m75Gj0VYgOR8zrrngRXMCz1w37mU2n/gmaco+NmBKzQnjx19XdqTCB4d8s
hau4Ur5G6tofWW7vHylrYn22DAhGBstqY2BtlsCG2w5HmIW8S46AvHIz4GmTmqGF
QrAchyFJsldTv73S0iirNR3rWopG0Rw5rDxMvz8pGJMWyHtD0mH3plkySzIfHTKL
Mlf2z2O4AdMwHEkco2Pv+M0T/DBD1RqPGa/Md+qSA0NGoPBgfD42iTUgjRCy/YvO
jXbT8Ww=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:20 2025 by rpki-client