Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/1A922B26DCD711EC87E30728C4F9AE02.roa
File:                     1A922B26DCD711EC87E30728C4F9AE02.roa (raw, json)
Hash identifier:          XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=
Subject key identifier:   0F:19:CB:A1:56:B8:05:10:16:56:11:2A:34:1F:B8:63:84:A3:72:D3
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       02E1
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/1A922B26DCD711EC87E30728C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 01:06:33 +0000
ROA not before:           Tue 15 Apr 2025 01:06:33 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     142029
IP address blocks:        103.165.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Apr 15 01:06:33 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67fdb119-7eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:a9:c0:10:36:88:94:f9:9f:d5:72:b7:33:
                    09:45:4c:b0:6d:d8:66:12:71:e7:05:80:e1:91:9d:
                    a6:a4:59:6a:c3:8c:db:9c:5b:3d:a4:58:4d:df:53:
                    03:aa:6a:50:44:29:b2:2b:e6:bf:f1:c3:9f:5a:f3:
                    20:b3:62:a9:de:34:8c:6e:bd:e3:d9:ca:85:45:10:
                    19:6f:dd:82:21:de:c9:d6:ea:a3:7d:4c:3f:45:29:
                    b0:8f:2a:b7:d1:d2:f7:53:2f:cc:66:9c:ab:f9:97:
                    71:7f:00:75:17:ae:a7:c6:40:6d:08:5a:ca:11:3d:
                    45:22:bf:f5:37:20:b5:aa:ff:94:93:61:d1:36:56:
                    c7:6c:fa:18:34:09:50:0a:d8:6d:d9:d7:b0:3b:0b:
                    a3:05:22:2e:5f:b7:c5:3d:d2:b4:29:2b:81:69:86:
                    68:a1:97:0f:80:db:37:93:a3:18:a6:60:05:d7:3d:
                    61:26:c9:3c:e9:5e:38:6a:37:e4:59:4b:b7:ed:b7:
                    5c:cb:5a:f6:48:df:4c:c5:87:cb:4b:5d:d4:30:d2:
                    d6:6f:44:47:41:d4:d5:83:65:14:66:1d:4c:be:a6:
                    1b:3f:0e:0f:66:06:87:13:7c:27:66:9d:7f:6f:eb:
                    d8:85:a2:1a:39:8c:3d:9f:66:9f:2d:b2:4f:ff:03:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:19:CB:A1:56:B8:05:10:16:56:11:2A:34:1F:B8:63:84:A3:72:D3
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/1A922B26DCD711EC87E30728C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:07:b2:96:21:7b:b9:d1:ff:e8:73:06:91:bb:21:c9:45:
         cd:24:ec:82:8b:07:1e:64:bb:78:ff:ea:8a:8f:cc:20:f6:6b:
         c1:2e:c5:a1:24:f5:97:98:a9:de:90:a0:12:1c:a9:17:12:f4:
         39:9c:cc:65:59:a4:b7:ca:a2:6c:af:1d:8e:a2:00:79:87:3d:
         f6:3b:ae:a8:e6:f6:86:23:51:5c:bb:98:5c:c3:5c:ac:d6:9d:
         1c:73:2b:b9:87:ab:4d:40:48:99:72:38:17:4c:f4:22:48:4a:
         e4:b5:c4:41:b2:d7:36:c3:f3:d7:79:d1:2a:8e:55:69:f5:c6:
         a8:3d:d4:13:01:f1:98:ab:2e:af:22:b4:f4:d8:7e:f5:20:59:
         7c:bf:17:55:58:8d:42:fc:58:97:9c:f9:8b:2e:47:74:a7:b7:
         06:e5:53:c2:e4:89:ac:44:01:10:8b:1d:9a:3a:9d:19:42:82:
         6e:56:19:60:fd:a8:ff:c0:fb:45:ce:83:b5:89:21:50:1f:f7:
         d0:1f:57:c4:5a:67:4d:b9:91:d5:66:ad:a2:a8:5e:6b:94:98:
         24:e9:92:6c:a3:0e:76:c6:a9:25:39:9d:a2:93:ca:f0:97:01:
         94:ca:a4:58:27:e8:9e:ce:66:a5:b0:e1:d2:de:74:ab:64:7b:
         35:19:b3:8e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI4QTExMTAvBgNVBAUTKDUyMTQ2QkYxMEYzNTk1RjE3QTkyMzlGNTM2NjRERDZD
MDEzRTJGOUYwHhcNMjUwNDE1MDEwNjMzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZkYjExOS03ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydypwBA2iJT5n9VytzMJRUywbdhmEnHnBYDhkZ2mpFlqw4zbnFs9pFhN31MD
qmpQRCmyK+a/8cOfWvMgs2Kp3jSMbr3j2cqFRRAZb92CId7J1uqjfUw/RSmwjyq3
0dL3Uy/MZpyr+ZdxfwB1F66nxkBtCFrKET1FIr/1NyC1qv+Uk2HRNlbHbPoYNAlQ
Ctht2dewOwujBSIuX7fFPdK0KSuBaYZooZcPgNs3k6MYpmAF1z1hJsk86V44ajfk
WUu37bdcy1r2SN9MxYfLS13UMNLWb0RHQdTVg2UUZh1MvqYbPw4PZgaHE3wnZp1/
b+vYhaIaOYw9n2afLbJP/wM8PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA8Zy6FW
uAUQFlYRKjQfuGOEo3LTMB8GA1UdIwQYMBaAFFIUa/EPNZXxepI59TZk3WwBPi+f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjhBMS9BMTExOUNBMERD
RDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxmRjZram4xTm1UZGJBRS1M
NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VoUnI4UTgxbGZGNmtqbjFObVRkYkFFLUw1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkI4QTEvQTExMTlDQTBEQ0QxMTFFQ0JBNjZENjM3QzRGOUFFMDIvMUE5MjJCMjZE
Q0Q3MTFFQzg3RTMwNzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpTgwDQYJKoZIhvcNAQELBQADggEBAAzBB7KWIXu50f/o
cwaRuyHJRc0k7IKLBx5ku3j/6oqPzCD2a8EuxaEk9ZeYqd6QoBIcqRcS9DmczGVZ
pLfKomyvHY6iAHmHPfY7rqjm9oYjUVy7mFzDXKzWnRxzK7mHq01ASJlyOBdM9CJI
SuS1xEGy1zbD89d50SqOVWn1xqg91BMB8ZirLq8itPTYfvUgWXy/F1VYjUL8WJec
+YsuR3SntwblU8LkiaxEARCLHZo6nRlCgm5WGWD9qP/A+0XOg7WJIVAf99AfV8Ra
Z025kdVmraKoXmuUmCTpkmyjDnbGqSU5naKTyvCXAZTKpFgn6J7OZqWw4dLedKtk
ezUZs44=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:24 2025 by rpki-client