Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
File:                     05A179C2B02E11ECA990305CC4F9AE02.roa (raw, json)
Hash identifier:          yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=
Subject key identifier:   54:A4:11:E3:60:BF:B3:B5:5F:3B:AA:3B:CE:F0:0E:95:70:48:20:1E
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       0393
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
Signing time:             Thu 05 Dec 2024 00:33:43 +0000
ROA not before:           Thu 05 Dec 2024 00:33:43 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141181
IP address blocks:        103.155.184.0/23 maxlen: 23
                          103.155.184.0/24 maxlen: 24
                          103.155.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Dec  5 00:33:43 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6750f4e6-e997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:5f:dc:7e:5c:0f:1b:a3:52:31:18:2d:49:
                    02:f9:4a:d8:69:1e:15:83:0d:91:d1:36:2b:20:e8:
                    97:ed:f3:3b:dc:6d:84:22:9f:b6:eb:56:92:90:8b:
                    07:37:d0:47:5c:ae:69:f9:6f:33:6e:af:2a:ed:89:
                    bc:9c:0c:f1:95:b2:1f:c9:03:97:f4:f5:2b:ea:79:
                    e7:a1:4c:59:aa:60:58:d7:f9:29:dd:18:6b:5e:fe:
                    50:6c:ee:96:ff:43:d0:d6:06:b5:71:0d:1f:31:11:
                    04:97:6d:8b:b8:7c:35:5a:9a:6d:17:68:ad:65:bb:
                    58:a5:71:6f:54:a8:a1:35:fc:e0:82:c1:13:02:31:
                    cf:58:37:f3:ff:0b:33:b3:7e:ca:43:7c:72:d2:b1:
                    73:4b:09:be:41:d8:b8:10:02:f6:fa:f9:ab:32:98:
                    a5:f5:57:db:ec:d6:f5:5e:75:82:4c:99:65:c0:95:
                    9f:6c:4f:4a:a4:3c:15:d2:30:99:12:da:cf:40:8a:
                    29:94:80:d6:38:cc:50:b5:f5:f6:3d:b2:f1:ff:ec:
                    ec:5a:6c:b8:06:ad:e5:0e:d3:a0:82:78:18:b3:5e:
                    fc:0c:ac:60:6b:aa:3d:81:5a:4d:f2:b0:e9:07:ee:
                    ae:16:12:df:26:3c:52:36:83:9a:32:15:76:ab:41:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A4:11:E3:60:BF:B3:B5:5F:3B:AA:3B:CE:F0:0E:95:70:48:20:1E
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:a5:de:43:aa:22:e3:2b:e4:c3:37:55:c9:de:90:ac:46:6a:
         8c:96:23:2d:9b:a0:24:ab:71:57:d1:a7:ac:bd:b5:d5:12:63:
         05:4b:fe:20:8b:25:46:72:19:84:84:cc:5a:90:4f:b6:38:32:
         0b:1c:26:18:39:f8:63:76:c3:85:71:43:6a:f6:a5:76:bd:8c:
         2f:26:f6:d9:ca:2d:33:0c:1d:3a:07:27:20:5f:d1:fd:d4:dd:
         58:43:ec:06:d8:ff:70:b8:aa:f9:0b:e6:f5:71:13:cb:3a:9d:
         dd:99:a4:8c:ad:ff:7c:5a:b5:6a:e2:e8:5a:2d:94:4e:50:a7:
         5a:0f:a8:60:32:39:cb:f0:2a:03:6f:a7:ae:42:98:b7:f7:23:
         c0:e3:27:10:26:39:f2:be:75:94:7f:b3:4c:d0:8b:ce:d4:7a:
         2e:72:74:d7:b4:cd:b6:f2:30:59:c2:42:36:6e:33:f4:c0:6e:
         e1:6b:a3:95:33:23:5c:aa:c5:b7:9c:e1:1f:f0:e5:52:66:21:
         20:4a:40:f4:c8:7c:f2:89:e2:54:77:57:fe:9f:ca:55:f3:89:
         77:29:90:d6:0a:57:c2:e5:aa:65:2e:0c:3a:5a:93:ec:91:c5:
         23:1c:f5:09:aa:15:90:a2:91:56:48:f4:3b:fc:e5:c4:b1:49:
         60:65:7f:5e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE4OUQxMTAvBgNVBAUTKDEwQjQwQkRCRDE4Mzk0MTdEN0FEMTIzMzJCMEJFNkY5
RkM2RTgxMDUwHhcNMjQxMjA1MDAzMzQzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwZjRlNi1lOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2btf3H5cDxujUjEYLUkC+UrYaR4Vgw2R0TYrIOiX7fM73G2EIp+261aSkIsH
N9BHXK5p+W8zbq8q7Ym8nAzxlbIfyQOX9PUr6nnnoUxZqmBY1/kp3RhrXv5QbO6W
/0PQ1ga1cQ0fMREEl22LuHw1WpptF2itZbtYpXFvVKihNfzggsETAjHPWDfz/wsz
s37KQ3xy0rFzSwm+Qdi4EAL2+vmrMpil9Vfb7Nb1XnWCTJllwJWfbE9KpDwV0jCZ
EtrPQIoplIDWOMxQtfX2PbLx/+zsWmy4Bq3lDtOggngYs178DKxga6o9gVpN8rDp
B+6uFhLfJjxSNoOaMhV2q0EdpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFSkEeNg
v7O1XzuqO87wDpVwSCAeMB8GA1UdIwQYMBaAFBC0C9vRg5QX160SMysL5vn8boEF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTg5RC9GNDRGNTZFMjgx
QzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxCZlhyUkl6S3d2bS1meHVn
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VMUUwyOUdEbEJmWHJSSXpLd3ZtLWZ4dWdRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDE4OUQvRjQ0RjU2RTI4MUM3MTFFQzk5NTIzMjREQzRGOUFFMDIvMDVBMTc5QzJC
MDJFMTFFQ0E5OTAzMDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnm7gwDQYJKoZIhvcNAQELBQADggEBALel3kOqIuMr5MM3
VcnekKxGaoyWIy2boCSrcVfRp6y9tdUSYwVL/iCLJUZyGYSEzFqQT7Y4MgscJhg5
+GN2w4VxQ2r2pXa9jC8m9tnKLTMMHToHJyBf0f3U3VhD7AbY/3C4qvkL5vVxE8s6
nd2ZpIyt/3xatWri6FotlE5Qp1oPqGAyOcvwKgNvp65CmLf3I8DjJxAmOfK+dZR/
s0zQi87Uei5ydNe0zbbyMFnCQjZuM/TAbuFro5UzI1yqxbec4R/w5VJmISBKQPTI
fPKJ4lR3V/6fylXziXcpkNYKV8LlqmUuDDpak+yRxSMc9QmqFZCikVZI9Dv85cSx
SWBlf14=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:33:40 2025 by rpki-client