Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
File:                     EC61C060DDB411ED93355C4FC4F9AE02.roa (raw, json)
Hash identifier:          Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=
Subject key identifier:   41:27:98:9F:6B:50:12:74:4E:7B:38:41:12:4F:E3:E3:13:63:41:7A
Certificate issuer:       /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial:       0181
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
Signing time:             Mon 07 Apr 2025 03:08:53 +0000
ROA not before:           Mon 07 Apr 2025 03:08:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3462
IP address blocks:        103.112.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
                          rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
        Validity
            Not Before: Apr  7 03:08:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f341c5-e97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:70:2c:b1:4b:44:e0:f3:a8:9d:74:e4:58:
                    0f:9f:2c:d7:e5:ca:e7:f9:5d:2c:ef:99:df:9c:85:
                    d9:3d:b0:4f:04:bb:21:05:68:71:d8:70:6f:02:09:
                    29:e7:44:0e:9e:70:c7:aa:18:75:bd:c5:47:16:7b:
                    61:24:ee:af:5c:e8:a6:47:17:d3:d0:85:22:74:c8:
                    0d:a7:b6:27:fe:ea:11:9b:40:8e:3d:e2:cc:94:18:
                    30:a6:37:b5:20:9f:aa:44:7f:f1:ce:f0:10:ec:1d:
                    da:a2:6f:b3:54:f8:eb:8a:c9:32:53:2a:06:ab:04:
                    01:88:2f:f7:29:f0:e7:58:c9:74:84:2a:0a:ad:7e:
                    5d:6f:80:16:4f:57:b6:56:6d:4e:b4:bf:48:98:32:
                    b3:78:99:18:03:c2:20:f3:5b:3f:bb:8a:10:34:d8:
                    54:a7:ab:bd:3d:f6:53:5a:38:20:ca:8f:a3:7e:94:
                    0b:6f:50:ec:22:db:7e:4e:5e:5c:c9:7d:5c:74:7d:
                    3c:e2:25:5d:c5:a7:a3:9e:17:15:40:b0:8c:b8:89:
                    d9:d2:5b:02:8c:09:9d:72:ce:61:ee:bb:38:30:a0:
                    10:09:8d:2e:66:b8:83:80:ae:39:e6:c0:15:ed:af:
                    40:a4:69:0a:7e:0f:f3:8e:48:a6:b2:02:eb:60:6a:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:98:9F:6B:50:12:74:4E:7B:38:41:12:4F:E3:E3:13:63:41:7A
            X509v3 Authority Key Identifier:
                keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:8b:d8:6a:aa:8a:c4:47:28:7c:92:0b:56:4a:79:79:97:
         cb:e2:02:67:52:e4:9a:7f:fe:06:80:f2:ad:db:a5:4d:29:91:
         cd:4d:34:7e:6b:89:9e:72:16:8f:52:86:42:33:62:cb:2d:fc:
         d9:3e:f1:31:42:7b:e0:ee:43:c2:05:a6:f9:ae:b1:01:0a:bb:
         6b:b9:f9:ac:56:48:5d:94:75:03:67:4c:99:82:80:59:33:ad:
         e1:74:74:d8:8a:78:2d:4f:d6:f2:41:a9:80:a9:ee:96:99:15:
         82:8e:d6:28:99:92:6a:ba:d9:e0:b3:ee:c6:9a:10:fd:ca:74:
         a0:66:f7:05:90:e2:b5:21:2d:df:dc:4b:24:fb:a2:25:60:5a:
         76:d2:bd:d5:eb:61:45:7b:e7:62:6d:00:96:80:ae:80:22:c6:
         31:dd:10:aa:79:cc:27:39:e6:86:42:b1:6f:3e:bf:77:0f:f8:
         c0:bf:da:72:c3:05:85:cb:7b:07:e7:fc:43:d1:c6:f5:ab:d7:
         ce:e1:02:92:06:87:ed:3f:d7:de:91:61:7a:6f:2f:4a:46:05:
         1e:87:24:68:05:23:d0:8c:7e:01:8c:85:fc:1b:66:97:11:1e:
         6e:a6:2c:d6:e9:35:fa:f6:12:c6:0d:01:9f:93:02:38:74:2a:
         33:43:dd:db
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5
QzVCNDkwRTkwHhcNMjUwNDA3MDMwODUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2YzNDFjNS1lOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyw9wLLFLRODzqJ105FgPnyzX5crn+V0s75nfnIXZPbBPBLshBWhx2HBvAgkp
50QOnnDHqhh1vcVHFnthJO6vXOimRxfT0IUidMgNp7Yn/uoRm0COPeLMlBgwpje1
IJ+qRH/xzvAQ7B3aom+zVPjriskyUyoGqwQBiC/3KfDnWMl0hCoKrX5db4AWT1e2
Vm1OtL9ImDKzeJkYA8Ig81s/u4oQNNhUp6u9PfZTWjggyo+jfpQLb1DsItt+Tl5c
yX1cdH084iVdxaejnhcVQLCMuInZ0lsCjAmdcs5h7rs4MKAQCY0uZriDgK455sAV
7a9ApGkKfg/zjkimsgLrYGozWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEEnmJ9r
UBJ0Tns4QRJP4+MTY0F6MB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE
OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFCNUIvOEQ1N0UxN0NERDk1MTFFREFFOEM2QzdBQzRGOUFFMDIvRUM2MUMwNjBE
REI0MTFFRDkzMzU1QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJncDAwDQYJKoZIhvcNAQELBQADggEBAI/Ri9hqqorERyh8
kgtWSnl5l8viAmdS5Jp//gaA8q3bpU0pkc1NNH5riZ5yFo9ShkIzYsst/Nk+8TFC
e+DuQ8IFpvmusQEKu2u5+axWSF2UdQNnTJmCgFkzreF0dNiKeC1P1vJBqYCp7paZ
FYKO1iiZkmq62eCz7saaEP3KdKBm9wWQ4rUhLd/cSyT7oiVgWnbSvdXrYUV752Jt
AJaAroAixjHdEKp5zCc55oZCsW8+v3cP+MC/2nLDBYXLewfn/EPRxvWr187hApIG
h+0/196RYXpvL0pGBR6HJGgFI9CMfgGMhfwbZpcRHm6mLNbpNfr2EsYNAZ+TAjh0
KjND3ds=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:19 2025 by rpki-client