Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/986F1F9AD64711ECA2924B5FC4F9AE02.roa
File:                     986F1F9AD64711ECA2924B5FC4F9AE02.roa (raw, json)
Hash identifier:          CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=
Subject key identifier:   50:BE:27:21:34:72:72:73:D4:A8:ED:9D:C1:16:E8:15:93:04:F3:2E
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       0A5A
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/986F1F9AD64711ECA2924B5FC4F9AE02.roa
Signing time:             Wed 04 Jun 2025 20:04:49 +0000
ROA not before:           Wed 04 Jun 2025 20:04:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58713
IP address blocks:        103.114.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 19:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2650 (0xa5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Jun  4 20:04:49 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6840a6e1-215c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:b7:d3:4e:22:7a:d4:a2:2e:ad:88:26:66:
                    b4:a8:21:9f:99:41:b3:31:5e:73:f5:d1:5f:50:ba:
                    61:24:cc:8a:27:02:25:4a:63:8f:72:a4:65:81:2d:
                    5c:77:c7:03:5b:47:04:31:01:78:51:18:7c:11:a0:
                    e6:bc:8b:c5:9d:4b:dc:4e:81:00:a7:29:1f:cb:47:
                    59:a6:6e:da:2d:1b:17:9d:d6:f2:31:2b:50:82:6d:
                    af:9a:6c:f2:66:1a:f5:38:0b:d2:b1:ce:6d:6e:bb:
                    02:72:b2:0b:cb:01:fb:16:49:10:f8:39:18:9c:32:
                    4e:ac:17:d0:d1:45:56:f6:ac:cc:00:4e:37:a7:37:
                    b0:87:db:ba:02:56:c6:a7:bd:2f:83:16:57:14:ff:
                    de:cb:fe:f9:7f:a2:39:70:e3:2c:b3:24:4e:ae:fb:
                    dd:6c:63:62:5d:b7:b7:02:0f:c7:0d:63:e9:ad:e5:
                    f2:3c:0e:25:dd:2a:fe:2e:c1:a2:7f:d6:aa:f9:db:
                    74:78:5c:80:00:1c:1a:a9:2c:d7:c2:9c:c8:17:01:
                    88:d9:09:32:dc:ac:fe:44:d0:c2:23:da:1f:a7:c7:
                    c9:72:43:93:f5:d8:a7:fb:50:c4:e2:ed:09:81:c2:
                    06:fc:30:78:96:58:99:6a:57:b4:d5:40:07:a8:6c:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:27:21:34:72:72:73:D4:A8:ED:9D:C1:16:E8:15:93:04:F3:2E
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/986F1F9AD64711ECA2924B5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:52:c8:b5:b5:11:97:25:d8:e6:ae:13:63:d9:28:1d:bb:
         33:ad:63:ef:9d:7e:94:91:75:e3:07:72:1c:6a:f9:12:36:11:
         93:19:90:1a:7b:d4:55:c5:d7:38:d4:12:92:f3:26:5c:12:69:
         80:8d:d4:e3:23:6f:a2:8b:43:e2:7c:3b:1d:22:5f:5a:0b:04:
         f7:ab:d6:22:39:bb:0a:a2:7f:f7:8b:96:2b:af:da:bd:e5:f8:
         dc:1e:d6:98:48:46:a9:e5:9f:a2:2b:1c:55:73:ad:f0:ec:58:
         ed:ef:2e:f6:8c:2a:e8:43:15:89:5b:19:65:a8:b4:1d:b1:25:
         3e:83:d4:a5:8d:e4:26:82:c6:6d:89:74:ca:13:74:d4:31:a7:
         ca:e8:87:76:cc:cc:25:0a:06:90:a5:9e:18:fb:94:2f:64:b6:
         ad:7e:49:34:02:7c:80:8b:22:fb:1a:ef:63:f0:9c:30:e4:80:
         6b:6e:b0:7b:3f:72:cd:52:27:30:8a:4a:2a:50:a7:9f:eb:17:
         91:0d:b0:03:7b:fc:18:e2:14:dd:60:9c:db:a6:17:58:94:47:
         bc:e6:ff:59:5b:84:4a:ce:3b:a9:62:74:d8:01:0d:29:e3:23:
         b7:54:40:ab:d8:c9:55:11:cc:e7:17:a9:9d:e8:90:c4:ca:85:
         b1:e7:e0:82
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE
REM5RUI2MUEwHhcNMjUwNjA0MjAwNDQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQwYTZlMS0yMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1He3004ietSiLq2IJma0qCGfmUGzMV5z9dFfULphJMyKJwIlSmOPcqRlgS1c
d8cDW0cEMQF4URh8EaDmvIvFnUvcToEApykfy0dZpm7aLRsXndbyMStQgm2vmmzy
Zhr1OAvSsc5tbrsCcrILywH7FkkQ+DkYnDJOrBfQ0UVW9qzMAE43pzewh9u6AlbG
p70vgxZXFP/ey/75f6I5cOMssyROrvvdbGNiXbe3Ag/HDWPpreXyPA4l3Sr+LsGi
f9aq+dt0eFyAABwaqSzXwpzIFwGI2Qky3Kz+RNDCI9ofp8fJckOT9din+1DE4u0J
gcIG/DB4lliZale01UAHqGxUIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFC+JyE0
cnJz1KjtncEW6BWTBPMuMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3
NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJBRTMvMkFFQjA3M0U2NzQyMTFFQUIwMUVBQzY5QzRGOUFFMDIvOTg2RjFGOUFE
NjQ3MTFFQ0EyOTI0QjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncpEwDQYJKoZIhvcNAQELBQADggEBABLWUsi1tRGXJdjm
rhNj2SgduzOtY++dfpSRdeMHchxq+RI2EZMZkBp71FXF1zjUEpLzJlwSaYCN1OMj
b6KLQ+J8Ox0iX1oLBPer1iI5uwqif/eLliuv2r3l+Nwe1phIRqnln6IrHFVzrfDs
WO3vLvaMKuhDFYlbGWWotB2xJT6D1KWN5CaCxm2JdMoTdNQxp8roh3bMzCUKBpCl
nhj7lC9ktq1+STQCfICLIvsa72PwnDDkgGtusHs/cs1SJzCKSipQp5/rF5ENsAN7
/BjiFN1gnNumF1iUR7zm/1lbhErOO6lidNgBDSnjI7dUQKvYyVURzOcXqZ3okMTK
hbHn4II=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:13 2025 by rpki-client