Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
File:                     421FF25E18AD11EF99EAA661C4F9AE02.roa (raw, json)
Hash identifier:          9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=
Subject key identifier:   F1:55:09:D9:37:0D:04:23:5E:09:4A:EB:39:A7:3F:09:AB:C3:8E:0F
Certificate issuer:       /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial:       C9
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 05:25:45 +0000
ROA not before:           Tue 03 Jun 2025 05:25:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     131314
IP address blocks:        103.28.144.0/22 maxlen: 24
                          2401:a2a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
                          rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
        Validity
            Not Before: Jun  3 05:25:45 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e8759-06f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:87:a1:ba:cd:7c:11:02:02:aa:9c:b0:66:
                    03:2d:6b:7c:24:08:9c:2d:5f:b5:0a:ca:b7:bb:17:
                    6a:66:9c:e5:4a:0b:3b:60:9f:ce:ca:26:5e:34:f5:
                    b8:15:31:90:30:18:42:c1:c5:80:3e:97:8b:fc:34:
                    27:ad:ab:55:34:94:f1:2a:5e:96:bf:cb:d4:0c:8d:
                    75:67:39:22:72:2a:36:aa:b6:95:a3:53:2b:65:eb:
                    30:78:06:d4:9a:5a:02:49:de:4f:7b:49:7c:27:e4:
                    88:98:e1:c0:25:86:a7:23:24:a4:0c:4f:8a:15:9e:
                    21:9b:d0:69:bd:79:ed:b8:ba:58:d9:80:a7:aa:33:
                    13:6e:e1:0e:00:4b:61:66:20:43:12:f0:36:46:0b:
                    78:bc:82:ee:43:fa:54:4e:b2:ba:7d:2b:70:8b:23:
                    49:59:4c:b2:c4:5e:c0:62:6d:b8:b8:e4:04:ae:42:
                    0f:94:03:b7:d3:ed:33:bd:97:fa:aa:1a:5d:31:d2:
                    2e:42:68:ff:4a:c8:2c:a6:c1:70:ec:56:6e:e2:0c:
                    89:42:41:23:05:60:6b:88:e4:a2:0f:1a:c7:39:4e:
                    21:29:be:2c:c1:ea:7e:57:11:3e:85:77:13:e8:77:
                    1c:d1:b4:43:34:d8:ce:fa:b0:eb:5e:1e:28:c8:b7:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:09:D9:37:0D:04:23:5E:09:4A:EB:39:A7:3F:09:AB:C3:8E:0F
            X509v3 Authority Key Identifier:
                keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.144.0/22
                IPv6:
                  2401:a2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:24:8e:cf:38:28:f8:50:23:bb:52:85:4a:20:34:4e:82:
         a1:9c:91:55:f1:13:ec:bf:18:5c:71:81:a5:09:31:00:57:19:
         70:25:e0:1c:aa:bc:7c:bf:51:6f:21:d2:6a:33:e4:04:ef:83:
         98:7e:88:cb:ea:12:d4:74:90:9e:fd:c1:61:94:ca:ae:45:b3:
         84:f5:7e:0c:06:59:e6:23:f5:33:69:e1:0b:53:87:0f:50:e3:
         ab:3f:7c:02:75:f4:42:38:7f:85:1b:59:fe:71:d7:0a:7b:fc:
         9a:85:21:18:47:14:04:23:6b:b5:a0:0b:3e:3f:0c:08:0a:1f:
         6f:71:21:74:ef:c7:e1:c5:53:39:ab:c2:c0:7e:af:02:e8:15:
         2d:e7:d8:03:97:b6:b6:56:47:ab:40:fe:eb:5e:1d:9f:10:08:
         d5:7d:35:8e:7b:c8:e4:8d:12:78:0a:cc:e1:a0:10:80:69:fb:
         d4:97:7a:e1:d0:83:84:7e:56:45:55:d1:8e:5e:c5:12:00:fc:
         13:f8:62:11:bf:b9:24:be:2b:6c:f9:8d:34:3b:82:28:78:e1:
         1b:4c:b2:e1:37:c1:90:25:59:f6:e9:68:a6:17:25:7b:dc:8e:
         c6:94:58:2d:cf:cd:89:77:5a:2f:5d:b9:83:0a:5f:d6:fc:f1:
         a0:e6:9e:97
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD
RjkwQTg1NUUwHhcNMjUwNjAzMDUyNTQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlODc1OS0wNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyoqHobrNfBECAqqcsGYDLWt8JAicLV+1Csq3uxdqZpzlSgs7YJ/OyiZeNPW4
FTGQMBhCwcWAPpeL/DQnratVNJTxKl6Wv8vUDI11Zzkicio2qraVo1MrZesweAbU
mloCSd5Pe0l8J+SImOHAJYanIySkDE+KFZ4hm9BpvXntuLpY2YCnqjMTbuEOAEth
ZiBDEvA2Rgt4vILuQ/pUTrK6fStwiyNJWUyyxF7AYm24uOQErkIPlAO30+0zvZf6
qhpdMdIuQmj/SsgspsFw7FZu4gyJQkEjBWBriOSiDxrHOU4hKb4swep+VxE+hXcT
6Hcc0bRDNNjO+rDrXh4oyLfX/QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPFVCdk3
DQQjXglK6zmnPwmrw44PMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4
QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQwOEEvMTg4NDVGNkMxOEFDMTFFRkI2RjQ4MTM3QzRGOUFFMDIvNDIxRkYyNUUx
OEFEMTFFRjk5RUFBNjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnHJAwDQQCAAIwBwMFACQBoqAwDQYJKoZIhvcNAQELBQAD
ggEBAA31JI7POCj4UCO7UoVKIDROgqGckVXxE+y/GFxxgaUJMQBXGXAl4ByqvHy/
UW8h0moz5ATvg5h+iMvqEtR0kJ79wWGUyq5Fs4T1fgwGWeYj9TNp4QtThw9Q46s/
fAJ19EI4f4UbWf5x1wp7/JqFIRhHFAQja7WgCz4/DAgKH29xIXTvx+HFUzmrwsB+
rwLoFS3n2AOXtrZWR6tA/uteHZ8QCNV9NY57yOSNEngKzOGgEIBp+9SXeuHQg4R+
VkVV0Y5exRIA/BP4YhG/uSS+K2z5jTQ7gih44RtMsuE3wZAlWfbpaKYXJXvcjsaU
WC3PzYl3Wi9duYMKX9b88aDmnpc=
-----END CERTIFICATE-----
Generated at Sat Jun 21 03:02:04 2025 by rpki-client