Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/A156AB48195E11F0A64EF837C4F9AE02.roa
File:                     A156AB48195E11F0A64EF837C4F9AE02.roa (raw, json)
Hash identifier:          4ckscgD2BUTAR0THvAEvfsoW09ZipVLLJmm4EZ3VF2E=
Subject key identifier:   8C:08:73:1D:D7:02:AD:7C:FC:3E:4C:EB:82:2F:31:4B:CE:BB:0D:FD
Certificate issuer:       /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial:       0722
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/A156AB48195E11F0A64EF837C4F9AE02.roa
Signing time:             Mon 14 Apr 2025 18:31:07 +0000
ROA not before:           Mon 14 Apr 2025 18:31:07 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136014
IP address blocks:        103.159.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
        Validity
            Not Before: Apr 14 18:31:07 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67fd546b-4aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:11:da:85:ef:55:06:02:01:1f:5b:2e:0d:
                    a4:3b:5b:84:a7:3d:2c:38:a4:39:a3:25:c9:a5:f2:
                    00:21:9c:6f:0b:98:7c:70:64:a8:cf:b7:75:6b:ab:
                    55:91:f5:fd:d9:2a:3c:ea:65:b3:6f:93:d6:eb:27:
                    d1:db:70:ac:97:2d:d0:6d:3c:b3:3b:d2:5f:57:80:
                    07:50:96:43:8f:2d:97:63:1d:e5:a1:22:6c:28:0e:
                    e8:85:df:cc:b7:8b:c7:d4:ec:e6:a4:8f:18:73:30:
                    c6:91:de:f0:6b:e3:37:41:43:39:f4:44:5a:ed:8c:
                    4f:0a:77:08:fe:02:c8:e1:b2:ce:58:9d:e3:36:27:
                    22:b5:9c:77:c2:f3:ca:f3:de:37:bc:44:0a:74:be:
                    7f:a1:b6:95:05:f3:66:a8:2a:cc:12:8d:1a:0b:d5:
                    46:5f:ed:b6:81:7f:d0:63:d8:b9:d2:35:0e:ea:3b:
                    3e:4e:fd:b7:91:a2:8b:53:61:39:dd:a1:c5:83:47:
                    05:e4:98:2c:ed:b3:d8:f6:b5:7d:78:7b:37:26:f0:
                    a6:64:bc:f0:ae:3a:81:c5:05:d9:9e:8e:b6:49:1f:
                    fb:46:c0:82:ac:ea:db:f4:4d:40:64:66:38:15:6d:
                    5f:ba:ba:af:01:3b:11:9d:8d:a4:39:a7:f6:91:cc:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:08:73:1D:D7:02:AD:7C:FC:3E:4C:EB:82:2F:31:4B:CE:BB:0D:FD
            X509v3 Authority Key Identifier:
                keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/A156AB48195E11F0A64EF837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:66:ad:1a:62:48:e8:3f:9b:20:d8:19:8a:13:81:9a:4d:
         35:fb:41:ba:0f:89:d9:35:fc:4c:cd:ba:2f:dd:98:79:56:f6:
         ae:a7:5d:6a:6b:d8:90:9a:41:ec:36:a0:09:bc:65:49:71:80:
         8a:a4:ef:9b:59:58:de:da:1a:be:f9:78:b0:33:c7:5e:ce:b1:
         f5:3d:ec:9e:b4:f5:eb:bf:99:df:4b:ac:69:ad:35:5a:6f:ea:
         1a:03:33:a0:c9:f1:74:c2:fd:b6:c7:3f:2e:4f:01:d2:13:58:
         54:90:c1:f3:32:9b:63:b1:af:97:09:e8:a8:79:38:5e:b8:61:
         d1:2d:02:a5:5e:27:c2:c9:90:84:b3:62:f1:8f:7b:34:7d:50:
         4e:91:b5:e5:40:47:80:2d:6d:47:f0:67:a0:c2:bb:95:2b:2e:
         47:4e:34:a1:96:1e:14:64:75:30:c0:56:d1:a3:39:c3:09:f3:
         31:7c:75:a1:6b:17:37:80:bc:a1:09:38:3f:30:57:83:8c:67:
         21:82:3a:dd:67:85:f7:00:e8:65:93:dc:3e:4e:19:f2:95:de:
         e8:6f:fb:42:06:52:2d:83:df:0d:fc:64:d7:8d:2d:16:63:28:
         1f:c1:80:03:aa:9a:65:ef:ed:1f:83:e3:ca:fd:bd:9f:c4:21:
         f1:c4:41:2b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC
RTM0OTBFNzAwHhcNMjUwNDE0MTgzMTA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZkNTQ2Yi00YWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslgR2oXvVQYCAR9bLg2kO1uEpz0sOKQ5oyXJpfIAIZxvC5h8cGSoz7d1a6tV
kfX92So86mWzb5PW6yfR23Csly3QbTyzO9JfV4AHUJZDjy2XYx3loSJsKA7ohd/M
t4vH1OzmpI8YczDGkd7wa+M3QUM59ERa7YxPCncI/gLI4bLOWJ3jNicitZx3wvPK
8943vEQKdL5/obaVBfNmqCrMEo0aC9VGX+22gX/QY9i50jUO6js+Tv23kaKLU2E5
3aHFg0cF5Jgs7bPY9rV9eHs3JvCmZLzwrjqBxQXZno62SR/7RsCCrOrb9E1AZGY4
FW1furqvATsRnY2kOaf2kcwu4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIwIcx3X
Aq18/D5M64IvMUvOuw39MB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC
QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ4NUUvNzNFRjkwOUMzQkI1MTFFQkI0RDEzNzdEQzRGOUFFMDIvQTE1NkFCNDgx
OTVFMTFGMEE2NEVGODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnn6swDQYJKoZIhvcNAQELBQADggEBAH35Zq0aYkjoP5sg
2BmKE4GaTTX7QboPidk1/EzNui/dmHlW9q6nXWpr2JCaQew2oAm8ZUlxgIqk75tZ
WN7aGr75eLAzx17OsfU97J609eu/md9LrGmtNVpv6hoDM6DJ8XTC/bbHPy5PAdIT
WFSQwfMym2Oxr5cJ6Kh5OF64YdEtAqVeJ8LJkISzYvGPezR9UE6RteVAR4AtbUfw
Z6DCu5UrLkdONKGWHhRkdTDAVtGjOcMJ8zF8daFrFzeAvKEJOD8wV4OMZyGCOt1n
hfcA6GWT3D5OGfKV3uhv+0IGUi2D3w38ZNeNLRZjKB/BgAOqmmXv7R+D48r9vZ/E
IfHEQSs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:10:12 2025 by rpki-client