Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
File:                     5407E320236911EA9967DA1CC4F9AE02.roa (raw, json)
Hash identifier:          GtYvw7c3RkDDiFuFCL7+Z45DxtPwPDexplOkRnUJw+U=
Subject key identifier:   9A:CC:FB:DE:30:50:94:BB:0D:D2:B6:AA:B7:39:6A:5C:76:6B:9C:21
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0BBE
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
Signing time:             Wed 11 Jun 2025 05:41:01 +0000
ROA not before:           Wed 11 Jun 2025 05:41:01 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.143.45.0/24 maxlen: 24
                          2001:df1:6e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Jun 11 05:41:01 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=684916ed-fb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:1c:99:05:e8:f3:3c:15:9b:b8:93:b9:1c:
                    7f:c2:a6:87:5e:36:73:30:dc:23:b4:ec:c1:10:54:
                    c8:8a:8f:d8:ee:7c:c1:3e:62:e1:fc:d4:d1:99:69:
                    61:c8:f7:ec:cb:99:f3:89:b9:ec:4a:f9:54:d8:32:
                    4c:fb:7d:99:3f:82:bb:69:25:4b:ba:27:52:35:65:
                    3f:d5:92:06:b1:e2:fa:4d:ca:21:05:90:ff:64:7a:
                    aa:2c:94:fd:93:27:0e:5e:e6:39:94:10:21:cd:8e:
                    63:cc:17:92:30:1e:11:f7:ad:d7:a5:88:c0:62:c5:
                    2d:e8:e1:11:de:31:54:f2:d4:85:93:87:19:34:59:
                    5e:68:14:de:e5:41:6e:ab:72:2f:29:01:f3:68:2b:
                    b2:45:1e:f4:04:82:69:b9:cc:c1:bf:0a:a7:c0:0d:
                    d7:3d:35:68:39:dd:6f:10:08:0c:a5:10:50:15:35:
                    66:b6:2a:58:ad:39:0f:1c:10:8f:e6:48:a1:7e:89:
                    93:d9:dc:95:11:e1:c4:47:74:10:a6:ef:94:e9:6c:
                    55:ec:aa:db:71:f3:aa:08:b6:a3:fe:5f:81:0d:43:
                    a0:7f:02:aa:02:05:49:8b:45:ee:81:3b:35:fd:4b:
                    1d:c4:32:30:0c:fa:30:27:c0:14:64:e2:de:3c:40:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CC:FB:DE:30:50:94:BB:0D:D2:B6:AA:B7:39:6A:5C:76:6B:9C:21
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/5407E320236911EA9967DA1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.45.0/24
                IPv6:
                  2001:df1:6e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:18:0e:70:99:6e:09:48:f4:9f:f3:41:bd:16:23:1d:0a:77:
         81:4c:84:1d:20:c6:eb:fc:34:a7:81:6a:89:14:84:36:83:ec:
         62:05:1c:b3:3e:f3:51:cd:b6:13:4d:2f:b5:4e:94:ed:2c:d9:
         86:70:21:21:80:f7:2d:e4:6f:32:75:1a:da:66:77:23:4d:87:
         c5:07:a6:37:97:51:44:f8:90:63:28:18:0f:f2:22:7a:e0:f5:
         58:77:37:ed:d3:cc:69:76:67:33:94:dd:e4:59:53:c7:61:22:
         5b:58:87:d6:1d:43:67:82:49:ce:9f:0d:ab:5a:36:36:c8:cf:
         ec:b4:8f:a9:af:b4:48:a0:6c:4c:5c:71:67:99:e2:68:0c:56:
         fb:e9:54:e1:87:3f:74:84:cc:fd:e5:84:af:5a:03:63:c8:a1:
         0f:61:e3:a7:47:94:c6:33:8c:30:7e:d3:ea:76:8a:66:8a:3d:
         ec:71:9e:b4:d9:cc:c3:6d:ac:7b:08:55:d5:88:41:1c:34:f4:
         87:e5:d0:76:68:ef:ff:72:8d:58:af:f8:35:05:b6:3d:70:5b:
         91:e0:e2:a0:59:1f:7d:50:a9:58:34:eb:c4:15:11:97:fd:96:
         3d:82:34:d1:e3:cf:d6:96:4a:9a:4a:e9:56:4c:dd:60:81:08:
         54:18:e5:75
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA0MEYxMTAvBgNVBAUTKEM4RkNDQ0M0QkU4OThBQTkyMDY3MTM2NkEwRkQ3OTUz
MjlFOTIwMUQwHhcNMjUwNjExMDU0MTAxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQ5MTZlZC1mYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2aQcmQXo8zwVm7iTuRx/wqaHXjZzMNwjtOzBEFTIio/Y7nzBPmLh/NTRmWlh
yPfsy5nzibnsSvlU2DJM+32ZP4K7aSVLuidSNWU/1ZIGseL6TcohBZD/ZHqqLJT9
kycOXuY5lBAhzY5jzBeSMB4R963XpYjAYsUt6OER3jFU8tSFk4cZNFleaBTe5UFu
q3IvKQHzaCuyRR70BIJpuczBvwqnwA3XPTVoOd1vEAgMpRBQFTVmtipYrTkPHBCP
5kihfomT2dyVEeHER3QQpu+U6WxV7KrbcfOqCLaj/l+BDUOgfwKqAgVJi0XugTs1
/UsdxDIwDPowJ8AUZOLePEA2ZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJrM+94w
UJS7DdK2qrc5alx2a5whMB8GA1UdIwQYMBaAFMj8zMS+iYqpIGcTZqD9eVMp6SAd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQwRi83MDdCN0I4MDIz
NjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlxa2daeE5tb1AxNVV5bnBJ
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lQek14TDZKaXFrZ1p4Tm1vUDE1VXlucElCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA0MEYvNzA3QjdCODAyMzYzMTFFQThCNEYzOTBCQzRGOUFFMDIvNTQwN0UzMjAy
MzY5MTFFQTk5NjdEQTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnjy0wDwQCAAIwCQMHACABDfFugDANBgkqhkiG9w0BAQsF
AAOCAQEAEhgOcJluCUj0n/NBvRYjHQp3gUyEHSDG6/w0p4FqiRSENoPsYgUcsz7z
Uc22E00vtU6U7SzZhnAhIYD3LeRvMnUa2mZ3I02HxQemN5dRRPiQYygYD/IieuD1
WHc37dPMaXZnM5Td5FlTx2EiW1iH1h1DZ4JJzp8Nq1o2NsjP7LSPqa+0SKBsTFxx
Z5niaAxW++lU4Yc/dITM/eWEr1oDY8ihD2Hjp0eUxjOMMH7T6naKZoo97HGetNnM
w22sewhV1YhBHDT0h+XQdmjv/3KNWK/4NQW2PXBbkeDioFkffVCpWDTrxBURl/2W
PYI00ePP1pZKmkrpVkzdYIEIVBjldQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:18 2025 by rpki-client