Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
File:                     6E108B3EE2B211E9B2944855C4F9AE02.roa (raw, json)
Hash identifier:          lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=
Subject key identifier:   EA:31:29:E4:67:98:04:D8:59:45:69:46:E1:27:C4:CA:CB:9A:E9:E0
Certificate issuer:       /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial:       0CF3
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 18:27:24 +0000
ROA not before:           Thu 10 Apr 2025 18:27:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135416
IP address blocks:        103.218.164.0/24 maxlen: 24
                          2402:bc40::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
                          rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3315 (0xcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
        Validity
            Not Before: Apr 10 18:27:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f80d8c-9e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5a:69:71:54:fc:69:07:c0:50:fe:56:17:10:
                    b2:d3:97:19:6a:fb:28:dc:90:8c:37:d7:3e:93:26:
                    b5:79:21:4e:ad:08:02:bf:e9:c1:7f:e9:e3:85:27:
                    17:c7:95:da:c0:4d:77:28:f6:4c:77:19:8d:0d:6f:
                    34:e0:1e:d2:d7:62:46:4e:b9:56:f2:52:30:2e:db:
                    b1:0f:da:ea:4d:f6:f2:14:71:b8:31:e3:92:7b:aa:
                    c9:d2:a4:35:12:9b:3f:c7:90:aa:fa:b8:21:2e:09:
                    69:52:ed:88:59:ad:ce:f2:d2:c0:a0:47:b1:1d:2e:
                    75:e8:d4:40:b5:57:77:e3:6e:f4:f5:90:2e:5b:65:
                    ca:f6:ae:37:95:5b:a9:23:c5:ac:53:70:43:b0:5d:
                    a1:68:d6:a2:5e:f2:4d:0b:de:dc:38:de:9e:92:8b:
                    81:17:22:c4:6d:b9:67:f2:29:eb:fc:af:dc:81:e4:
                    30:97:06:eb:6d:df:3c:aa:f9:af:01:b5:f3:f5:3b:
                    b7:66:32:2f:52:67:75:07:dc:a6:cd:c1:71:a8:1f:
                    aa:1a:37:ac:b0:55:61:32:5e:90:90:69:94:e2:a2:
                    f0:95:5a:7a:b0:67:64:7b:99:17:43:04:44:95:5d:
                    da:a7:93:75:44:d2:89:d4:97:3c:5a:fc:fe:19:e5:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:29:E4:67:98:04:D8:59:45:69:46:E1:27:C4:CA:CB:9A:E9:E0
            X509v3 Authority Key Identifier:
                keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.164.0/24
                IPv6:
                  2402:bc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:e8:1a:98:ee:4a:5e:f8:18:72:87:54:96:34:b7:eb:d9:5e:
         95:88:19:38:04:b6:e8:0c:dd:be:cb:61:d0:26:12:04:04:bd:
         b4:5d:40:53:10:90:06:ed:ed:7b:e6:f2:a4:67:15:2e:73:85:
         82:21:47:cc:76:60:fd:4f:aa:b6:65:f1:c1:dd:44:df:4c:40:
         ec:b8:73:df:32:5f:c7:4e:17:b7:d6:0e:99:4c:35:73:75:81:
         2a:ab:98:01:dd:06:7d:2d:0d:50:93:00:a2:ee:ba:8a:b0:3d:
         ac:5e:dd:05:1c:e6:e7:4a:53:b8:39:9a:7d:9a:ac:83:0e:43:
         12:90:ab:cd:72:e6:8c:d6:43:ea:d5:b8:52:ea:a3:70:3f:01:
         94:54:2d:7f:4b:c7:a8:2b:40:65:94:67:59:b4:c5:b2:1a:d2:
         ab:0f:07:a3:b4:d0:ff:ba:76:a2:43:e0:8b:87:d6:fc:e1:61:
         3a:30:0e:86:7e:82:02:d9:ef:ff:b3:22:7c:56:0e:92:c7:50:
         ba:1e:e4:57:46:9e:1a:76:bb:f8:47:ba:2a:d2:00:7e:ab:2d:
         2e:5c:6d:0e:1e:d6:52:3c:57:01:59:d0:d3:62:f1:d0:9a:83:
         f7:8c:41:5e:d4:7c:b4:30:a5:8a:fd:b3:6e:4e:ed:0e:6d:6b:
         ae:85:df:8f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB
RUQ4REVBNUMwHhcNMjUwNDEwMTgyNzI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y4MGQ4Yy05ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8lppcVT8aQfAUP5WFxCy05cZavso3JCMN9c+kya1eSFOrQgCv+nBf+njhScX
x5XawE13KPZMdxmNDW804B7S12JGTrlW8lIwLtuxD9rqTfbyFHG4MeOSe6rJ0qQ1
Eps/x5Cq+rghLglpUu2IWa3O8tLAoEexHS516NRAtVd342709ZAuW2XK9q43lVup
I8WsU3BDsF2haNaiXvJNC97cON6ekouBFyLEbbln8inr/K/cgeQwlwbrbd88qvmv
AbXz9Tu3ZjIvUmd1B9ymzcFxqB+qGjessFVhMl6QkGmU4qLwlVp6sGdke5kXQwRE
lV3ap5N1RNKJ1Jc8Wvz+GeVBoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOoxKeRn
mATYWUVpRuEnxMrLmungMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy
QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA5RDcvNEE0MjgyOTRFMkIxMTFFOUJDRUE0RjUzQzRGOUFFMDIvNkUxMDhCM0VF
MkIyMTFFOUIyOTQ0ODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABn2qQwDQQCAAIwBwMFACQCvEAwDQYJKoZIhvcNAQELBQAD
ggEBAM7oGpjuSl74GHKHVJY0t+vZXpWIGTgEtugM3b7LYdAmEgQEvbRdQFMQkAbt
7Xvm8qRnFS5zhYIhR8x2YP1PqrZl8cHdRN9MQOy4c98yX8dOF7fWDplMNXN1gSqr
mAHdBn0tDVCTAKLuuoqwPaxe3QUc5udKU7g5mn2arIMOQxKQq81y5ozWQ+rVuFLq
o3A/AZRULX9Lx6grQGWUZ1m0xbIa0qsPB6O00P+6dqJD4IuH1vzhYTowDoZ+ggLZ
7/+zInxWDpLHULoe5FdGnhp2u/hHuirSAH6rLS5cbQ4e1lI8VwFZ0NNi8dCag/eM
QV7UfLQwpYr9s25O7Q5ta66F348=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:58:31 2025 by rpki-client