Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/EAAACB14A46111ECA6D7AC4AC4F9AE02.roa
File:                     EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (raw, json)
Hash identifier:          G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=
Subject key identifier:   B4:D3:DC:72:96:BA:0B:05:C6:BF:57:9D:76:CC:30:67:BB:D1:9C:85
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       037E
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/EAAACB14A46111ECA6D7AC4AC4F9AE02.roa
Signing time:             Thu 03 Apr 2025 00:57:08 +0000
ROA not before:           Thu 03 Apr 2025 00:57:08 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149638
IP address blocks:        103.183.68.0/23 maxlen: 23
                          103.183.68.0/24 maxlen: 24
                          103.183.69.0/24 maxlen: 24
                          2400:60a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Apr  3 00:57:08 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67eddce4-41b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:62:e7:a5:de:2d:bb:7e:06:65:0a:eb:cd:23:
                    c3:ef:73:6b:1d:fd:0b:6f:0d:ac:4f:4e:5b:aa:0a:
                    8c:2a:a5:8f:8a:a2:3c:d8:5f:36:6b:ed:75:45:60:
                    d0:12:7e:55:5c:54:86:56:dc:b6:3f:2f:e7:14:e8:
                    08:f8:22:59:12:b5:7b:30:e0:1f:fa:87:12:7f:14:
                    de:84:3a:0f:14:3c:43:c2:89:87:06:e3:03:8a:47:
                    62:ac:39:9a:1d:01:d1:35:56:e7:be:a9:66:d0:82:
                    93:76:6e:72:29:bb:f8:98:35:70:e4:e7:21:55:b5:
                    5d:8c:5f:74:17:e5:1c:1e:dd:ed:3b:75:ed:15:7f:
                    54:6f:ad:9f:d3:f7:0d:7e:ed:07:d9:66:ef:4b:e3:
                    2f:00:8f:94:3b:80:6e:73:db:e1:63:43:c9:4c:d5:
                    1e:58:a3:ed:b4:6f:5a:52:ef:a0:ed:2e:2b:a5:c6:
                    fc:c2:f8:95:f1:64:16:8b:40:d7:1e:c2:f6:05:93:
                    48:0e:9d:26:3c:09:db:d2:f1:97:07:2c:f1:3e:91:
                    7c:90:0b:b0:db:05:77:3e:74:59:e8:23:cf:b7:b8:
                    64:53:35:22:ef:8b:7d:9a:d6:7a:db:f8:8d:ec:f3:
                    d4:ae:62:3a:f7:93:8b:9f:64:da:fd:80:60:88:c8:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:DC:72:96:BA:0B:05:C6:BF:57:9D:76:CC:30:67:BB:D1:9C:85
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/EAAACB14A46111ECA6D7AC4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.68.0/23
                IPv6:
                  2400:60a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:ef:0c:d1:20:6e:20:c5:1b:f5:ae:0d:cd:07:56:d2:cc:
         22:83:4b:bf:43:b1:22:ef:1e:fc:8f:a5:70:f4:cb:6d:f9:56:
         9a:b0:8b:02:83:43:5c:85:a1:3a:4c:5f:3b:e6:ee:48:49:d2:
         0d:eb:78:90:84:a3:c7:96:1e:0e:ea:cb:31:56:75:4c:e8:a7:
         56:3c:1b:b0:c8:e2:85:3d:64:18:96:c1:5c:37:b1:7f:b9:27:
         16:48:2a:c6:84:7c:1f:95:d7:30:fb:c6:3b:d0:55:fa:cf:8d:
         3d:7e:44:1a:41:6e:ba:fa:d3:36:64:95:96:b9:c5:1b:3c:7b:
         58:46:1a:28:d4:1c:21:14:f2:53:ed:09:e7:d4:9d:1b:0d:74:
         24:46:da:45:24:23:87:d8:3e:df:7f:dc:2d:a8:96:57:09:69:
         c8:42:0e:96:15:1e:15:b9:8e:ae:75:85:67:f7:48:b3:96:ef:
         d8:81:50:a4:9f:95:29:7b:92:89:29:13:19:94:a9:c3:27:bb:
         31:8f:b5:be:b4:a3:f6:e9:af:b7:c2:75:c6:8d:37:73:d9:ef:
         00:64:72:9c:4b:c7:73:1a:d9:b8:9d:66:2f:08:7f:91:2e:11:
         bc:d3:34:3d:17:b7:19:7e:99:d7:8b:27:e4:f0:45:af:00:9e:
         99:4d:73:c3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw
NkQxOTc0NzMwHhcNMjUwNDAzMDA1NzA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkZGNlNC00MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+GLnpd4tu34GZQrrzSPD73NrHf0Lbw2sT05bqgqMKqWPiqI82F82a+11RWDQ
En5VXFSGVty2Py/nFOgI+CJZErV7MOAf+ocSfxTehDoPFDxDwomHBuMDikdirDma
HQHRNVbnvqlm0IKTdm5yKbv4mDVw5OchVbVdjF90F+UcHt3tO3XtFX9Ub62f0/cN
fu0H2WbvS+MvAI+UO4Buc9vhY0PJTNUeWKPttG9aUu+g7S4rpcb8wviV8WQWi0DX
HsL2BZNIDp0mPAnb0vGXByzxPpF8kAuw2wV3PnRZ6CPPt7hkUzUi74t9mtZ62/iN
7PPUrmI695OLn2Ta/YBgiMhVVQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLTT3HKW
ugsFxr9XnXbMMGe70ZyFMB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF
NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUIxODAvMTAyQkExOUU5RTQzMTFFQzg3RDBCMjZGQzRGOUFFMDIvRUFBQUNCMTRB
NDYxMTFFQ0E2RDdBQzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnt0QwDQQCAAIwBwMFACQAYKAwDQYJKoZIhvcNAQELBQAD
ggEBAE9v7wzRIG4gxRv1rg3NB1bSzCKDS79DsSLvHvyPpXD0y235VpqwiwKDQ1yF
oTpMXzvm7khJ0g3reJCEo8eWHg7qyzFWdUzop1Y8G7DI4oU9ZBiWwVw3sX+5JxZI
KsaEfB+V1zD7xjvQVfrPjT1+RBpBbrr60zZklZa5xRs8e1hGGijUHCEU8lPtCefU
nRsNdCRG2kUkI4fYPt9/3C2ollcJachCDpYVHhW5jq51hWf3SLOW79iBUKSflSl7
kokpExmUqcMnuzGPtb60o/bpr7fCdcaNN3PZ7wBkcpxLx3Ma2bidZi8If5EuEbzT
ND0Xtxl+mdeLJ+TwRa8AnplNc8M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:19 2025 by rpki-client