Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931E0F7681C911EFA5B1D80BC4F9AE02.roa
File:                     931E0F7681C911EFA5B1D80BC4F9AE02.roa (raw, json)
Hash identifier:          HvCeCNMd3cDYBcsUNmnAZgRE0yTF+p8FgFeiy4l06fs=
Subject key identifier:   F8:12:E6:E9:48:88:B9:25:BB:0C:14:10:B0:CF:5D:4F:82:91:31:F5
Certificate issuer:       /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial:       0F9C
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931E0F7681C911EFA5B1D80BC4F9AE02.roa
Signing time:             Thu 10 Apr 2025 17:56:38 +0000
ROA not before:           Thu 10 Apr 2025 17:56:38 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     17916
IP address blocks:        103.30.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3996 (0xf9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
        Validity
            Not Before: Apr 10 17:56:38 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f80656-cf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:0d:a7:37:01:21:90:33:ee:ca:b2:3f:c2:
                    cc:ca:66:01:90:ca:c5:b7:ac:16:6b:00:f3:93:37:
                    cf:ff:9b:af:50:ac:c8:e8:50:c2:af:84:44:b5:03:
                    41:1f:f7:3c:a8:a1:c0:bb:01:50:5f:5d:54:e3:b0:
                    e1:5f:f2:37:49:6f:a8:bb:7c:6b:0e:27:6a:e4:b6:
                    05:39:13:d0:58:8a:dd:07:79:7f:99:a3:0e:8e:72:
                    53:41:2c:cc:70:e6:0f:7b:ae:f2:c4:92:f2:8d:67:
                    9d:49:2d:a3:81:72:2b:0c:c7:14:90:d8:b1:46:11:
                    d4:fa:85:9f:c9:ab:ba:f4:02:69:1b:9b:1c:6c:f6:
                    9a:29:9d:f4:ff:b8:0c:8f:ec:23:ad:5e:28:a7:c2:
                    2f:61:ca:c2:64:b3:aa:5e:c2:91:0e:7b:87:2d:8b:
                    50:29:d0:ac:77:4d:85:0e:ed:8c:09:91:7e:80:30:
                    00:97:56:1b:fc:13:45:08:fc:b8:37:58:fa:fe:e7:
                    0f:9b:7c:14:66:1e:0d:64:df:bd:b9:f0:82:a5:5f:
                    d9:4b:6a:2d:7b:65:32:fb:f6:c5:61:a6:d4:63:de:
                    c2:ab:98:21:83:58:5a:94:1f:09:a8:50:9b:32:36:
                    70:85:42:2a:4c:6f:ec:ca:76:d0:06:ea:24:f2:6f:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:12:E6:E9:48:88:B9:25:BB:0C:14:10:B0:CF:5D:4F:82:91:31:F5
            X509v3 Authority Key Identifier:
                keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931E0F7681C911EFA5B1D80BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:ce:34:bd:31:3b:31:74:1d:36:ec:f5:d7:88:41:4b:4e:2c:
         75:04:16:af:2b:c0:33:95:49:94:21:90:c1:13:08:d8:f7:46:
         8a:fa:64:5f:94:86:16:5e:cd:2d:aa:d4:86:61:ef:5f:84:06:
         58:a5:d2:9d:c3:da:85:de:6f:ce:96:71:60:a8:3c:27:6e:a5:
         d2:c7:5c:88:e3:7a:6f:db:83:ee:26:97:57:b9:ab:74:eb:cb:
         2b:ba:fd:14:ce:17:54:f4:ab:fa:2c:ea:e8:c5:16:50:22:b9:
         bd:34:ed:01:92:b4:a2:8b:5e:16:e1:94:13:2d:b8:b6:49:15:
         fe:d2:82:47:84:fe:f3:02:06:11:3f:18:16:57:b0:0a:63:68:
         c3:53:ba:ca:5c:a9:d9:98:be:03:99:94:cd:2c:9e:38:26:4e:
         3a:1e:4d:99:17:53:86:5a:4c:35:fb:4e:59:31:7d:56:f3:29:
         5a:af:00:a3:9f:9e:fb:e3:83:6f:f1:f6:a7:a3:a5:f8:f4:19:
         90:90:71:bf:29:5c:1c:ad:92:68:ed:76:80:c0:0e:fc:25:a0:
         52:35:a4:d5:a9:20:25:ba:e1:c5:10:8b:5e:19:b2:f2:02:ba:
         eb:65:a9:8c:ee:19:63:d1:b0:e7:e4:75:77:73:67:44:38:00:
         9b:f4:89:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjUwNDEwMTc1NjM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y4MDY1Ni1jZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwboNpzcBIZAz7sqyP8LMymYBkMrFt6wWawDzkzfP/5uvUKzI6FDCr4REtQNB
H/c8qKHAuwFQX11U47DhX/I3SW+ou3xrDidq5LYFORPQWIrdB3l/maMOjnJTQSzM
cOYPe67yxJLyjWedSS2jgXIrDMcUkNixRhHU+oWfyau69AJpG5scbPaaKZ30/7gM
j+wjrV4op8IvYcrCZLOqXsKRDnuHLYtQKdCsd02FDu2MCZF+gDAAl1Yb/BNFCPy4
N1j6/ucPm3wUZh4NZN+9ufCCpV/ZS2ote2Uy+/bFYabUY97Cq5ghg1halB8JqFCb
MjZwhUIqTG/synbQBuok8m+AawIDAQABo4IClTCCApEwHQYDVR0OBBYEFPgS5ulI
iLkluwwUELDPXU+CkTH1MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvOTMxRTBGNzY4
MUM5MTFFRkE1QjFEODBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnHrgwDQYJKoZIhvcNAQELBQADggEBAHPONL0xOzF0HTbs
9deIQUtOLHUEFq8rwDOVSZQhkMETCNj3Ror6ZF+UhhZezS2q1IZh71+EBlil0p3D
2oXeb86WcWCoPCdupdLHXIjjem/bg+4ml1e5q3Tryyu6/RTOF1T0q/os6ujFFlAi
ub007QGStKKLXhbhlBMtuLZJFf7SgkeE/vMCBhE/GBZXsApjaMNTuspcqdmYvgOZ
lM0snjgmTjoeTZkXU4ZaTDX7TlkxfVbzKVqvAKOfnvvjg2/x9qejpfj0GZCQcb8p
XBytkmjtdoDADvwloFI1pNWpICW64cUQi14ZsvICuutlqYzuGWPRsOfkdXdzZ0Q4
AJv0iTo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:01 2025 by rpki-client