Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
File:                     1794902224E111EF97BA8F42C4F9AE02.roa (raw, json)
Hash identifier:          iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=
Subject key identifier:   33:CD:A1:94:78:D6:9B:91:76:A0:95:70:41:E5:AB:A8:C5:9A:44:F2
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0C1E
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
Signing time:             Sat 26 Apr 2025 18:57:48 +0000
ROA not before:           Sat 26 Apr 2025 18:57:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138640
IP address blocks:        103.137.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3102 (0xc1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: Apr 26 18:57:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680d2cac-f525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:c7:f9:85:79:61:0d:11:9d:4a:a7:39:7d:
                    03:53:64:49:e5:40:88:5e:24:87:98:db:7d:c7:44:
                    ac:eb:3e:23:2b:d3:7d:12:86:91:39:bc:34:fa:42:
                    0d:14:59:d0:02:6b:a1:27:d2:d7:52:b8:b0:a5:50:
                    ef:05:63:6a:a3:39:0a:33:c5:48:9e:45:e2:92:22:
                    8a:87:3f:14:35:f5:e7:f5:88:78:d3:89:c0:66:5f:
                    c8:63:66:6d:d2:da:f0:ef:c1:1a:5b:7f:5f:36:80:
                    bd:c9:02:26:6f:85:8e:42:73:a6:68:96:d7:08:e6:
                    4d:07:7f:3a:b4:3b:98:ab:33:c1:4c:99:24:f1:91:
                    73:4a:79:79:c6:25:a8:6e:f2:c9:70:2b:ca:f5:66:
                    e3:8c:5a:0c:fb:a1:83:7d:d6:a8:4d:2c:f2:f5:3c:
                    ab:ef:18:d2:ab:6c:15:10:8c:2a:1e:7f:e2:b7:28:
                    55:1d:5f:f5:81:71:40:ee:af:74:70:a5:64:f3:17:
                    1a:d8:0a:c6:3e:d9:9f:b6:3f:5f:e3:f1:6f:c5:59:
                    d1:63:91:25:30:4a:78:be:28:96:d0:8e:49:43:84:
                    39:27:aa:6b:f0:1b:67:6c:3a:0a:51:ce:ac:99:e9:
                    9e:2d:d0:34:3c:65:b2:43:2e:36:95:d2:43:0d:b3:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CD:A1:94:78:D6:9B:91:76:A0:95:70:41:E5:AB:A8:C5:9A:44:F2
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:58:f3:e7:5d:d3:a5:82:d2:30:cb:9a:b8:e1:d8:46:59:4f:
         7a:49:9f:9c:b8:7c:08:32:62:b4:78:2b:7e:39:80:9c:84:9b:
         07:e5:ed:f2:94:22:92:22:65:e1:69:2a:a8:3d:63:20:32:fe:
         6c:5e:40:92:e3:0c:e8:0a:b1:eb:ab:93:1b:46:e2:b1:54:90:
         cd:c9:92:02:fe:12:60:a6:75:a9:d9:81:0b:2d:49:c8:31:a1:
         ea:33:a4:76:8a:4a:97:ce:11:d7:04:9f:46:06:10:69:46:95:
         60:b8:15:ea:fa:30:24:7d:67:a0:83:28:d1:38:39:e9:17:ff:
         92:5f:42:b3:db:d5:96:c0:fe:09:40:55:4b:38:8f:df:3d:c9:
         7c:ea:ad:9f:ac:80:60:4b:2d:fc:46:9f:9c:c1:08:05:57:ff:
         fc:ce:d4:f3:54:32:7d:ac:fd:7d:f9:89:fa:3c:89:90:83:48:
         c1:af:d0:a3:3c:2a:77:6e:04:cc:d8:a4:ad:83:80:cd:6a:a1:
         56:13:6d:06:60:c4:7c:96:14:21:51:f2:c5:67:26:ae:96:4f:
         98:0b:eb:09:0a:d9:0b:f4:0b:9f:50:e4:80:f7:eb:d8:35:a7:
         22:9a:7e:f5:55:ae:2e:4a:bc:73:b3:ef:c9:28:d4:7b:79:5f:
         c5:01:09:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC
MzU1REFCRjQwHhcNMjUwNDI2MTg1NzQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODBkMmNhYy1mNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUvH+YV5YQ0RnUqnOX0DU2RJ5UCIXiSHmNt9x0Ss6z4jK9N9EoaRObw0+kIN
FFnQAmuhJ9LXUriwpVDvBWNqozkKM8VInkXikiKKhz8UNfXn9Yh404nAZl/IY2Zt
0trw78EaW39fNoC9yQImb4WOQnOmaJbXCOZNB386tDuYqzPBTJkk8ZFzSnl5xiWo
bvLJcCvK9WbjjFoM+6GDfdaoTSzy9Tyr7xjSq2wVEIwqHn/ityhVHV/1gXFA7q90
cKVk8xca2ArGPtmftj9f4/FvxVnRY5ElMEp4viiW0I5JQ4Q5J6pr8BtnbDoKUc6s
memeLdA0PGWyQy42ldJDDbPcuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDPNoZR4
1puRdqCVcEHlq6jFmkTyMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD
QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcyQUIvRDcxNzM0RkUwQ0E0MTFFQTg0ODQxQjNFQzRGOUFFMDIvMTc5NDkwMjIy
NEUxMTFFRjk3QkE4RjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniaEwDQYJKoZIhvcNAQELBQADggEBAFhY8+dd06WC0jDL
mrjh2EZZT3pJn5y4fAgyYrR4K345gJyEmwfl7fKUIpIiZeFpKqg9YyAy/mxeQJLj
DOgKseurkxtG4rFUkM3JkgL+EmCmdanZgQstScgxoeozpHaKSpfOEdcEn0YGEGlG
lWC4Fer6MCR9Z6CDKNE4OekX/5JfQrPb1ZbA/glAVUs4j989yXzqrZ+sgGBLLfxG
n5zBCAVX//zO1PNUMn2s/X35ifo8iZCDSMGv0KM8KnduBMzYpK2DgM1qoVYTbQZg
xHyWFCFR8sVnJq6WT5gL6wkK2Qv0C59Q5ID369g1pyKafvVVri5KvHOz78ko1Ht5
X8UBCcI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:12:13 2025 by rpki-client