Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E5E5AB76E1FF11ED8291C918C4F9AE02.roa
File:                     E5E5AB76E1FF11ED8291C918C4F9AE02.roa (raw, json)
Hash identifier:          uZ4XGMAryuNiLEYH4OkW1daYwrGTX1yw6VXfeQKddWo=
Subject key identifier:   E0:3D:B3:5D:4C:D7:E7:1C:A0:5C:7D:85:1E:3F:B8:72:18:E9:C9:36
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1539
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E5E5AB76E1FF11ED8291C918C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 17:17:54 +0000
ROA not before:           Wed 04 Jun 2025 17:17:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     30860
IP address blocks:        103.114.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 16:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5433 (0x1539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Jun  4 17:17:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68407fc2-db4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:42:3b:17:6c:69:d2:c5:f9:2c:fa:9c:ef:
                    91:14:b6:4d:d1:ba:85:e7:70:ce:66:c8:d9:3d:8c:
                    51:75:05:fd:ac:cf:7b:07:32:75:15:ab:f4:97:b0:
                    dc:2b:b2:ad:18:69:6f:0a:0d:57:84:c8:f8:87:f2:
                    3e:91:ea:f0:f6:26:03:58:df:52:01:94:91:55:2f:
                    a5:15:bf:55:0a:82:f8:d0:b3:12:77:94:1d:12:a5:
                    58:65:05:ed:ec:24:a4:ac:cf:ff:de:f8:23:ac:65:
                    2e:d7:df:25:0b:d9:3e:4f:2e:ad:d2:93:e2:67:2e:
                    03:5e:0d:37:81:b8:fe:1b:d9:27:14:a7:01:e1:77:
                    73:7c:bf:e5:ec:78:05:cb:c5:4e:7a:f3:b9:27:1f:
                    ab:06:13:da:78:1d:f1:d9:21:22:62:5e:9d:ba:41:
                    95:cf:bb:26:73:8f:3b:0f:3c:dc:0d:cd:7a:7a:85:
                    fc:3c:78:f9:ae:5a:e6:61:89:69:17:5d:53:81:75:
                    2d:b5:2b:ad:66:0c:03:be:66:e8:8a:3b:9d:2a:e6:
                    f2:38:49:b7:87:15:e7:5e:35:f2:4a:82:9d:99:ff:
                    90:d0:6d:de:18:34:2f:32:e7:2d:0c:b0:90:13:f2:
                    3c:5a:30:7d:7a:ba:db:58:7e:9e:b8:ff:f4:f8:e8:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:B3:5D:4C:D7:E7:1C:A0:5C:7D:85:1E:3F:B8:72:18:E9:C9:36
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E5E5AB76E1FF11ED8291C918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:64:c4:ed:35:de:db:c1:87:5f:06:24:fe:dc:7e:38:74:
         42:41:ae:8d:fd:bf:7c:89:8a:ce:00:60:74:0d:a9:16:d4:d0:
         43:75:c2:9c:6a:88:a4:b0:3d:4a:6d:39:6f:e3:7b:0d:97:c1:
         0f:72:68:cc:22:31:1f:05:b9:ba:3c:35:6e:ae:2d:7f:70:ca:
         48:a7:d3:16:94:03:78:22:ac:85:ed:d7:82:26:07:14:cf:dd:
         c2:31:68:fd:a2:92:90:aa:fb:9c:a9:13:ac:01:04:69:f5:8d:
         2e:14:8e:80:53:40:12:e9:9a:0a:ec:60:9f:d0:69:e1:d4:7d:
         56:86:a1:99:a1:0a:86:7d:d7:4d:0d:e2:9f:ca:39:7f:79:a7:
         54:bc:87:24:74:9b:fc:d6:2c:b4:46:b0:aa:67:f4:24:77:a8:
         88:5d:b9:b8:47:7e:d0:cc:e4:97:a5:2a:83:9b:ab:59:9f:72:
         43:5d:35:9d:5b:cf:a2:6e:3f:e9:5f:c4:b0:d9:63:9c:c8:2b:
         94:c8:19:f0:3a:b5:01:39:f4:0a:7a:67:d0:49:20:a0:2e:f8:
         7d:a6:7b:14:b1:c8:5c:8e:4a:08:69:41:a8:aa:ab:bd:24:81:
         79:c8:50:32:3e:30:73:44:d1:23:9b:5b:60:19:77:8e:e7:ed:
         94:7b:42:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE
NEM2RDU3MUYwHhcNMjUwNjA0MTcxNzU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQwN2ZjMi1kYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5BCOxdsadLF+Sz6nO+RFLZN0bqF53DOZsjZPYxRdQX9rM97BzJ1Fav0l7Dc
K7KtGGlvCg1XhMj4h/I+kerw9iYDWN9SAZSRVS+lFb9VCoL40LMSd5QdEqVYZQXt
7CSkrM//3vgjrGUu198lC9k+Ty6t0pPiZy4DXg03gbj+G9knFKcB4XdzfL/l7HgF
y8VOevO5Jx+rBhPaeB3x2SEiYl6dukGVz7smc487DzzcDc16eoX8PHj5rlrmYYlp
F11TgXUttSutZgwDvmboijudKubyOEm3hxXnXjXySoKdmf+Q0G3eGDQvMuctDLCQ
E/I8WjB9errbWH6euP/0+OjFmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOA9s11M
1+ccoFx9hR4/uHIY6ck2MB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2
NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5RkMvODEwNDVFM0E1NjYwMTFFOEJGM0ZENTI3QzRGOUFFMDIvRTVFNUFCNzZF
MUZGMTFFRDgyOTFDOTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncr8wDQYJKoZIhvcNAQELBQADggEBAAwFZMTtNd7bwYdf
BiT+3H44dEJBro39v3yJis4AYHQNqRbU0EN1wpxqiKSwPUptOW/jew2XwQ9yaMwi
MR8Fubo8NW6uLX9wykin0xaUA3girIXt14ImBxTP3cIxaP2ikpCq+5ypE6wBBGn1
jS4UjoBTQBLpmgrsYJ/QaeHUfVaGoZmhCoZ9100N4p/KOX95p1S8hyR0m/zWLLRG
sKpn9CR3qIhdubhHftDM5JelKoObq1mfckNdNZ1bz6JuP+lfxLDZY5zIK5TIGfA6
tQE59Ap6Z9BJIKAu+H2mexSxyFyOSghpQaiqq70kgXnIUDI+MHNE0SObW2AZd47n
7ZR7Qu0=
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:56:30 2025 by rpki-client