Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/1407117C216311EA90D74C52C4F9AE02.roa
File:                     1407117C216311EA90D74C52C4F9AE02.roa (raw, json)
Hash identifier:          2C78FaeQx3m8f9CmVKBPjRPsChYY+d/Ump5Gj8ph3JM=
Subject key identifier:   DD:6F:53:C5:B8:F7:80:21:52:B9:EE:10:04:F6:19:F9:CA:E5:01:F6
Certificate issuer:       /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial:       0B6B
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/1407117C216311EA90D74C52C4F9AE02.roa
Signing time:             Thu 02 Jan 2025 19:07:36 +0000
ROA not before:           Thu 02 Jan 2025 19:07:36 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     58910
IP address blocks:        103.145.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 18:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
        Validity
            Not Before: Jan  2 19:07:36 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6776e3f8-e6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:36:f9:2b:b7:bc:d1:8a:cd:33:a5:c0:6d:
                    7c:be:c2:95:2f:82:31:b0:30:68:ad:8a:81:4b:02:
                    e1:6a:18:d2:ac:1e:49:a0:87:d8:24:a6:05:a0:a4:
                    50:5c:4e:0e:dc:e7:47:ae:3d:03:f7:30:b3:55:c3:
                    04:3e:53:5a:6f:29:e7:9f:e0:96:82:ad:26:fd:40:
                    82:aa:5a:e0:ff:97:47:9e:49:59:70:a9:82:d5:4c:
                    fb:3a:9e:4c:71:59:3e:a1:1d:1c:08:bd:fc:8a:15:
                    80:e6:37:e0:7b:ea:b2:e1:ea:ad:0d:59:2f:ea:1e:
                    f5:9d:d0:a6:ae:ce:69:06:8e:88:08:c3:04:d9:67:
                    70:fa:4c:ce:50:cd:41:40:09:ef:5a:58:79:0d:8c:
                    cd:ff:c5:5e:df:6e:99:c9:80:6c:d2:b9:8e:e7:1c:
                    0c:54:0a:4b:aa:e2:04:2e:85:d4:82:d3:62:e3:78:
                    26:9b:1b:d8:c8:db:a3:0c:85:40:a8:e5:d7:ff:7d:
                    11:23:9e:36:34:31:06:16:19:17:f9:07:ca:60:9a:
                    e0:12:2a:c6:70:9f:bd:96:49:fc:60:c7:d7:6a:9e:
                    30:ba:20:ec:b6:27:0c:3d:ea:85:e4:32:f7:ed:40:
                    08:1b:53:79:4c:f9:a9:35:c4:a3:fc:5c:b2:95:f0:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:53:C5:B8:F7:80:21:52:B9:EE:10:04:F6:19:F9:CA:E5:01:F6
            X509v3 Authority Key Identifier:
                keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/1407117C216311EA90D74C52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:31:b2:d9:14:9d:1d:a0:32:88:0c:41:52:42:94:10:c6:
         86:59:b1:5d:a1:66:8f:d1:d7:77:bd:3b:48:8f:a6:52:35:29:
         ac:74:99:f5:c5:67:8d:31:59:18:9f:f6:bd:b0:df:65:d9:8b:
         3c:62:11:ff:ce:aa:3a:e0:cc:32:bd:30:67:80:21:40:b6:5e:
         38:00:1c:52:16:4b:c6:6c:9b:ad:3e:91:3c:36:48:2c:6a:5c:
         63:2c:92:0e:44:33:39:b4:52:9c:33:af:ff:cc:cd:36:01:71:
         c9:cc:84:ff:69:db:9c:9a:6c:77:08:ae:36:0d:98:c8:8c:a5:
         a9:58:2f:e4:8b:d5:fa:20:bf:39:73:e2:f5:49:c8:a2:5c:0d:
         9a:64:4d:57:d0:88:a4:f2:00:f1:bf:38:59:59:68:de:c2:10:
         26:ab:78:f4:a8:ab:06:88:2b:59:87:a5:82:49:20:a3:e6:49:
         43:9f:0f:77:a8:62:de:f8:59:b1:2b:72:3f:a9:cc:db:af:76:
         43:b1:e1:ae:4f:91:08:c8:57:c5:66:62:d5:65:f6:76:34:ff:
         5f:e4:be:de:5a:fb:3a:b3:71:fc:ca:a8:1c:29:ff:a9:4d:b5:
         3c:80:be:86:72:71:d1:6a:e6:c4:83:4a:90:fc:82:37:63:62:
         f8:50:11:cc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz
RjA1QkQ5OTAwHhcNMjUwMTAyMTkwNzM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc2ZTNmOC1lNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Fg2+Su3vNGKzTOlwG18vsKVL4IxsDBorYqBSwLhahjSrB5JoIfYJKYFoKRQ
XE4O3OdHrj0D9zCzVcMEPlNabynnn+CWgq0m/UCCqlrg/5dHnklZcKmC1Uz7Op5M
cVk+oR0cCL38ihWA5jfge+qy4eqtDVkv6h71ndCmrs5pBo6ICMME2Wdw+kzOUM1B
QAnvWlh5DYzN/8Ve326ZyYBs0rmO5xwMVApLquIELoXUgtNi43gmmxvYyNujDIVA
qOXX/30RI542NDEGFhkX+QfKYJrgEirGcJ+9lkn8YMfXap4wuiDsticMPeqF5DL3
7UAIG1N5TPmpNcSj/FyylfB5ZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN1vU8W4
94AhUrnuEAT2GfnK5QH2MB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx
NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTBBNjkvRTNBQkQwNDIyMTQxMTFFQUJERjY3NzY5QzRGOUFFMDIvMTQwNzExN0My
MTYzMTFFQTkwRDc0QzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkZwwDQYJKoZIhvcNAQELBQADggEBAEROMbLZFJ0doDKI
DEFSQpQQxoZZsV2hZo/R13e9O0iPplI1Kax0mfXFZ40xWRif9r2w32XZizxiEf/O
qjrgzDK9MGeAIUC2XjgAHFIWS8Zsm60+kTw2SCxqXGMskg5EMzm0Upwzr//MzTYB
ccnMhP9p25yabHcIrjYNmMiMpalYL+SL1fogvzlz4vVJyKJcDZpkTVfQiKTyAPG/
OFlZaN7CECarePSoqwaIK1mHpYJJIKPmSUOfD3eoYt74WbErcj+pzNuvdkOx4a5P
kQjIV8VmYtVl9nY0/1/kvt5a+zqzcfzKqBwp/6lNtTyAvoZycdFq5sSDSpD8gjdj
YvhQEcw=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:53:01 2025 by rpki-client