Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/62752E9404D811F0BE92A51DC4F9AE02.roa
File:                     62752E9404D811F0BE92A51DC4F9AE02.roa (raw, json)
Hash identifier:          ZKVR1lrcdLxvriA1prCteQU1sWugc5ZdRQWr2+79yO0=
Subject key identifier:   81:7B:01:C0:BA:2F:8C:10:D0:0F:5D:21:49:CB:A6:EC:4A:AE:7D:8B
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       0148
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/62752E9404D811F0BE92A51DC4F9AE02.roa
Signing time:             Wed 19 Mar 2025 15:39:46 +0000
ROA not before:           Wed 19 Mar 2025 15:39:46 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     152856
IP address blocks:        103.231.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A
        Validity
            Not Before: Mar 19 15:39:46 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67dae542-6f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:b8:80:bd:fe:10:a0:0c:a1:f7:db:9d:25:
                    11:1d:46:4c:ff:db:b0:a4:40:c3:88:4c:12:fc:6a:
                    0c:59:f4:01:73:b8:f9:83:89:bb:9b:b1:db:26:63:
                    4c:40:e9:32:28:35:a0:79:6a:d6:41:28:f6:27:a5:
                    31:e2:a5:a4:6d:6b:b6:0c:0d:87:ed:89:77:d8:ff:
                    ad:17:33:fd:df:6c:d6:1a:d2:84:d1:e6:b3:5c:8a:
                    b0:99:16:4b:95:ab:e4:62:49:c7:d0:c8:27:ad:bc:
                    9d:39:d5:71:2a:70:4f:53:e5:1d:1b:5d:e2:61:0e:
                    58:d1:35:9f:b9:bf:3d:16:d3:a3:6c:ce:8a:8b:93:
                    79:31:65:1b:8b:14:84:5f:28:60:4d:71:f3:f8:a3:
                    c0:b3:22:52:7a:d6:7b:61:ce:76:df:40:32:e0:29:
                    6e:d7:f9:f0:38:1a:8f:16:82:2a:d0:e4:8f:65:ad:
                    08:a7:de:67:c3:7c:34:80:4c:68:15:5a:34:22:bc:
                    2b:77:7c:0c:ca:f9:93:58:3d:3f:3f:7f:ab:5b:7b:
                    a7:1e:0f:fd:32:d8:69:bb:23:eb:04:b5:46:e2:21:
                    27:00:16:4f:f0:be:3d:af:c8:9e:17:c4:ac:6c:5d:
                    a6:38:df:1c:ec:d7:90:e4:63:a9:e8:20:c5:e7:01:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7B:01:C0:BA:2F:8C:10:D0:0F:5D:21:49:CB:A6:EC:4A:AE:7D:8B
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/62752E9404D811F0BE92A51DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:01:90:49:72:e4:d2:1d:34:c8:f0:cc:00:c3:7b:7d:c4:de:
         d5:ef:86:f4:90:a4:f4:96:ec:4a:06:f9:13:5f:eb:35:90:6f:
         c5:93:fc:41:8e:e6:9a:b6:8f:1e:95:f9:d2:40:97:e3:93:a3:
         bd:b7:55:1d:f9:d3:38:81:39:c1:8f:02:da:ff:63:aa:32:5e:
         22:36:a6:e8:13:09:fb:2a:5b:cf:e1:38:3c:31:37:aa:95:71:
         1b:db:d6:b7:19:0e:ff:38:1a:41:bf:81:0a:6a:2e:27:19:54:
         4d:c7:93:94:c4:39:e7:a6:c3:b7:5b:86:fc:fb:8a:07:90:7c:
         f4:e4:b3:17:e4:5d:69:96:fe:96:1b:c9:47:b5:31:67:b9:1f:
         65:6a:2c:bb:6d:6f:e7:4a:b6:a1:b8:26:63:20:a3:4d:8a:1f:
         ac:31:14:5c:cd:f4:af:e1:1d:e7:b4:12:e4:c7:71:e8:a5:f3:
         3f:71:ba:5c:e4:b4:dd:ba:50:d5:07:b4:41:7e:4f:ee:60:f5:
         26:43:99:2e:cb:71:a4:d3:01:99:4c:f8:4a:ce:37:16:a8:fb:
         b2:5b:73:18:b4:a8:0f:b7:4e:b4:33:08:5d:31:e8:c4:ea:c9:
         98:62:76:92:cd:a9:12:a1:93:6f:e5:34:a7:67:d6:f2:47:14:
         07:bd:bf:99
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1MEIyNTI2QjU5
RjZERTJEQ0QwHhcNMjUwMzE5MTUzOTQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RhZTU0Mi02ZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Gm4gL3+EKAMoffbnSURHUZM/9uwpEDDiEwS/GoMWfQBc7j5g4m7m7HbJmNM
QOkyKDWgeWrWQSj2J6Ux4qWkbWu2DA2H7Yl32P+tFzP932zWGtKE0eazXIqwmRZL
lavkYknH0MgnrbydOdVxKnBPU+UdG13iYQ5Y0TWfub89FtOjbM6Ki5N5MWUbixSE
XyhgTXHz+KPAsyJSetZ7Yc5230Ay4Clu1/nwOBqPFoIq0OSPZa0Ip95nw3w0gExo
FVo0Irwrd3wMyvmTWD0/P3+rW3unHg/9MthpuyPrBLVG4iEnABZP8L49r8ieF8Ss
bF2mON8c7NeQ5GOp6CDF5wGK2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIF7AcC6
L4wQ0A9dIUnLpuxKrn2LMB8GA1UdIwQYMBaAFBGLg2HkTVBSXLYTULJSa1n23i3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjc2QS8yRkJBOEJGRTE5
NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVGSmN0aE5Rc2xKcldmYmVM
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VZdURZZVJOVUZKY3RoTlFzbEpyV2ZiZUxjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY3NkEvMkZCQThCRkUxOTZFMTFFRUFCNDVEQjU0QzRGOUFFMDIvNjI3NTJFOTQw
NEQ4MTFGMEJFOTJBNTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5yMwDQYJKoZIhvcNAQELBQADggEBAAUBkEly5NIdNMjw
zADDe33E3tXvhvSQpPSW7EoG+RNf6zWQb8WT/EGO5pq2jx6V+dJAl+OTo723VR35
0ziBOcGPAtr/Y6oyXiI2pugTCfsqW8/hODwxN6qVcRvb1rcZDv84GkG/gQpqLicZ
VE3Hk5TEOeemw7dbhvz7igeQfPTksxfkXWmW/pYbyUe1MWe5H2VqLLttb+dKtqG4
JmMgo02KH6wxFFzN9K/hHee0EuTHceil8z9xulzktN26UNUHtEF+T+5g9SZDmS7L
caTTAZlM+ErONxao+7Jbcxi0qA+3TrQzCF0x6MTqyZhidpLNqRKhk2/lNKdn1vJH
FAe9v5k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:11 2025 by rpki-client