Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
File:                     B47C278021D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier:          kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=
Subject key identifier:   00:8D:0A:6E:90:DF:B4:FD:F9:70:C9:60:2A:BF:CC:FE:2C:85:11:D8
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       0F76
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
Signing time:             Thu 06 Mar 2025 18:06:24 +0000
ROA not before:           Thu 06 Mar 2025 18:06:24 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138538
IP address blocks:        103.133.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3958 (0xf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690
        Validity
            Not Before: Mar  6 18:06:24 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c9e420-4db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:a6:9c:f8:72:44:78:28:25:87:76:7f:1e:
                    43:00:bf:e2:37:7d:39:e4:25:70:ae:3f:0e:36:83:
                    90:86:15:40:34:91:6e:17:03:e5:4a:e3:9f:bf:be:
                    b9:10:17:01:e8:d1:f7:84:11:e0:f9:bf:f8:39:67:
                    ef:41:7c:dc:f2:10:12:8d:62:4b:86:d2:ce:4e:67:
                    bc:ea:3a:5b:6b:70:c7:69:94:9c:71:9b:80:e8:df:
                    e4:af:5e:ab:47:67:2b:37:6b:ac:53:f6:58:ad:ad:
                    fa:dc:78:60:f2:08:99:4c:8b:b5:06:c6:27:52:7d:
                    0a:55:6d:fb:39:4c:7c:c6:20:d2:29:19:f5:32:a4:
                    99:bd:bb:48:4f:53:0e:e8:bc:f3:6d:7b:5e:d8:c6:
                    b5:6c:b7:62:b0:30:36:0b:b5:d5:a1:d9:0c:76:bd:
                    36:2f:5f:14:7c:2d:99:ac:0f:41:80:70:1e:1b:b4:
                    b3:40:c7:e4:3f:56:11:f9:9c:21:cc:6a:1c:0a:07:
                    4c:ec:e6:45:b0:d2:4b:8b:5d:2f:4d:cf:9d:5d:ab:
                    5c:04:2f:19:d8:b6:57:32:64:e0:86:dc:86:49:30:
                    6c:86:5b:d3:6f:d9:ca:f7:e0:c0:92:fb:70:f2:35:
                    f2:d1:2c:45:3b:3a:1a:28:77:43:47:26:5e:a1:05:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:0A:6E:90:DF:B4:FD:F9:70:C9:60:2A:BF:CC:FE:2C:85:11:D8
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:93:84:9a:3e:48:89:8e:8f:ea:ae:73:69:6e:c3:90:90:83:
         dd:32:6e:14:0d:6c:b4:1b:b1:56:6c:fa:38:7e:35:86:9a:8b:
         04:3a:f5:c5:c7:ed:18:42:eb:84:df:0d:dd:f0:50:51:17:01:
         36:98:ed:ab:93:03:d0:44:fa:46:d8:c7:3b:4e:8a:93:c5:db:
         38:34:c4:eb:b6:a2:85:b2:65:3c:ab:74:45:34:d1:b8:ef:23:
         88:fb:78:6e:b1:a5:5f:20:7f:0b:11:7b:03:8e:d1:fa:5a:65:
         1e:82:0d:a0:6b:b7:d7:17:03:2a:87:c1:8b:06:91:e4:51:3f:
         f6:c4:b3:9e:48:15:dd:e8:85:9c:67:cb:27:4a:87:76:df:aa:
         5d:6f:2e:80:a0:7c:27:d8:00:9a:74:97:fd:5f:69:07:23:79:
         33:ff:f1:2a:db:58:89:3e:89:b7:fd:39:db:fb:26:0c:6f:6d:
         dd:f8:2b:35:b9:5e:cc:b5:73:2d:4f:01:ad:43:77:04:10:df:
         7c:38:c3:ac:82:f0:89:ca:94:8d:20:b2:a5:0e:d3:67:30:b9:
         82:a5:a3:b8:6e:12:e0:a5:15:00:b8:0b:52:18:1d:6f:6f:06:
         60:6c:48:f7:7b:a5:a9:c2:38:a7:45:35:61:8c:cf:00:8d:83:
         f6:ea:a9:f5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjUwMzA2MTgwNjI0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M5ZTQyMC00ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCymnPhyRHgoJYd2fx5DAL/iN3055CVwrj8ONoOQhhVANJFuFwPlSuOfv765
EBcB6NH3hBHg+b/4OWfvQXzc8hASjWJLhtLOTme86jpba3DHaZSccZuA6N/kr16r
R2crN2usU/ZYra363Hhg8giZTIu1BsYnUn0KVW37OUx8xiDSKRn1MqSZvbtIT1MO
6LzzbXte2Ma1bLdisDA2C7XVodkMdr02L18UfC2ZrA9BgHAeG7SzQMfkP1YR+Zwh
zGocCgdM7OZFsNJLi10vTc+dXatcBC8Z2LZXMmTghtyGSTBshlvTb9nK9+DAkvtw
8jXy0SxFOzoaKHdDRyZeoQU82wIDAQABo4IClTCCApEwHQYDVR0OBBYEFACNCm6Q
37T9+XDJYCq/zP4shRHYMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvQjQ3QzI3ODAy
MUQ3MTFFQjlDRkFDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhbAwDQYJKoZIhvcNAQELBQADggEBADmThJo+SImOj+qu
c2luw5CQg90ybhQNbLQbsVZs+jh+NYaaiwQ69cXH7RhC64TfDd3wUFEXATaY7auT
A9BE+kbYxztOipPF2zg0xOu2ooWyZTyrdEU00bjvI4j7eG6xpV8gfwsRewOO0fpa
ZR6CDaBrt9cXAyqHwYsGkeRRP/bEs55IFd3ohZxnyydKh3bfql1vLoCgfCfYAJp0
l/1faQcjeTP/8SrbWIk+ibf9Odv7Jgxvbd34KzW5Xsy1cy1PAa1DdwQQ33w4w6yC
8InKlI0gsqUO02cwuYKlo7huEuClFQC4C1IYHW9vBmBsSPd7panCOKdFNWGMzwCN
g/bqqfU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:43 2025 by rpki-client