Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
File:                     F4E06C32804911EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier:          ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=
Subject key identifier:   3C:FC:E4:5A:44:83:9B:24:DC:10:A9:14:5A:02:8B:0D:DB:0A:67:C7
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       0A91
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
Signing time:             Sat 08 Feb 2025 19:38:07 +0000
ROA not before:           Sat 08 Feb 2025 19:38:07 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     140224
IP address blocks:        103.148.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C
        Validity
            Not Before: Feb  8 19:38:07 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a7b29f-edcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:95:62:62:71:f7:47:71:50:06:d8:03:76:
                    a1:74:26:ff:93:87:bf:f7:e3:7f:55:cd:1a:53:26:
                    d0:9d:19:98:d1:51:21:d4:8e:11:f0:c0:db:bc:3b:
                    cb:79:4c:cc:fd:cd:e3:f5:53:2b:1a:89:2f:ea:a6:
                    39:ef:88:b9:b0:e2:78:88:eb:da:3e:f9:19:11:3b:
                    b4:4f:a5:6e:d1:ec:a7:81:58:50:cb:4e:d5:a4:34:
                    d4:fc:06:0e:a0:15:0f:6f:77:94:6e:9d:79:0c:75:
                    22:0f:b3:d3:d3:a4:a4:32:0e:b1:36:e4:9a:b9:5a:
                    d2:ed:10:88:90:1e:92:25:97:d4:54:17:f4:d3:50:
                    61:1f:4e:cd:ee:60:71:6a:f0:f1:2a:65:9b:8a:e7:
                    dc:1a:82:7a:9f:e9:61:ca:65:84:3d:3e:a4:63:30:
                    11:c7:35:c4:41:3b:ef:e6:4b:fc:51:ae:b8:d5:e6:
                    78:fc:a8:1f:3d:6f:3e:36:42:ac:3e:dd:8f:2d:1b:
                    5f:fb:99:fc:07:bf:3b:74:07:7f:21:54:fb:93:3a:
                    6d:18:e5:35:39:a8:31:17:e3:d2:e3:09:d1:8b:e6:
                    aa:a5:1d:da:02:d1:cf:d0:41:a6:0c:65:6e:67:3a:
                    ed:5b:60:a6:cc:d4:44:68:ff:f2:df:3c:9e:74:ef:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FC:E4:5A:44:83:9B:24:DC:10:A9:14:5A:02:8B:0D:DB:0A:67:C7
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:1b:63:68:8a:93:d7:a5:d3:8d:eb:07:d7:e7:54:82:e7:
         36:c2:87:74:1b:c0:d9:12:83:27:76:51:f1:61:82:af:26:d1:
         21:97:1a:c6:8e:0e:90:d8:6a:f3:c8:f3:8f:f7:ba:8f:39:a6:
         71:15:1d:b8:14:e3:c7:00:ce:0e:c8:4e:56:de:f5:4a:c5:b9:
         a4:09:a0:f4:f9:45:cc:16:8e:65:9e:e9:c2:10:4b:96:d3:ba:
         90:7d:5a:e4:fd:dc:c2:26:f6:b2:fa:a2:1f:12:7f:8f:66:5d:
         f0:6a:1c:1a:1e:f1:db:e4:90:51:29:fb:0d:d3:0e:d7:65:f9:
         42:69:2e:27:a1:7c:29:2c:b2:81:5f:be:f5:d9:8e:87:a8:5c:
         7c:56:b6:ff:6d:d2:12:2a:76:06:84:c8:b9:eb:19:84:5b:43:
         86:12:0e:c2:6c:7c:a9:8f:16:51:e2:92:6d:e7:a4:06:ab:7e:
         96:0e:73:61:9a:3d:10:b3:ca:3c:2f:4b:24:94:e0:6b:7b:7c:
         21:d0:47:f0:8a:82:d1:e2:17:e7:11:71:5c:ad:f2:a4:7c:93:
         2c:65:c2:09:55:cc:c7:9e:19:d1:d1:c8:5b:28:90:a7:c1:d5:
         31:07:07:6e:cf:6b:a5:a5:7c:15:a4:b0:f7:29:6a:84:f7:06:
         45:98:60:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1OEMxMTAvBgNVBAUTKEE2OENGQTMxMUVCQjFGMTAzMjBFQTIwNzc1MzAzMEU3
RjNBMjhGNzIwHhcNMjUwMjA4MTkzODA3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E3YjI5Zi1lZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZGVYmJx90dxUAbYA3ahdCb/k4e/9+N/Vc0aUybQnRmY0VEh1I4R8MDbvDvL
eUzM/c3j9VMrGokv6qY574i5sOJ4iOvaPvkZETu0T6Vu0eyngVhQy07VpDTU/AYO
oBUPb3eUbp15DHUiD7PT06SkMg6xNuSauVrS7RCIkB6SJZfUVBf001BhH07N7mBx
avDxKmWbiufcGoJ6n+lhymWEPT6kYzARxzXEQTvv5kv8Ua641eZ4/KgfPW8+NkKs
Pt2PLRtf+5n8B787dAd/IVT7kzptGOU1OagxF+PS4wnRi+aqpR3aAtHP0EGmDGVu
ZzrtW2CmzNREaP/y3zyedO+xpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDz85FpE
g5sk3BCpFFoCiw3bCmfHMB8GA1UdIwQYMBaAFKaM+jEeux8QMg6iB3UwMOfzoo9y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjU4Qy9CNEM0NUZFMDU0
OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4QXlEcUlIZFRBdzVfT2lq
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvejZNUjY3SHhBeURxSUhkVEF3NV9PaWozSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzI1OEMvQjRDNDVGRTA1NDhEMTFFQTg2QzlERDdFQzRGOUFFMDIvRjRFMDZDMzI4
MDQ5MTFFREFCQjA1QzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlJYwDQYJKoZIhvcNAQELBQADggEBADiPG2NoipPXpdON
6wfX51SC5zbCh3QbwNkSgyd2UfFhgq8m0SGXGsaODpDYavPI84/3uo85pnEVHbgU
48cAzg7ITlbe9UrFuaQJoPT5RcwWjmWe6cIQS5bTupB9WuT93MIm9rL6oh8Sf49m
XfBqHBoe8dvkkFEp+w3TDtdl+UJpLiehfCkssoFfvvXZjoeoXHxWtv9t0hIqdgaE
yLnrGYRbQ4YSDsJsfKmPFlHikm3npAarfpYOc2GaPRCzyjwvSySU4Gt7fCHQR/CK
gtHiF+cRcVyt8qR8kyxlwglVzMeeGdHRyFsokKfB1TEHB27Pa6WlfBWksPcpaoT3
BkWYYC8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:25:25 2025 by rpki-client