Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/58105BCA5ACB11EA84F2392EC4F9AE02.roa
File:                     58105BCA5ACB11EA84F2392EC4F9AE02.roa (raw, json)
Hash identifier:          VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=
Subject key identifier:   AB:A4:47:4F:F7:91:F1:F0:CC:16:54:B1:A5:C9:CB:8B:BA:04:EF:1A
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0E74
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/58105BCA5ACB11EA84F2392EC4F9AE02.roa
Signing time:             Fri 14 Feb 2025 18:36:39 +0000
ROA not before:           Fri 14 Feb 2025 18:36:39 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136523
IP address blocks:        103.208.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3700 (0xe74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E
        Validity
            Not Before: Feb 14 18:36:39 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67af8d37-4b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:06:2a:33:e4:fa:93:14:e4:06:b1:2e:e3:
                    f6:f4:d9:d6:41:93:7e:41:76:ca:18:c4:48:27:6e:
                    54:15:83:1e:dc:ea:38:78:a3:78:77:f3:d0:90:64:
                    1a:4b:f7:ba:d1:87:13:28:58:fb:69:ff:13:32:5e:
                    e1:73:04:17:af:47:af:7d:9a:24:74:11:07:db:ba:
                    3a:ec:18:90:ec:17:04:47:a5:e6:4f:ba:dc:81:16:
                    70:2c:ab:d3:8f:06:39:fd:2d:15:eb:d4:32:e7:c8:
                    97:ab:f5:33:72:f3:45:40:b0:25:d8:b6:3b:f1:a7:
                    fc:5f:7a:9a:7b:83:41:4d:99:9e:fb:f1:8f:3a:9a:
                    f6:4c:d8:b0:72:be:77:5f:c7:4b:76:0e:78:13:a1:
                    6b:2f:3e:a6:2d:c0:8f:d3:92:0b:e9:9b:f2:27:10:
                    4b:96:4f:04:77:11:54:1f:4a:c7:d2:9b:91:ed:d5:
                    6e:ea:bd:c6:db:6c:57:bf:d3:d6:e0:ef:f7:4c:45:
                    1e:d6:a2:70:f3:39:46:13:00:04:86:a1:bd:e2:55:
                    8c:a5:b6:7e:9e:a1:d2:77:99:cd:9a:61:af:09:b0:
                    bf:bb:5d:98:47:64:29:91:48:c1:e6:eb:e8:2a:4f:
                    3b:74:47:69:11:f1:31:67:14:47:70:07:38:2e:0c:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:47:4F:F7:91:F1:F0:CC:16:54:B1:A5:C9:CB:8B:BA:04:EF:1A
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/58105BCA5ACB11EA84F2392EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:3b:57:d1:19:9e:86:54:59:6a:cb:d7:35:55:e6:4e:f6:
         c6:3d:55:07:c7:94:10:df:d7:c1:17:e1:78:50:97:e3:20:a2:
         b4:e0:0f:1c:d7:04:b8:b1:7c:53:98:e7:40:76:5e:d4:ae:76:
         70:3c:ba:5f:61:cf:65:44:fe:c8:05:7e:1e:77:94:6d:55:05:
         91:cf:39:9a:42:34:c4:3d:a4:d4:7e:55:05:87:53:38:53:bc:
         20:db:3c:42:03:54:31:1d:c7:29:0b:1a:09:63:a5:66:8c:99:
         b9:20:77:65:83:de:15:d0:92:9d:6e:7d:0e:bf:0f:fb:c4:19:
         0d:ad:ea:47:38:84:cf:17:95:31:9f:28:96:08:21:f0:99:6a:
         df:d8:0d:28:04:88:e1:05:6f:6c:2e:c7:81:c5:ee:c7:61:9b:
         99:2e:80:db:fd:b1:f3:d5:a0:b9:8e:ee:58:32:77:e1:c3:91:
         2a:21:f9:e5:fa:73:0f:83:4a:4f:93:af:23:6c:e1:30:c8:2f:
         93:ac:af:85:aa:f9:90:60:a1:b2:86:51:00:cb:d7:cf:2e:b7:
         d8:56:54:84:69:a0:25:c1:ff:fc:35:94:4c:73:77:de:9a:71:
         65:43:ff:86:f8:21:36:12:db:c5:61:28:99:14:7e:cf:ac:27:
         14:15:f3:09
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVCMTRGQjEyOUNB
RDRGNkNDM0YwHhcNMjUwMjE0MTgzNjM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2FmOGQzNy00YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqS4GKjPk+pMU5AaxLuP29NnWQZN+QXbKGMRIJ25UFYMe3Oo4eKN4d/PQkGQa
S/e60YcTKFj7af8TMl7hcwQXr0evfZokdBEH27o67BiQ7BcER6XmT7rcgRZwLKvT
jwY5/S0V69Qy58iXq/UzcvNFQLAl2LY78af8X3qae4NBTZme+/GPOpr2TNiwcr53
X8dLdg54E6FrLz6mLcCP05IL6ZvyJxBLlk8EdxFUH0rH0puR7dVu6r3G22xXv9PW
4O/3TEUe1qJw8zlGEwAEhqG94lWMpbZ+nqHSd5nNmmGvCbC/u12YR2QpkUjB5uvo
Kk87dEdpEfExZxRHcAc4LgyseQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKukR0/3
kfHwzBZUsaXJy4u6BO8aMB8GA1UdIwQYMBaAFGKEIH0NJ6Lov00usU+xKcrU9sw/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc1RS80REY3REIwNDkx
MTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91aV9UUzZ4VDdFcHl0VDJ6
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvUWdmUTBub3VpX1RTNnhUN0VweXRUMnpEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI3NUUvNERGN0RCMDQ5MTE4MTFFOTk0NzkzQzREQzRGOUFFMDIvNTgxMDVCQ0E1
QUNCMTFFQTg0RjIzOTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn0BswDQYJKoZIhvcNAQELBQADggEBAH3AO1fRGZ6GVFlq
y9c1VeZO9sY9VQfHlBDf18EX4XhQl+MgorTgDxzXBLixfFOY50B2XtSudnA8ul9h
z2VE/sgFfh53lG1VBZHPOZpCNMQ9pNR+VQWHUzhTvCDbPEIDVDEdxykLGgljpWaM
mbkgd2WD3hXQkp1ufQ6/D/vEGQ2t6kc4hM8XlTGfKJYIIfCZat/YDSgEiOEFb2wu
x4HF7sdhm5kugNv9sfPVoLmO7lgyd+HDkSoh+eX6cw+DSk+TryNs4TDIL5Osr4Wq
+ZBgobKGUQDL188ut9hWVIRpoCXB//w1lExzd96acWVD/4b4ITYS28VhKJkUfs+s
JxQV8wk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:06 2025 by rpki-client