Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/099E1584054F11F0B404403AC4F9AE02.roa
File:                     099E1584054F11F0B404403AC4F9AE02.roa (raw, json)
Hash identifier:          C4T7qhWLUayYrqcN4jw5wmK7nsVPsKqyxX7Qn60zjWU=
Subject key identifier:   20:93:22:08:98:99:BE:27:59:1D:DC:CB:81:95:C5:C0:6E:75:03:BA
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3785
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/099E1584054F11F0B404403AC4F9AE02.roa
Signing time:             Thu 20 Mar 2025 05:49:07 +0000
ROA not before:           Thu 20 Mar 2025 05:49:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141711
IP address blocks:        203.81.216.0/24 maxlen: 24
                          203.81.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14213 (0x3785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B
        Validity
            Not Before: Mar 20 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67dbac53-eb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:7e:71:63:78:4a:2e:29:e8:75:95:42:d6:
                    df:c7:b0:f1:84:9d:1b:f0:f0:80:ad:2d:76:d7:87:
                    fb:ea:c9:68:ab:5e:c9:67:71:15:07:a6:85:41:b5:
                    3e:27:d6:1c:2e:7f:67:04:e3:de:56:62:1a:08:6d:
                    31:92:e7:ec:4d:56:18:d8:4e:ec:66:94:a3:a6:8f:
                    fb:69:4b:cf:5f:ed:9a:a2:f5:88:c0:37:1e:a8:6f:
                    c6:22:c8:b0:45:1f:91:5e:49:f8:49:29:a9:2d:0d:
                    01:77:2a:ca:80:14:2f:4b:0e:89:bc:82:02:4d:10:
                    17:3f:b6:4f:c7:a6:5e:f6:34:09:7c:ef:d5:a1:d5:
                    b1:f5:dd:8b:9c:21:36:af:fe:79:3d:df:53:37:b3:
                    32:97:99:b2:8a:c4:95:80:75:4d:9e:35:7a:42:fc:
                    06:54:b2:20:8f:f8:a7:b5:65:3c:b3:af:e0:a5:db:
                    6a:c5:ef:ab:16:72:08:bb:db:63:dc:d8:4d:12:b1:
                    6a:b6:7f:49:30:f1:d5:40:bf:08:69:27:bc:aa:91:
                    97:c7:29:22:71:c5:39:d7:4a:19:cd:d2:26:21:c8:
                    b8:5e:6e:da:96:4a:aa:bc:20:5e:f5:76:57:dd:ea:
                    32:76:ba:7a:97:e1:9c:58:a6:bb:3f:03:2f:a7:76:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:22:08:98:99:BE:27:59:1D:DC:CB:81:95:C5:C0:6E:75:03:BA
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/099E1584054F11F0B404403AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.81.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:55:e6:04:dd:5e:a0:b1:66:31:1c:83:bd:7b:72:05:02:f9:
         bc:57:f5:87:83:a0:6d:74:ad:46:e0:bc:b7:32:d6:fa:ff:07:
         2d:b9:87:e7:8e:6a:9d:6b:64:f2:d9:b8:ec:13:cd:a9:9d:0a:
         cd:29:b4:fb:dc:40:82:10:52:7a:ae:35:b2:26:ec:e3:f1:e7:
         96:a3:91:01:ec:16:7c:66:c6:93:2c:f6:56:48:00:f5:8a:c1:
         2c:d7:32:24:20:7f:47:90:d8:bb:33:df:25:ae:6f:de:74:dd:
         20:87:8f:54:57:9a:7d:4b:ee:a0:1f:4c:a7:bf:57:bf:c3:b8:
         d7:0b:11:09:57:71:2d:ea:42:24:e1:eb:48:f9:f8:e2:50:8f:
         46:ce:80:09:a4:af:fb:30:f7:ee:60:2d:27:73:89:30:04:f7:
         4f:5a:a7:d8:f1:0a:fb:b6:95:db:fa:e9:7b:f8:bf:8a:48:ef:
         4e:0e:a4:04:ea:6c:1e:c3:7d:6f:9e:59:0f:3d:59:a2:20:45:
         3b:96:05:42:85:c8:81:43:dc:fd:69:db:85:6a:ef:17:92:fa:
         50:9c:26:ea:cf:11:28:02:36:7b:c9:db:e9:b1:54:a3:69:da:
         bf:3f:06:2f:53:11:e3:fd:16:a9:01:cc:4b:8e:05:28:95:7c:
         6e:7a:51:4c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICN4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwMzIwMDU0OTA3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RiYWM1My1lYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxtB+cWN4Si4p6HWVQtbfx7DxhJ0b8PCArS1214f76sloq17JZ3EVB6aFQbU+
J9YcLn9nBOPeVmIaCG0xkufsTVYY2E7sZpSjpo/7aUvPX+2aovWIwDceqG/GIsiw
RR+RXkn4SSmpLQ0BdyrKgBQvSw6JvIICTRAXP7ZPx6Ze9jQJfO/VodWx9d2LnCE2
r/55Pd9TN7Myl5myisSVgHVNnjV6QvwGVLIgj/intWU8s6/gpdtqxe+rFnIIu9tj
3NhNErFqtn9JMPHVQL8IaSe8qpGXxykiccU510oZzdImIci4Xm7alkqqvCBe9XZX
3eoydrp6l+GcWKa7PwMvp3bwiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCCTIgiY
mb4nWR3cy4GVxcBudQO6MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMDk5RTE1ODQw
NTRGMTFGMEI0MDQ0MDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLUdgwDQYJKoZIhvcNAQELBQADggEBAK5V5gTdXqCxZjEc
g717cgUC+bxX9YeDoG10rUbgvLcy1vr/By25h+eOap1rZPLZuOwTzamdCs0ptPvc
QIIQUnquNbIm7OPx55ajkQHsFnxmxpMs9lZIAPWKwSzXMiQgf0eQ2Lsz3yWub950
3SCHj1RXmn1L7qAfTKe/V7/DuNcLEQlXcS3qQiTh60j5+OJQj0bOgAmkr/sw9+5g
LSdziTAE909ap9jxCvu2ldv66Xv4v4pI704OpATqbB7DfW+eWQ89WaIgRTuWBUKF
yIFD3P1p24Vq7xeS+lCcJurPESgCNnvJ2+mxVKNp2r8/Bi9TEeP9FqkBzEuOBSiV
fG56UUw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:02 2025 by rpki-client