Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3163940E054F11F0A4C38B3AC4F9AE02.roa
File:                     3163940E054F11F0A4C38B3AC4F9AE02.roa (raw, json)
Hash identifier:          sDQcfeNds4qgDJSmkl+daJ4l0AOp/d9NAWbyKYSP/tM=
Subject key identifier:   37:8D:B1:E3:93:11:2E:7D:F0:07:26:CF:31:55:5C:0B:02:E4:E5:0C
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       378A
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3163940E054F11F0A4C38B3AC4F9AE02.roa
Signing time:             Thu 20 Mar 2025 05:50:14 +0000
ROA not before:           Thu 20 Mar 2025 05:50:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150382
IP address blocks:        111.88.76.0/24 maxlen: 24
                          111.88.77.0/24 maxlen: 24
                          111.88.79.0/24 maxlen: 24
                          111.88.138.0/24 maxlen: 24
                          111.88.139.0/24 maxlen: 24
                          111.88.144.0/24 maxlen: 24
                          111.88.145.0/24 maxlen: 24
                          111.88.146.0/24 maxlen: 24
                          111.88.147.0/24 maxlen: 24
                          111.88.148.0/24 maxlen: 24
                          111.88.149.0/24 maxlen: 24
                          111.88.150.0/24 maxlen: 24
                          111.88.151.0/24 maxlen: 24
                          111.88.152.0/24 maxlen: 24
                          111.88.153.0/24 maxlen: 24
                          111.88.154.0/24 maxlen: 24
                          111.88.155.0/24 maxlen: 24
                          111.88.156.0/24 maxlen: 24
                          111.88.157.0/24 maxlen: 24
                          111.88.158.0/24 maxlen: 24
                          111.88.159.0/24 maxlen: 24
                          111.88.164.0/24 maxlen: 24
                          111.88.165.0/24 maxlen: 24
                          111.88.166.0/24 maxlen: 24
                          111.88.167.0/24 maxlen: 24
                          111.88.184.0/24 maxlen: 24
                          111.88.185.0/24 maxlen: 24
                          111.88.186.0/24 maxlen: 24
                          111.88.187.0/24 maxlen: 24
                          111.88.188.0/24 maxlen: 24
                          111.88.189.0/24 maxlen: 24
                          111.88.190.0/24 maxlen: 24
                          111.88.191.0/24 maxlen: 24
                          111.88.232.0/24 maxlen: 24
                          111.88.235.0/24 maxlen: 24
                          111.88.236.0/24 maxlen: 24
                          111.88.237.0/24 maxlen: 24
                          111.88.240.0/24 maxlen: 24
                          111.88.241.0/24 maxlen: 24
                          111.88.242.0/24 maxlen: 24
                          111.88.243.0/24 maxlen: 24
                          111.88.244.0/24 maxlen: 24
                          111.88.245.0/24 maxlen: 24
                          111.88.246.0/24 maxlen: 24
                          111.88.247.0/24 maxlen: 24
                          111.88.248.0/24 maxlen: 24
                          111.88.251.0/24 maxlen: 24
                          111.88.252.0/24 maxlen: 24
                          111.88.253.0/24 maxlen: 24
                          111.88.254.0/24 maxlen: 24
                          115.186.1.0/24 maxlen: 24
                          115.186.10.0/24 maxlen: 24
                          115.186.11.0/24 maxlen: 24
                          115.186.12.0/24 maxlen: 24
                          115.186.13.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.18.0/24 maxlen: 24
                          115.186.19.0/24 maxlen: 24
                          115.186.22.0/24 maxlen: 24
                          115.186.24.0/24 maxlen: 24
                          115.186.26.0/24 maxlen: 24
                          115.186.27.0/24 maxlen: 24
                          115.186.28.0/24 maxlen: 24
                          115.186.29.0/24 maxlen: 24
                          115.186.41.0/24 maxlen: 24
                          115.186.48.0/24 maxlen: 24
                          115.186.49.0/24 maxlen: 24
                          115.186.50.0/24 maxlen: 24
                          115.186.51.0/24 maxlen: 24
                          115.186.52.0/24 maxlen: 24
                          115.186.53.0/24 maxlen: 24
                          115.186.54.0/24 maxlen: 24
                          115.186.55.0/24 maxlen: 24
                          115.186.64.0/24 maxlen: 24
                          115.186.65.0/24 maxlen: 24
                          115.186.66.0/24 maxlen: 24
                          115.186.67.0/24 maxlen: 24
                          115.186.68.0/24 maxlen: 24
                          115.186.69.0/24 maxlen: 24
                          115.186.70.0/24 maxlen: 24
                          115.186.71.0/24 maxlen: 24
                          115.186.72.0/24 maxlen: 24
                          115.186.73.0/24 maxlen: 24
                          115.186.74.0/24 maxlen: 24
                          115.186.75.0/24 maxlen: 24
                          115.186.88.0/24 maxlen: 24
                          115.186.89.0/24 maxlen: 24
                          115.186.91.0/24 maxlen: 24
                          115.186.92.0/24 maxlen: 24
                          115.186.93.0/24 maxlen: 24
                          115.186.94.0/24 maxlen: 24
                          115.186.95.0/24 maxlen: 24
                          115.186.97.0/24 maxlen: 24
                          115.186.99.0/24 maxlen: 24
                          115.186.100.0/24 maxlen: 24
                          115.186.105.0/24 maxlen: 24
                          115.186.114.0/24 maxlen: 24
                          115.186.116.0/24 maxlen: 24
                          115.186.122.0/24 maxlen: 24
                          115.186.123.0/24 maxlen: 24
                          115.186.124.0/24 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.127.0/24 maxlen: 24
                          117.102.10.0/24 maxlen: 24
                          117.102.11.0/24 maxlen: 24
                          117.102.13.0/24 maxlen: 24
                          117.102.14.0/24 maxlen: 24
                          117.102.15.0/24 maxlen: 24
                          117.102.20.0/24 maxlen: 24
                          117.102.21.0/24 maxlen: 24
                          117.102.22.0/24 maxlen: 24
                          117.102.23.0/24 maxlen: 24
                          117.102.27.0/24 maxlen: 24
                          117.102.29.0/24 maxlen: 24
                          117.102.30.0/24 maxlen: 24
                          117.102.31.0/24 maxlen: 24
                          203.81.212.0/24 maxlen: 24
                          203.81.214.0/24 maxlen: 24
                          203.81.216.0/24 maxlen: 24
                          203.81.217.0/24 maxlen: 24
                          203.81.218.0/24 maxlen: 24
                          203.81.219.0/24 maxlen: 24
                          203.81.220.0/24 maxlen: 24
                          203.81.221.0/24 maxlen: 24
                          203.81.222.0/24 maxlen: 24
                          203.81.223.0/24 maxlen: 24
                          203.81.224.0/24 maxlen: 24
                          203.81.225.0/24 maxlen: 24
                          203.81.226.0/24 maxlen: 24
                          203.81.227.0/24 maxlen: 24
                          203.81.228.0/24 maxlen: 24
                          203.81.229.0/24 maxlen: 24
                          203.81.231.0/24 maxlen: 24
                          203.81.232.0/24 maxlen: 24
                          203.81.233.0/24 maxlen: 24
                          203.81.234.0/24 maxlen: 24
                          203.81.235.0/24 maxlen: 24
                          203.81.236.0/24 maxlen: 24
                          203.81.237.0/24 maxlen: 24
                          203.81.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14218 (0x378a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B
        Validity
            Not Before: Mar 20 05:50:14 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67dbac96-421e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:1f:c3:91:84:14:c9:74:94:36:cd:2e:af:
                    d4:bf:b0:e6:8c:15:e7:44:ba:c9:f5:86:35:1b:0e:
                    66:d6:f9:60:da:ca:3c:e7:f1:df:77:5b:5a:bd:1b:
                    43:cd:38:86:e2:b0:aa:d3:fd:8e:e3:12:8e:09:71:
                    33:63:b4:2f:cc:71:1c:74:67:0b:7f:d0:2c:bd:2d:
                    46:02:3a:e0:c1:12:f2:47:fd:29:4f:a2:50:ce:6e:
                    ba:f8:e7:40:6f:46:8f:fa:c1:32:c7:36:24:78:a3:
                    27:8e:08:93:88:d0:eb:0e:75:c1:d4:fa:56:44:93:
                    0c:8d:64:58:66:a8:4b:d5:12:5f:5b:db:27:29:1b:
                    db:a7:6a:f4:29:8d:92:e6:ff:17:29:82:4c:67:a9:
                    ae:b7:c4:42:bf:6d:9f:ef:0f:71:9d:9e:4f:ab:7d:
                    05:04:77:30:b1:9f:15:fa:0c:f2:c4:01:50:30:fc:
                    e3:3c:34:a2:46:3c:92:03:71:58:52:71:18:55:26:
                    14:f8:b1:1a:c6:63:6f:2d:4d:dc:c0:f5:8d:08:25:
                    89:59:64:44:1f:7a:7f:fa:85:2c:43:44:b9:26:9b:
                    ac:23:f3:e0:ad:a8:ca:50:c0:9e:31:5e:91:56:55:
                    a7:3a:e3:34:6b:74:ba:d9:6f:65:cf:cd:35:eb:c2:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:B1:E3:93:11:2E:7D:F0:07:26:CF:31:55:5C:0B:02:E4:E5:0C
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3163940E054F11F0A4C38B3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.76.0/23
                  111.88.79.0/24
                  111.88.138.0/23
                  111.88.144.0/20
                  111.88.164.0/22
                  111.88.184.0/21
                  111.88.232.0/24
                  111.88.235.0-111.88.237.255
                  111.88.240.0-111.88.248.255
                  111.88.251.0-111.88.254.255
                  115.186.1.0/24
                  115.186.10.0-115.186.13.255
                  115.186.16.0/24
                  115.186.18.0/23
                  115.186.22.0/24
                  115.186.24.0/24
                  115.186.26.0-115.186.29.255
                  115.186.41.0/24
                  115.186.48.0/21
                  115.186.64.0-115.186.75.255
                  115.186.88.0/23
                  115.186.91.0-115.186.95.255
                  115.186.97.0/24
                  115.186.99.0-115.186.100.255
                  115.186.105.0/24
                  115.186.114.0/24
                  115.186.116.0/24
                  115.186.122.0-115.186.125.255
                  115.186.127.0/24
                  117.102.10.0/23
                  117.102.13.0-117.102.15.255
                  117.102.20.0/22
                  117.102.27.0/24
                  117.102.29.0-117.102.31.255
                  203.81.212.0/24
                  203.81.214.0/24
                  203.81.216.0-203.81.229.255
                  203.81.231.0-203.81.238.255

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:e1:eb:f0:71:02:90:c7:46:33:d5:99:e7:19:00:5e:d3:
         56:eb:83:49:df:29:f5:6d:12:64:26:1e:43:d3:fd:6c:3a:5d:
         1b:3d:28:03:35:19:6e:51:39:9c:90:9e:5a:ad:81:a4:26:36:
         ca:96:fc:d3:f0:c3:c3:70:6c:ac:8d:f5:64:4b:6e:d1:a5:0e:
         18:ed:07:8f:ac:41:7e:d8:1d:67:d9:ca:f4:b1:4d:2f:b3:44:
         57:64:1c:f4:e7:bc:b8:1a:e8:db:68:b3:ff:06:bf:3e:f6:a9:
         dd:69:31:04:67:eb:77:62:02:8d:ec:bb:c7:2c:59:5e:28:30:
         a1:06:c9:fa:eb:49:b0:b2:5f:6a:cd:8f:39:0e:0c:b0:42:90:
         aa:5e:cf:ee:01:58:ce:a5:5e:c8:1a:74:a2:3e:0a:07:02:cd:
         a1:39:ee:ba:5b:83:c5:a7:7d:d4:cf:06:ff:04:e7:b5:3d:9a:
         1b:46:c2:f4:a4:8a:7f:1a:43:ec:9a:86:ab:4a:98:a5:5e:48:
         18:fb:76:b1:db:3c:54:5d:08:47:3a:59:a0:e6:e3:d3:89:01:
         02:a6:e8:6c:99:79:47:4f:12:27:82:0d:7c:c0:5c:2d:3e:c1:
         6e:11:ce:75:75:b8:3a:7c:e4:9f:66:0e:8a:09:43:13:ed:91:
         06:32:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:41:29 2025 by rpki-client