Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/B21979EE9CAF11ECBFF4AF64C4F9AE02.roa
File:                     B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (raw, json)
Hash identifier:          sdbnkMVypf4sBW84IBpLOAa+Rd3ZV2UqRLClbIWsTfg=
Subject key identifier:   CE:1E:5C:9A:7C:CE:47:3B:6C:E2:12:33:AF:05:7F:4E:72:CD:7D:42
Certificate issuer:       /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial:       061E
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/B21979EE9CAF11ECBFF4AF64C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 23:03:37 +0000
ROA not before:           Thu 10 Apr 2025 23:03:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136275
IP address blocks:        103.165.162.0/23 maxlen: 24
                          2001:df6:6980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
                          rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 22:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
        Validity
            Not Before: Apr 10 23:03:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f84e49-766c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:a2:58:45:b8:8d:89:4a:0d:ab:10:78:c0:
                    28:8c:90:68:c6:0b:3c:a3:b2:dd:54:0e:80:9d:dd:
                    ef:41:08:d4:81:56:a0:30:ec:14:f0:0b:69:db:72:
                    62:1f:e2:17:ff:84:47:a2:fb:e6:43:1a:48:b9:36:
                    9d:00:98:e7:e2:08:52:fe:ff:0e:ce:e1:a0:7d:72:
                    88:61:47:10:77:cf:e0:0d:eb:1d:35:4b:0b:ce:54:
                    50:1c:5b:37:bf:1e:b4:4d:b0:e4:4c:c6:36:21:c9:
                    65:be:99:ff:11:cb:05:e6:76:6e:59:7e:5f:40:74:
                    4b:81:e6:ba:80:34:22:4d:32:58:f8:14:bf:b7:1c:
                    bc:b6:4a:af:2f:38:32:73:1b:96:30:e6:d4:74:f7:
                    bd:7d:f7:70:19:3c:52:a8:94:28:75:a0:3b:52:4c:
                    c0:d7:b2:da:6f:72:71:e2:e6:df:4a:15:08:bc:2d:
                    ef:e0:57:3e:b5:e5:c8:b7:59:b9:3f:07:b3:3f:bb:
                    b4:eb:ed:9c:f0:0e:13:bf:f8:e8:89:39:12:35:4a:
                    29:15:94:ae:6d:53:63:95:da:62:1b:d3:40:41:46:
                    77:02:40:7e:7e:4d:e5:e5:66:a6:7d:1f:61:05:73:
                    c8:97:43:61:3b:8c:9f:a2:49:43:62:a8:06:0b:df:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1E:5C:9A:7C:CE:47:3B:6C:E2:12:33:AF:05:7F:4E:72:CD:7D:42
            X509v3 Authority Key Identifier:
                keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/B21979EE9CAF11ECBFF4AF64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.162.0/23
                IPv6:
                  2001:df6:6980::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:28:2a:e4:98:f6:88:b9:a3:0c:47:61:40:9d:3f:f8:91:4e:
         c1:6a:ee:74:9e:cc:ff:ca:2a:26:bf:96:46:69:a9:57:2a:57:
         ef:d6:df:9d:0f:5e:8b:5e:1c:c7:7e:f5:6d:79:54:a4:c5:cc:
         ed:79:5f:d7:73:5d:2e:89:13:c6:71:63:7c:07:79:c0:ff:0e:
         ef:60:33:75:3c:e0:2d:8b:73:af:e2:bf:a2:7f:a2:52:8c:fc:
         7c:ed:73:4e:52:ac:eb:cd:6f:6d:76:be:94:3e:70:8c:f9:2c:
         4f:bf:1a:4c:a1:58:b7:c9:18:25:a4:8d:c5:92:2a:5c:c4:d0:
         7e:9d:65:0f:ab:9a:52:de:ca:95:27:f0:54:b3:70:b0:24:df:
         8b:bf:bc:0c:db:c6:b6:3a:e6:b5:f8:02:d6:d2:42:59:e8:bf:
         e6:16:1b:bc:95:92:a0:c2:7a:37:e2:99:6b:a8:46:00:d7:36:
         62:e6:cf:49:37:03:16:a9:02:6e:3f:a1:0f:3c:eb:91:bf:42:
         c2:13:c5:72:69:f9:a2:89:28:f4:10:30:58:76:6a:c6:07:22:
         2c:0b:53:be:ae:be:cf:aa:5d:aa:f6:eb:ae:ba:88:c2:5d:3a:
         42:62:00:ce:ce:89:4a:ce:c6:9e:b0:54:4c:f8:6c:e8:5e:3e:
         6b:ec:7e:69
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE
RkRFNThGOEMwHhcNMjUwNDEwMjMwMzM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y4NGU0OS03NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsuiWEW4jYlKDasQeMAojJBoxgs8o7LdVA6And3vQQjUgVagMOwU8Atp23Ji
H+IX/4RHovvmQxpIuTadAJjn4ghS/v8OzuGgfXKIYUcQd8/gDesdNUsLzlRQHFs3
vx60TbDkTMY2Icllvpn/EcsF5nZuWX5fQHRLgea6gDQiTTJY+BS/txy8tkqvLzgy
cxuWMObUdPe9ffdwGTxSqJQodaA7UkzA17Lab3Jx4ubfShUIvC3v4Fc+teXIt1m5
PwezP7u06+2c8A4Tv/joiTkSNUopFZSubVNjldpiG9NAQUZ3AkB+fk3l5WamfR9h
BXPIl0NhO4yfoklDYqgGC99uvQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM4eXJp8
zkc7bOISM68Ff05yzX1CMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4
NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0ZFRjMvREREQzAxRUM5ODU0MTFFQkJCNDc5NjRBQzRGOUFFMDIvQjIxOTc5RUU5
Q0FGMTFFQ0JGRjRBRjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnpaIwDwQCAAIwCQMHACABDfZpgDANBgkqhkiG9w0BAQsF
AAOCAQEAIygq5Jj2iLmjDEdhQJ0/+JFOwWrudJ7M/8oqJr+WRmmpVypX79bfnQ9e
i14cx371bXlUpMXM7Xlf13NdLokTxnFjfAd5wP8O72AzdTzgLYtzr+K/on+iUoz8
fO1zTlKs681vbXa+lD5wjPksT78aTKFYt8kYJaSNxZIqXMTQfp1lD6uaUt7KlSfw
VLNwsCTfi7+8DNvGtjrmtfgC1tJCWei/5hYbvJWSoMJ6N+KZa6hGANc2YubPSTcD
FqkCbj+hDzzrkb9CwhPFcmn5ooko9BAwWHZqxgciLAtTvq6+z6pdqvbrrrqIwl06
QmIAzs6JSs7GnrBUTPhs6F4+a+x+aQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:31:46 2025 by rpki-client