Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
File:                     6ABF1108DD0C11EFBD619B85C4F9AE02.roa (raw, json)
Hash identifier:          o7bm07ntMU0Kda1K1G17wiFzqUMQ358CdlRhhdqxiMg=
Subject key identifier:   7E:69:5C:60:9A:EC:40:12:22:9A:41:F0:1D:9D:FB:34:28:06:81:28
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       22
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
Signing time:             Tue 28 Jan 2025 00:11:27 +0000
ROA not before:           Tue 28 Jan 2025 00:11:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134101
IP address blocks:        103.52.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 06:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477
        Validity
            Not Before: Jan 28 00:11:27 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=679820af-b453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:50:18:65:76:30:bb:fb:0f:e6:fc:f2:46:
                    60:94:c8:7d:70:2c:50:79:b8:cf:20:37:2b:d1:9c:
                    fa:53:a7:e8:eb:e4:44:b4:1d:c2:9c:d1:f0:c7:2d:
                    ba:2b:1d:6e:f5:28:36:7e:b0:75:a3:1a:46:c2:ea:
                    81:11:bd:f0:82:73:ee:42:25:50:67:97:32:29:20:
                    d8:33:3a:4e:31:9b:19:60:99:0b:3a:5a:c9:50:3a:
                    16:80:ab:35:65:eb:a6:56:2f:96:8a:6e:1d:ec:2c:
                    f0:2b:07:c7:4c:5b:65:34:6d:52:03:d0:26:7a:9e:
                    93:12:33:04:08:88:e7:0a:be:d0:44:12:e4:6c:20:
                    2b:21:bc:65:e5:82:93:4b:83:3b:9d:ff:f4:2e:d3:
                    06:21:f8:25:f9:dc:33:40:b3:1a:59:bf:34:80:22:
                    70:7c:d8:7c:9f:3f:4b:8d:bb:03:85:5f:e4:5a:96:
                    fc:b4:88:b5:37:b6:10:bf:3a:48:f2:62:2f:a3:7d:
                    de:75:d9:e1:2e:38:2b:e7:52:90:64:d1:13:09:e2:
                    53:f4:0b:e4:0e:c0:e8:ea:a0:96:10:2b:bd:cc:22:
                    69:df:de:75:20:30:68:8d:27:8c:e5:6b:df:73:8f:
                    fb:c3:3a:5a:74:70:43:68:21:81:a3:c7:b0:1f:23:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:5C:60:9A:EC:40:12:22:9A:41:F0:1D:9D:FB:34:28:06:81:28
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:42:a1:ca:51:2f:4c:27:91:1c:49:4e:af:bb:f0:ab:74:e5:
         8c:10:c6:98:cd:5d:3d:db:6d:58:a4:f7:13:91:f3:83:77:87:
         25:9a:55:7d:eb:27:6f:56:ab:71:38:00:60:c4:27:0b:37:ed:
         72:63:f9:1e:77:56:89:83:54:6d:eb:4f:d7:a8:33:24:35:27:
         c1:f9:c3:fc:a7:7e:6e:f0:59:8e:58:32:f3:b4:53:12:d1:b1:
         36:ad:12:57:b5:79:93:b5:5e:80:c1:27:c9:7a:ff:0c:4b:d9:
         ee:bd:7f:8a:e1:45:58:d4:35:65:b3:d4:f8:14:4e:dd:e8:03:
         bb:59:4b:79:f0:7f:0e:da:eb:aa:02:f8:76:d6:fc:49:43:e5:
         bb:cc:9e:f9:b8:26:18:1b:74:09:97:7c:35:f1:5b:07:60:c6:
         c7:c3:32:ec:71:ee:a1:a3:88:9a:80:6b:0e:a3:c2:fd:c8:87:
         6f:71:ed:1c:7b:91:0f:a6:81:a0:e1:19:3d:da:f7:76:e1:f5:
         14:3f:0b:10:6d:40:f6:ee:be:03:26:47:f6:73:f2:60:75:60:
         67:e6:79:9b:76:7f:c9:23:5d:40:c2:c9:5f:fd:26:42:77:9c:
         a8:24:cd:7d:b4:dd:1f:1c:77:78:4a:22:61:00:21:4f:cf:f1:
         82:1e:7c:c4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTQ3NzExMC8GA1UEBRMoMzJFRjI0REJCMjc0NzI5NjkwNDU0RkZDMkIxMTkzODQ1
MTlDNkFGQTAeFw0yNTAxMjgwMDExMjdaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3OTgyMGFmLWI0NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCp9lAYZXYwu/sP5vzyRmCUyH1wLFB5uM8gNyvRnPpTp+jr5ES0HcKc0fDHLbor
HW71KDZ+sHWjGkbC6oERvfCCc+5CJVBnlzIpINgzOk4xmxlgmQs6WslQOhaAqzVl
66ZWL5aKbh3sLPArB8dMW2U0bVID0CZ6npMSMwQIiOcKvtBEEuRsICshvGXlgpNL
gzud//Qu0wYh+CX53DNAsxpZvzSAInB82HyfP0uNuwOFX+Ralvy0iLU3thC/Okjy
Yi+jfd512eEuOCvnUpBk0RMJ4lP0C+QOwOjqoJYQK73MImnf3nUgMGiNJ4zla99z
j/vDOlp0cENoIYGjx7AfI50pAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfmlcYJrs
QBIimkHwHZ37NCgGgSgwHwYDVR0jBBgwFoAUMu8k27J0cpaQRU/8KxGThFGcavow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxNDc3LzEwRjk2RTUyQUQy
ODExRUY5OUUzOTQyMkM0RjlBRTAyL011OGsyN0owY3BhUVJVXzhLeEdUaEZHY2F2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTXU4azI3SjBjcGFRUlVfOEt4R1RoRkdjYXZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTQ3Ny8xMEY5NkU1MkFEMjgxMUVGOTlFMzk0MjJDNEY5QUUwMi82QUJGMTEwOERE
MEMxMUVGQkQ2MTlCODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGc0wTANBgkqhkiG9w0BAQsFAAOCAQEAeEKhylEvTCeRHElO
r7vwq3TljBDGmM1dPdttWKT3E5Hzg3eHJZpVfesnb1arcTgAYMQnCzftcmP5HndW
iYNUbetP16gzJDUnwfnD/Kd+bvBZjlgy87RTEtGxNq0SV7V5k7VegMEnyXr/DEvZ
7r1/iuFFWNQ1ZbPU+BRO3egDu1lLefB/DtrrqgL4dtb8SUPlu8ye+bgmGBt0CZd8
NfFbB2DGx8My7HHuoaOImoBrDqPC/ciHb3HtHHuRD6aBoOEZPdr3duH1FD8LEG1A
9u6+AyZH9nPyYHVgZ+Z5m3Z/ySNdQMLJX/0mQnecqCTNfbTdHxx3eEoiYQAhT8/x
gh58xA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:08:19 2025 by rpki-client