Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/7E4872CC507E11ED92705949C4F9AE02.roa
File:                     7E4872CC507E11ED92705949C4F9AE02.roa (raw, json)
Hash identifier:          mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=
Subject key identifier:   9C:5E:B6:B5:34:41:A2:08:BD:8E:D5:CA:3B:51:76:FF:10:41:9C:35
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       03C7
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/7E4872CC507E11ED92705949C4F9AE02.roa
Signing time:             Wed 15 Jan 2025 00:24:11 +0000
ROA not before:           Wed 15 Jan 2025 00:24:11 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     206264
IP address blocks:        103.47.145.0/24 maxlen: 24
                          103.47.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95
        Validity
            Not Before: Jan 15 00:24:11 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6787002b-d17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:f8:f2:20:67:e9:18:17:95:c4:f3:64:a3:
                    a7:64:14:ee:0c:3e:3d:32:0a:b2:68:97:d0:79:e6:
                    ca:2d:3a:a4:54:e8:40:a3:17:02:e2:7d:db:c4:89:
                    d2:d5:28:c0:5d:01:07:6e:82:9d:e4:cc:42:02:6c:
                    5f:1a:d2:cc:5e:d5:20:63:85:d2:1d:50:d3:18:14:
                    e1:ec:95:7e:95:bb:b0:7c:26:26:1f:60:91:d2:91:
                    43:e5:7d:96:14:32:ff:8a:9b:26:82:3e:fc:b9:e6:
                    02:b6:fe:ad:5f:46:99:12:96:aa:a0:97:d4:ae:55:
                    9c:25:b1:d5:f6:1a:04:a0:7e:7c:f6:cd:32:c7:08:
                    d5:98:86:c3:f9:a0:3a:bd:59:8f:17:da:f8:51:8f:
                    9a:5f:97:56:dd:5b:5e:7e:60:2e:81:a1:7e:8f:41:
                    fa:dd:17:c3:a0:e6:a0:09:e1:7b:cf:36:ab:24:f8:
                    4b:5f:6d:3b:e2:da:2c:2e:9a:19:05:42:ef:62:2a:
                    26:f2:30:7f:6f:92:ab:43:4a:45:bb:a4:3f:7f:24:
                    a8:d9:5a:17:7f:b6:bf:54:b1:27:ac:d1:4a:e7:ac:
                    32:d6:eb:19:3b:1d:47:b6:c8:14:3c:4b:5b:d5:ef:
                    99:d1:2c:25:41:a7:88:e3:5e:2c:d6:a2:8a:c9:ca:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:B6:B5:34:41:A2:08:BD:8E:D5:CA:3B:51:76:FF:10:41:9C:35
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/7E4872CC507E11ED92705949C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.145.0/24
                  103.47.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:3e:a8:8b:e6:28:11:6a:51:d5:33:ad:e7:b7:83:41:75:
         93:6e:eb:6a:f8:13:33:ab:c3:01:43:54:cd:b5:0f:74:6f:4c:
         83:87:41:77:90:92:c8:35:ec:4a:04:b6:d5:13:05:46:36:00:
         f0:13:84:ee:2c:a7:e5:db:a6:fa:97:e6:ee:1e:41:96:e4:df:
         7d:31:10:7b:7c:f0:ab:15:2a:fe:de:25:73:36:88:f4:d3:73:
         06:85:b1:c9:0f:99:1a:fc:73:fa:a1:32:5c:e6:6f:4c:18:d2:
         dc:0e:3d:82:08:4e:b7:c5:a1:c0:b7:34:85:73:9b:a1:0c:b5:
         ce:8a:9f:f2:94:87:ef:f8:ce:c6:0f:03:e0:d1:e3:b3:2e:30:
         ad:5b:0e:6b:05:13:36:05:c8:4e:59:8b:96:8c:20:77:0d:8d:
         7d:b6:d4:e2:70:94:4f:99:0b:9f:c5:2e:10:e3:7a:7b:81:d8:
         ce:22:8b:d0:cd:1e:3f:0a:a4:51:c7:0e:4b:a0:b0:00:d9:d0:
         a7:16:a2:58:0f:3b:0c:d1:19:eb:9a:ff:fc:0e:38:b8:ac:8b:
         06:28:40:fe:23:0f:c8:4c:9b:c8:c4:f4:6e:6a:3c:a4:c9:f8:
         d1:2d:7c:18:5f:dc:a1:de:f2:34:a2:b0:7e:9f:dd:8a:2c:84:
         56:d5:9b:06
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjUwMTE1MDAyNDExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg3MDAyYi1kMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsWL48iBn6RgXlcTzZKOnZBTuDD49MgqyaJfQeebKLTqkVOhAoxcC4n3bxInS
1SjAXQEHboKd5MxCAmxfGtLMXtUgY4XSHVDTGBTh7JV+lbuwfCYmH2CR0pFD5X2W
FDL/ipsmgj78ueYCtv6tX0aZEpaqoJfUrlWcJbHV9hoEoH589s0yxwjVmIbD+aA6
vVmPF9r4UY+aX5dW3VtefmAugaF+j0H63RfDoOagCeF7zzarJPhLX2074tosLpoZ
BULvYiom8jB/b5KrQ0pFu6Q/fySo2VoXf7a/VLEnrNFK56wy1usZOx1HtsgUPEtb
1e+Z0SwlQaeI414s1qKKycpPMQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJxetrU0
QaIIvY7VyjtRdv8QQZw1MB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvN0U0ODcyQ0M1
MDdFMTFFRDkyNzA1OTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnL5EDBABnL5MwDQYJKoZIhvcNAQELBQADggEBAC8VPqiL
5igRalHVM63nt4NBdZNu62r4EzOrwwFDVM21D3RvTIOHQXeQksg17EoEttUTBUY2
APAThO4sp+XbpvqX5u4eQZbk330xEHt88KsVKv7eJXM2iPTTcwaFsckPmRr8c/qh
Mlzmb0wY0twOPYIITrfFocC3NIVzm6EMtc6Kn/KUh+/4zsYPA+DR47MuMK1bDmsF
EzYFyE5Zi5aMIHcNjX221OJwlE+ZC5/FLhDjenuB2M4ii9DNHj8KpFHHDkugsADZ
0KcWolgPOwzRGeua//wOOLisiwYoQP4jD8hMm8jE9G5qPKTJ+NEtfBhf3KHe8jSi
sH6f3YoshFbVmwY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:31:53 2025 by rpki-client