Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
File:                     784507FC9F4211ECB5BC4D14C4F9AE02.roa (raw, json)
Hash identifier:          PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=
Subject key identifier:   0F:B9:0F:7C:67:8F:06:44:B8:A6:2F:A7:98:44:5F:8C:FF:09:F3:47
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0AF1
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 19:49:28 +0000
ROA not before:           Wed 02 Apr 2025 19:49:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139069
IP address blocks:        103.139.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Apr  2 19:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ed94c8-ee1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:28:32:56:c0:6c:9d:68:80:3b:6a:8b:c8:
                    c4:53:f9:15:8a:8d:e4:1c:03:62:b0:e8:51:bc:27:
                    8b:3d:26:36:8e:06:8e:4e:04:33:e4:9f:a2:1e:ae:
                    68:cf:90:79:b8:69:61:0d:f3:c9:34:46:45:9a:6c:
                    a9:49:39:17:8e:6c:2b:b0:29:78:4b:0b:7b:8c:52:
                    85:98:7c:f4:6e:20:8f:aa:d9:5c:6d:ab:be:5c:da:
                    c4:61:67:b2:42:78:0a:b3:67:6d:57:8c:80:1b:d5:
                    cf:8f:23:9a:54:0a:9b:9d:90:53:3b:fa:6e:02:f5:
                    9d:61:4e:76:b9:c8:b5:6a:93:73:47:a4:70:d4:c3:
                    61:53:13:dd:b3:2f:ac:5a:d7:fe:86:de:7d:94:dd:
                    9c:81:00:98:9e:6e:6a:73:67:41:3a:3b:8d:1d:b9:
                    32:15:04:1e:86:15:3b:53:a9:e3:22:8a:74:fa:c3:
                    3c:0c:28:57:c9:40:ee:a6:3c:ff:da:1f:92:7a:37:
                    b1:30:14:ca:62:e6:5c:95:24:cb:6b:3d:e9:61:3d:
                    68:e0:21:b0:a6:9b:71:ef:97:50:aa:84:c6:e7:ef:
                    18:52:d8:a4:de:c1:0c:8e:95:dd:1b:61:65:e9:6f:
                    68:a4:31:f9:4c:68:ff:e7:b4:da:f3:f1:ee:6e:fd:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B9:0F:7C:67:8F:06:44:B8:A6:2F:A7:98:44:5F:8C:FF:09:F3:47
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:e9:44:f4:80:fa:d0:e0:4b:36:12:db:2a:d3:66:5f:e4:
         db:d4:b0:b1:35:7d:43:77:85:20:d5:de:d3:6b:1f:c5:99:6b:
         9f:45:4f:a3:4f:5d:3d:fa:18:bc:44:36:41:92:b8:11:6c:6f:
         13:e4:27:01:45:0b:c6:ec:cd:fa:ae:e9:8a:11:4c:d4:78:39:
         00:c3:6e:05:cf:7b:4e:76:42:2f:e1:08:d0:4c:65:b2:80:2d:
         5e:af:0c:db:af:8c:67:ea:35:da:42:1b:95:31:43:92:2f:9d:
         1e:af:d8:d3:30:16:d6:33:e5:7e:c2:ce:f3:20:7a:70:07:bb:
         8e:fd:5c:de:d6:8a:1d:37:2b:9d:9a:d2:c7:6d:c6:11:de:ca:
         71:23:54:bc:21:17:42:a8:28:fa:f9:f0:3a:02:a9:eb:89:4e:
         2a:07:13:c5:ed:a4:bd:b8:df:8d:0c:9a:44:c4:2b:62:05:fe:
         2b:26:33:89:4a:f7:80:cc:8b:52:1b:1f:01:df:52:4f:b0:f0:
         15:df:0a:72:07:71:77:09:72:ef:a1:38:4b:9e:78:08:e4:e5:
         a1:a7:d8:e4:54:cd:98:0f:ae:e2:aa:31:9c:b3:8b:c0:36:d4:
         1d:a6:04:8e:92:b1:48:e1:fd:e6:a8:a9:fa:71:58:43:a3:eb:
         f6:53:99:cc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz
QjAwRDJFMUQwHhcNMjUwNDAyMTk0OTI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkOTRjOC1lZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQAoMlbAbJ1ogDtqi8jEU/kVio3kHANisOhRvCeLPSY2jgaOTgQz5J+iHq5o
z5B5uGlhDfPJNEZFmmypSTkXjmwrsCl4Swt7jFKFmHz0biCPqtlcbau+XNrEYWey
QngKs2dtV4yAG9XPjyOaVAqbnZBTO/puAvWdYU52uci1apNzR6Rw1MNhUxPdsy+s
Wtf+ht59lN2cgQCYnm5qc2dBOjuNHbkyFQQehhU7U6njIop0+sM8DChXyUDupjz/
2h+SejexMBTKYuZclSTLaz3pYT1o4CGwpptx75dQqoTG5+8YUtik3sEMjpXdG2Fl
6W9opDH5TGj/57Ta8/Hubv0twwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA+5D3xn
jwZEuKYvp5hEX4z/CfNHMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz
MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzOTMvODg2RTgzNDQ0MzE3MTFFQUFFODhDNzIwQzRGOUFFMDIvNzg0NTA3RkM5
RjQyMTFFQ0I1QkM0RDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniz8wDQYJKoZIhvcNAQELBQADggEBAAzp6UT0gPrQ4Es2
Etsq02Zf5NvUsLE1fUN3hSDV3tNrH8WZa59FT6NPXT36GLxENkGSuBFsbxPkJwFF
C8bszfqu6YoRTNR4OQDDbgXPe052Qi/hCNBMZbKALV6vDNuvjGfqNdpCG5UxQ5Iv
nR6v2NMwFtYz5X7CzvMgenAHu479XN7Wih03K52a0sdtxhHeynEjVLwhF0KoKPr5
8DoCqeuJTioHE8XtpL24340MmkTEK2IF/ismM4lK94DMi1IbHwHfUk+w8BXfCnIH
cXcJcu+hOEueeAjk5aGn2ORUzZgPruKqMZyzi8A21B2mBI6SsUjh/eaoqfpxWEOj
6/ZTmcw=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:58 2025 by rpki-client