Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/46B3DF5A46E111EDB39B8526C4F9AE02.roa
File:                     46B3DF5A46E111EDB39B8526C4F9AE02.roa (raw, json)
Hash identifier:          qtQ5quSwMYsKVelHw8PoUcCRH9+p/SKKBVtmk8NHuxo=
Subject key identifier:   2E:29:57:E5:90:04:84:E5:03:47:B2:57:BF:29:5D:AC:BD:76:39:90
Certificate issuer:       /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial:       01A1
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/46B3DF5A46E111EDB39B8526C4F9AE02.roa
Signing time:             Fri 13 Dec 2024 02:05:43 +0000
ROA not before:           Fri 13 Dec 2024 02:05:43 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     137221
IP address blocks:        103.105.74.0/23 maxlen: 23
                          103.105.74.0/24 maxlen: 24
                          103.105.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
                          rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 01:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C1A2
        Validity
            Not Before: Dec 13 02:05:43 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675b9676-87f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:cb:5f:5b:51:ec:85:d1:2e:e2:ff:10:fa:
                    3e:66:37:0c:2b:90:fc:9c:81:96:4e:d0:ea:60:e2:
                    aa:4c:a6:eb:55:a9:a3:5f:fa:d8:db:0f:2c:3f:2b:
                    31:c6:a3:c7:2a:14:2f:e2:58:f1:6e:e7:99:9f:6e:
                    f8:41:d6:d1:96:0b:57:a2:8c:f8:46:8e:bf:86:86:
                    ea:e4:fc:01:90:97:fd:12:8f:a7:35:74:de:c8:9c:
                    01:00:e1:95:22:89:8f:31:01:7f:25:f5:54:26:00:
                    d8:c0:f9:30:70:3b:bc:2a:4a:81:6a:06:a2:cd:1c:
                    ea:d7:b0:3b:2c:f8:f4:f9:77:c0:5c:8c:44:15:c8:
                    72:db:75:f9:f7:82:54:fc:5c:eb:d3:9e:bb:45:56:
                    d1:49:c8:0c:99:53:8c:ca:ff:9f:6e:f2:fe:e1:1e:
                    53:ee:1b:11:3f:af:80:de:a6:ed:91:00:21:91:65:
                    30:04:16:f7:79:ff:7b:8e:40:91:0a:08:bd:05:67:
                    c6:9e:a4:ec:62:52:c5:d2:9b:9d:52:74:8f:c0:57:
                    ed:b4:f5:a2:1a:51:ce:44:c2:41:6d:ab:12:cb:dd:
                    b0:a0:0f:14:9e:e3:a1:7a:08:65:e4:a5:01:89:13:
                    66:fd:66:b5:ed:04:a2:1c:af:6b:3c:34:a1:92:ec:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:57:E5:90:04:84:E5:03:47:B2:57:BF:29:5D:AC:BD:76:39:90
            X509v3 Authority Key Identifier:
                keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/46B3DF5A46E111EDB39B8526C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:c5:46:05:f0:ff:67:40:f5:2b:12:b3:33:b9:0b:e9:1f:
         0b:b0:0c:06:92:ac:fd:2f:e0:e4:8d:19:73:ab:34:bf:38:da:
         b3:02:db:b5:5a:fb:19:28:af:dc:01:2f:ca:ff:6a:02:f3:ee:
         26:d6:20:32:1e:80:6a:64:1c:cd:f3:1d:8e:9f:84:15:8f:7b:
         c0:7f:9d:dc:e9:64:e4:cf:fa:4b:fa:28:24:8f:7f:3d:ee:47:
         7f:ab:a9:9e:44:4e:c8:8f:27:9f:12:7a:d6:7a:4d:57:bd:4e:
         de:ec:90:82:20:00:c9:ab:a6:06:a8:08:d4:d7:ea:5f:40:2c:
         7f:2f:61:6c:75:8e:8e:69:b4:22:7e:75:a7:b7:99:52:9d:75:
         ac:a2:a9:80:d7:50:95:73:1f:18:d2:b7:db:ad:cb:94:06:42:
         6b:35:72:d6:f0:f8:d1:08:e6:b5:28:e3:02:e7:a6:76:7a:f7:
         08:12:87:7f:ff:86:56:94:7a:70:bf:58:2a:e6:4e:5e:76:93:
         49:23:c0:c0:a1:f7:1e:01:08:49:9a:ce:f9:4b:b2:81:d2:6b:
         6e:e5:38:34:60:8c:89:73:5c:f6:ff:68:e5:1b:f1:0e:6e:63:
         9b:e7:4b:e9:9d:c3:41:cc:d5:05:6c:eb:3c:71:f6:8b:e3:2b:
         8d:9b:03:85
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMxQTIxMTAvBgNVBAUTKDU3OTk3MkU2MEVBNkY0NjM4NDg5MUFEMEUzRjQxNzkw
QzgwODA1RjEwHhcNMjQxMjEzMDIwNTQzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzViOTY3Ni04N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4VnLX1tR7IXRLuL/EPo+ZjcMK5D8nIGWTtDqYOKqTKbrVamjX/rY2w8sPysx
xqPHKhQv4ljxbueZn274QdbRlgtXooz4Ro6/hobq5PwBkJf9Eo+nNXTeyJwBAOGV
IomPMQF/JfVUJgDYwPkwcDu8KkqBagaizRzq17A7LPj0+XfAXIxEFchy23X594JU
/Fzr0567RVbRScgMmVOMyv+fbvL+4R5T7hsRP6+A3qbtkQAhkWUwBBb3ef97jkCR
Cgi9BWfGnqTsYlLF0pudUnSPwFfttPWiGlHORMJBbasSy92woA8UnuOheghl5KUB
iRNm/Wa17QSiHK9rPDShkuy2XwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC4pV+WQ
BITlA0eyV78pXay9djmQMB8GA1UdIwQYMBaAFFeZcuYOpvRjhIka0OP0F5DICAXx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzFBMi80NzRDRDg0NDQ2
REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlHT0VpUnJRNF9RWGtNZ0lC
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y1bHk1ZzZtOUdPRWlSclE0X1FYa01nSUJmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUMxQTIvNDc0Q0Q4NDQ0NkREMTFFRDkyNDAyMzIwQzRGOUFFMDIvNDZCM0RGNUE0
NkUxMTFFREIzOUI4NTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnaUowDQYJKoZIhvcNAQELBQADggEBABq9xUYF8P9nQPUr
ErMzuQvpHwuwDAaSrP0v4OSNGXOrNL842rMC27Va+xkor9wBL8r/agLz7ibWIDIe
gGpkHM3zHY6fhBWPe8B/ndzpZOTP+kv6KCSPfz3uR3+rqZ5ETsiPJ58SetZ6TVe9
Tt7skIIgAMmrpgaoCNTX6l9ALH8vYWx1jo5ptCJ+dae3mVKddayiqYDXUJVzHxjS
t9uty5QGQms1ctbw+NEI5rUo4wLnpnZ69wgSh3//hlaUenC/WCrmTl52k0kjwMCh
9x4BCEmazvlLsoHSa27lODRgjIlzXPb/aOUb8Q5uY5vnS+mdw0HM1QVs6zxx9ovj
K42bA4U=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:47:03 2025 by rpki-client