Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
File:                     00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (raw, json)
Hash identifier:          XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=
Subject key identifier:   EE:47:26:3D:F3:0F:E3:C7:4D:6D:DB:54:B7:87:92:23:0E:20:FC:93
Certificate issuer:       /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial:       0185
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
Signing time:             Sat 07 Dec 2024 02:16:10 +0000
ROA not before:           Sat 07 Dec 2024 02:16:10 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     135668
IP address blocks:        103.78.136.0/24 maxlen: 24
                          203.0.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
                          rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D656
        Validity
            Not Before: Dec  7 02:16:10 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6753afea-8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:ad:97:c4:6d:58:56:3d:6d:d3:e7:d4:d0:
                    19:34:cc:50:d8:ad:13:f9:49:95:43:a1:b7:a2:2b:
                    3f:7e:65:81:d3:87:fe:e6:3e:0d:f1:e4:42:19:fc:
                    b9:ad:9f:e9:96:2f:83:c6:45:22:c5:c1:47:d2:63:
                    c2:6a:c2:b0:1d:5a:d9:03:fb:c1:06:04:fd:39:6f:
                    4e:8e:4b:0b:b8:7a:a5:71:d3:1e:1e:f5:c1:03:20:
                    1b:19:cc:4c:d2:6e:d9:0e:92:39:34:0b:f3:79:43:
                    b3:49:eb:95:f5:6f:a7:0f:37:6e:55:06:aa:82:d7:
                    49:a4:6d:5e:3b:57:0f:09:d9:14:dc:81:85:b6:5c:
                    4a:b7:81:d2:cc:4f:9b:3e:4f:1a:ea:11:b8:01:a0:
                    fb:dd:ba:9c:a6:21:c4:02:60:5e:98:0a:e5:89:5e:
                    19:9e:60:16:55:38:aa:b5:82:9b:f6:a3:a8:e3:4d:
                    93:46:39:05:53:62:19:24:8b:dd:65:c8:7f:df:0a:
                    0e:71:06:49:82:b9:00:de:c2:88:4c:5f:06:41:a2:
                    89:0c:50:78:b1:37:45:f2:12:01:78:aa:62:75:3c:
                    7f:09:eb:b9:d0:c8:d1:c9:89:1e:57:82:0c:95:29:
                    8e:77:2c:19:b9:84:ed:15:f4:eb:5c:51:5b:5b:81:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:26:3D:F3:0F:E3:C7:4D:6D:DB:54:B7:87:92:23:0E:20:FC:93
            X509v3 Authority Key Identifier:
                keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.136.0/24
                  203.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:60:85:3c:38:42:db:e8:8a:71:6c:9a:0a:ee:16:72:e3:
         45:29:86:7b:0b:2c:26:0a:c0:3a:e9:f6:89:b4:c5:91:1d:ba:
         78:8b:80:97:00:67:84:f4:7e:2f:20:7e:73:04:fd:63:1a:14:
         06:a1:49:b1:b4:fc:b4:ab:ba:cc:bc:c0:bd:9e:58:b6:1c:e5:
         d8:1d:30:42:61:7f:5b:c7:fc:d6:90:ca:a3:ba:9a:c7:63:e6:
         45:3d:b6:6e:16:cf:06:42:37:7f:09:f1:49:4b:1f:1d:49:05:
         10:7b:12:12:bd:b5:7f:d2:24:14:d8:c7:a0:46:f5:f1:d4:98:
         1f:59:e1:84:c4:b1:95:f1:d2:87:72:79:d8:ef:1a:3a:88:f5:
         c5:71:21:9f:54:b8:86:49:89:28:c2:91:87:22:92:81:9a:cd:
         aa:49:8f:22:61:9b:9d:b2:fc:02:32:bc:9c:78:e9:58:82:ba:
         7d:77:ba:54:ec:e3:df:bf:11:d0:18:ef:61:65:2f:1b:3b:c0:
         69:cb:39:d8:85:43:32:d2:3d:ca:20:b3:d1:f9:20:c6:b9:f4:
         d2:cf:2a:7b:38:2c:10:10:58:71:d8:a8:1b:aa:2c:74:b6:e4:
         c9:03:62:57:5f:ed:19:4a:7e:a8:af:bf:b0:1a:40:14:01:27:
         14:ea:ce:07
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3
OUJCQkEzM0YwHhcNMjQxMjA3MDIxNjEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUzYWZlYS04Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2sutl8RtWFY9bdPn1NAZNMxQ2K0T+UmVQ6G3ois/fmWB04f+5j4N8eRCGfy5
rZ/pli+DxkUixcFH0mPCasKwHVrZA/vBBgT9OW9OjksLuHqlcdMeHvXBAyAbGcxM
0m7ZDpI5NAvzeUOzSeuV9W+nDzduVQaqgtdJpG1eO1cPCdkU3IGFtlxKt4HSzE+b
Pk8a6hG4AaD73bqcpiHEAmBemArliV4ZnmAWVTiqtYKb9qOo402TRjkFU2IZJIvd
Zch/3woOcQZJgrkA3sKITF8GQaKJDFB4sTdF8hIBeKpidTx/Ceu50MjRyYkeV4IM
lSmOdywZuYTtFfTrXFFbW4G8XQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO5HJj3z
D+PHTW3bVLeHkiMOIPyTMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB
Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ2NTYvOTNDQjc3QUU2QUNCMTFFRDlCNjMzQjM5QzRGOUFFMDIvMDBGRkFCNzY2
QUNGMTFFREJDQzI4RTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnTogDBADLABswDQYJKoZIhvcNAQELBQADggEBAEvZYIU8
OELb6IpxbJoK7hZy40UphnsLLCYKwDrp9om0xZEduniLgJcAZ4T0fi8gfnME/WMa
FAahSbG0/LSrusy8wL2eWLYc5dgdMEJhf1vH/NaQyqO6msdj5kU9tm4WzwZCN38J
8UlLHx1JBRB7EhK9tX/SJBTYx6BG9fHUmB9Z4YTEsZXx0odyedjvGjqI9cVxIZ9U
uIZJiSjCkYcikoGazapJjyJhm52y/AIyvJx46ViCun13ulTs49+/EdAY72FlLxs7
wGnLOdiFQzLSPcogs9H5IMa59NLPKns4LBAQWHHYqBuqLHS25MkDYldf7RlKfqiv
v7AaQBQBJxTqzgc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:03 2025 by rpki-client