Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
File:                     5283F92CF54511EF9907BE10C4F9AE02.roa (raw, json)
Hash identifier:          O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=
Subject key identifier:   ED:86:0E:65:60:7D:EE:A5:EA:41:16:06:DF:34:2D:AC:21:45:B3:0A
Certificate issuer:       /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial:       18
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
Signing time:             Mon 31 Mar 2025 07:02:50 +0000
ROA not before:           Mon 31 Mar 2025 07:02:50 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.227.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
                          rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A33AA
        Validity
            Not Before: Mar 31 07:02:50 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ea3e19-c805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:31:ad:35:0f:3e:1d:cb:1d:d4:bc:20:b9:
                    96:f0:19:07:34:db:ed:a2:54:63:f6:26:65:a7:09:
                    8c:1c:be:a3:c8:f4:6d:c2:2d:ce:3e:7b:59:a6:ef:
                    de:27:b4:6f:05:72:e8:5f:ad:69:da:c4:af:0d:b0:
                    84:bd:19:ba:ed:74:14:e8:8f:72:a5:a8:90:77:1c:
                    7e:97:a5:7f:1f:95:af:4d:e2:db:2d:1e:67:15:f7:
                    e4:a8:7d:c2:4e:ce:46:9e:06:da:d1:04:e2:43:3f:
                    44:18:38:fe:7d:2b:61:b3:93:52:ac:23:46:da:26:
                    6d:99:62:41:54:3f:95:49:8d:fc:32:3c:cd:b8:c1:
                    29:29:e8:64:9a:b7:95:c2:b1:62:70:ce:c6:5e:b5:
                    c1:b4:f7:85:41:6c:bd:89:c3:28:2e:85:0c:d8:ad:
                    94:2b:5b:67:03:b5:dd:2c:3d:d9:bf:f3:aa:3a:a6:
                    d2:af:c3:ce:ec:32:1d:7c:35:ba:d1:23:91:d0:58:
                    f0:00:20:41:43:93:3f:6b:60:f6:bb:f2:4a:db:a9:
                    2b:c4:59:e5:5d:db:47:3e:00:28:53:7e:f0:df:df:
                    b1:6c:d6:28:e3:e0:34:95:e6:53:1b:ed:12:d2:0a:
                    93:01:18:e6:d8:cf:c3:d9:63:77:58:f0:f4:8e:b9:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:0E:65:60:7D:EE:A5:EA:41:16:06:DF:34:2D:AC:21:45:B3:0A
            X509v3 Authority Key Identifier:
                keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/5283F92CF54511EF9907BE10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:09:2d:e2:4c:2e:e8:8b:24:8c:9a:84:b0:fe:fc:00:94:
         b3:18:56:8a:df:f5:5f:4e:93:00:a3:c0:9c:1c:a0:31:51:59:
         1e:0a:8d:e5:0f:1f:3b:0a:d8:ae:43:a0:30:e4:a3:17:47:5c:
         7e:47:5d:11:6c:66:53:b7:46:e1:f2:23:b2:fe:e3:64:f2:b2:
         80:b6:05:ea:3c:f3:d1:ea:26:11:53:5a:11:97:17:74:09:1b:
         4a:29:12:58:6d:ef:9d:12:7c:96:0d:29:84:09:9e:2a:40:3c:
         24:b3:1c:cc:bc:3f:8f:c7:f5:b1:78:f9:90:c8:ad:29:8d:fc:
         26:58:c0:4b:9c:f0:41:8c:eb:de:c5:76:e2:fb:cb:80:40:3d:
         96:dc:7b:ce:12:34:a3:08:b3:48:72:44:28:76:b3:65:65:6f:
         21:a0:5f:90:f9:4c:95:fd:e9:49:49:03:19:8f:0a:71:71:18:
         5d:01:13:a4:0f:14:c6:1e:d5:cd:c0:c5:b2:a9:05:01:ab:93:
         52:a9:f0:65:a7:7d:85:1f:c0:0a:a2:15:e3:a8:71:dc:b0:7a:
         43:d0:64:28:63:15:34:ca:13:37:a3:ea:67:94:dd:7d:4e:a4:
         71:2f:f0:82:20:a2:53:e1:5b:51:15:0b:5c:8e:d6:61:3c:3d:
         53:f9:b8:26
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MzNBQTExMC8GA1UEBRMoMEI0MkE4NDQwRjFBOEU2N0ZERTU1RTQzNjVDN0UzRkI5
QzZDRkVDMzAeFw0yNTAzMzEwNzAyNTBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZWEzZTE5LWM4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF6DGtNQ8+Hcsd1LwguZbwGQc02+2iVGP2JmWnCYwcvqPI9G3CLc4+e1mm794n
tG8FcuhfrWnaxK8NsIS9GbrtdBToj3KlqJB3HH6XpX8fla9N4tstHmcV9+SofcJO
zkaeBtrRBOJDP0QYOP59K2Gzk1KsI0baJm2ZYkFUP5VJjfwyPM24wSkp6GSat5XC
sWJwzsZetcG094VBbL2JwyguhQzYrZQrW2cDtd0sPdm/86o6ptKvw87sMh18NbrR
I5HQWPAAIEFDkz9rYPa78krbqSvEWeVd20c+AChTfvDf37Fs1ijj4DSV5lMb7RLS
CpMBGObYz8PZY3dY8PSOuTbvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7YYOZWB9
7qXqQRYG3zQtrCFFswowHwYDVR0jBBgwFoAUC0KoRA8ajmf95V5DZcfj+5xs/sMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzM0FBL0RDMEYzRUQyRjU0
NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19z
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQzBLb1JBOGFqbWY5NVY1RFpjZmotNXhzX3NNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzNBQS9EQzBGM0VEMkY1NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi81MjgzRjkyQ0Y1
NDUxMUVGOTkwN0JFMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfjDzANBgkqhkiG9w0BAQsFAAOCAQEAf3UJLeJMLuiLJIya
hLD+/ACUsxhWit/1X06TAKPAnBygMVFZHgqN5Q8fOwrYrkOgMOSjF0dcfkddEWxm
U7dG4fIjsv7jZPKygLYF6jzz0eomEVNaEZcXdAkbSikSWG3vnRJ8lg0phAmeKkA8
JLMczLw/j8f1sXj5kMitKY38JljAS5zwQYzr3sV24vvLgEA9ltx7zhI0owizSHJE
KHazZWVvIaBfkPlMlf3pSUkDGY8KcXEYXQETpA8Uxh7VzcDFsqkFAauTUqnwZad9
hR/ACqIV46hx3LB6Q9BkKGMVNMoTN6PqZ5TdfU6kcS/wgiCiU+FbURULXI7WYTw9
U/m4Jg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:37:33 2025 by rpki-client