Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/48485D88CC6411EDA7970484C4F9AE02.roa
File:                     48485D88CC6411EDA7970484C4F9AE02.roa (raw, json)
Hash identifier:          2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=
Subject key identifier:   4F:77:DA:FE:15:4A:5A:E8:10:04:B1:6C:7C:7C:2C:4B:AB:DC:1B:34
Certificate issuer:       /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E
Certificate serial:       0185
Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/48485D88CC6411EDA7970484C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 03:08:17 +0000
ROA not before:           Tue 15 Apr 2025 03:08:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149631
IP address blocks:        103.224.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl
                          rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 02:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E
        Validity
            Not Before: Apr 15 03:08:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67fdcda0-3e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:48:55:cb:47:a8:17:ed:8e:8e:ca:f3:ca:
                    a3:1f:30:b0:76:73:76:5f:4a:8a:02:b7:e6:a7:8e:
                    c1:14:bf:28:aa:3e:09:38:d7:3d:b3:fb:82:0b:5f:
                    63:95:cd:fd:1e:fa:8c:ea:8f:dd:09:c2:74:e0:2f:
                    24:55:28:95:82:43:f3:61:75:d6:a5:71:60:a7:10:
                    d2:47:cb:af:fd:22:05:87:0c:66:13:8d:70:cb:d9:
                    78:fc:dc:36:4f:2f:45:a0:82:ab:ea:e7:b2:a7:b4:
                    84:1f:f6:63:06:45:67:ba:02:e9:cb:a4:78:33:08:
                    3f:da:cd:1f:69:c1:07:eb:72:23:52:09:a2:35:6d:
                    f8:83:58:25:38:cd:5b:01:31:0b:38:f8:12:a1:d1:
                    71:b0:8e:57:02:da:27:6a:5d:3c:48:a3:bc:4c:75:
                    ac:30:f6:99:82:72:2e:49:21:b3:38:89:e5:c9:4f:
                    c4:a3:d5:ce:e8:a9:08:b1:7d:9d:a4:3c:50:97:90:
                    c7:0e:00:93:8c:a2:23:c4:98:3d:28:fa:8e:2a:74:
                    ca:c1:c7:fe:95:bf:a6:bd:08:37:e0:9f:c6:08:1e:
                    92:83:20:9f:3b:94:a5:4c:ce:ae:e8:73:03:88:84:
                    2c:64:00:64:a6:3a:24:fc:58:d8:21:35:d8:e8:d3:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:DA:FE:15:4A:5A:E8:10:04:B1:6C:7C:7C:2C:4B:AB:DC:1B:34
            X509v3 Authority Key Identifier:
                keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/48485D88CC6411EDA7970484C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:43:1b:40:fe:eb:7c:86:d3:8d:20:9a:8c:39:a3:10:87:
         3e:4b:c2:9a:8b:ac:73:cf:b4:fe:c1:aa:b5:db:57:60:09:bb:
         91:a9:13:20:ef:da:44:c7:8a:90:2f:16:f0:bf:1d:5e:13:b1:
         e5:40:78:32:69:16:30:6b:c9:32:9e:c3:12:ea:d3:10:5b:58:
         25:9c:4f:7c:18:b0:72:38:ad:af:b0:f5:7c:3d:f4:47:3b:af:
         f8:59:75:90:8e:11:b4:f1:56:5a:9a:b2:a4:0c:05:d8:8b:3a:
         33:59:b3:68:94:f7:45:fd:23:31:03:a9:43:22:b2:43:19:e0:
         9a:9e:cb:34:3e:6b:b0:fb:97:4b:64:95:55:00:81:00:c0:aa:
         5b:bf:55:24:64:55:36:14:9d:74:c0:a8:eb:98:4b:cb:f3:55:
         1b:60:64:38:58:d9:3e:37:17:5c:db:78:d1:55:82:ee:33:43:
         68:ba:02:d9:14:17:d7:f3:62:3d:e2:2c:f1:40:00:dd:2e:ea:
         5d:36:84:2c:36:37:fb:71:34:8f:75:cf:00:dd:11:b2:ae:97:
         59:59:a2:13:44:f6:04:ba:fa:7c:f5:d0:7f:49:a6:8d:de:f6:
         eb:28:d3:75:fa:03:ae:6d:21:47:89:f8:44:b7:59:52:d7:ef:
         9f:62:d4:09
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz
QUQwMkRFNEUwHhcNMjUwNDE1MDMwODE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZkY2RhMC0zZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHlIVctHqBftjo7K88qjHzCwdnN2X0qKArfmp47BFL8oqj4JONc9s/uCC19j
lc39HvqM6o/dCcJ04C8kVSiVgkPzYXXWpXFgpxDSR8uv/SIFhwxmE41wy9l4/Nw2
Ty9FoIKr6ueyp7SEH/ZjBkVnugLpy6R4Mwg/2s0facEH63IjUgmiNW34g1glOM1b
ATELOPgSodFxsI5XAtonal08SKO8THWsMPaZgnIuSSGzOInlyU/Eo9XO6KkIsX2d
pDxQl5DHDgCTjKIjxJg9KPqOKnTKwcf+lb+mvQg34J/GCB6SgyCfO5SlTM6u6HMD
iIQsZABkpjok/FjYITXY6NNSrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE932v4V
SlroEASxbHx8LEur3Bs0MB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND
NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTgwQ0IvOTAxNDgyQjhDQzVGMTFFRDlENDMyQjY1QzRGOUFFMDIvNDg0ODVEODhD
QzY0MTFFREE3OTcwNDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn4GowDQYJKoZIhvcNAQELBQADggEBAI0BQxtA/ut8htON
IJqMOaMQhz5LwpqLrHPPtP7BqrXbV2AJu5GpEyDv2kTHipAvFvC/HV4TseVAeDJp
FjBryTKewxLq0xBbWCWcT3wYsHI4ra+w9Xw99Ec7r/hZdZCOEbTxVlqasqQMBdiL
OjNZs2iU90X9IzEDqUMiskMZ4JqeyzQ+a7D7l0tklVUAgQDAqlu/VSRkVTYUnXTA
qOuYS8vzVRtgZDhY2T43F1zbeNFVgu4zQ2i6AtkUF9fzYj3iLPFAAN0u6l02hCw2
N/txNI91zwDdEbKul1lZohNE9gS6+nz10H9Jpo3e9uso03X6A65tIUeJ+ES3WVLX
759i1Ak=
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:03:47 2025 by rpki-client