Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
File:                     AFED106A9E1511ECA4B98E73C4F9AE02.roa (raw, json)
Hash identifier:          IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=
Subject key identifier:   55:20:C0:01:59:B8:77:FF:55:16:05:BD:02:07:6C:DD:9F:4E:D8:88
Certificate issuer:       /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial:       033E
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
Signing time:             Thu 05 Dec 2024 00:53:54 +0000
ROA not before:           Thu 05 Dec 2024 00:53:54 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     149494
IP address blocks:        103.181.50.0/24 maxlen: 24
                          2001:df0:6840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
                          rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 00:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830 (0x33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
        Validity
            Not Before: Dec  5 00:53:54 2024 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6750f9a1-127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:be:0a:40:d0:f9:e9:70:d0:6d:4a:55:2f:
                    a2:e3:37:13:3a:2e:b9:00:71:7b:b5:6a:6d:dd:9b:
                    ec:f2:51:b0:17:83:56:ad:40:0b:fc:46:7d:d3:27:
                    22:4b:05:10:ce:da:de:f7:4d:32:5b:e5:d5:27:08:
                    21:06:74:45:19:85:7d:0e:f2:06:7a:86:2c:40:87:
                    01:ef:23:41:9e:89:df:cc:f8:9b:92:fa:0c:d0:ba:
                    4e:2c:98:e5:ef:85:d6:7b:99:20:b7:f7:2e:ff:6a:
                    16:8b:0c:51:53:43:90:97:44:1b:b0:2e:e6:50:14:
                    06:85:7f:e6:45:a2:f8:31:f3:da:97:4c:4d:68:2a:
                    a1:49:e9:fa:5b:80:ec:ea:83:27:41:d2:14:b7:d8:
                    d7:09:a2:b2:0b:d4:f7:59:03:ed:9b:c6:7a:83:19:
                    8f:b6:36:a6:d0:4c:da:7f:aa:21:8c:85:3f:91:62:
                    2e:0f:15:8e:1c:31:c6:41:4c:48:e7:85:53:25:b0:
                    af:c3:3f:09:e3:23:f8:95:7c:8d:55:97:b9:a2:d4:
                    47:d0:90:50:f9:d1:eb:b9:39:01:5d:2d:5a:cb:e6:
                    3c:23:0c:76:aa:bb:9c:9b:7b:80:4f:ae:18:ef:21:
                    e3:d1:c2:0d:3a:44:d5:fc:3e:df:e3:25:b0:67:0a:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:C0:01:59:B8:77:FF:55:16:05:BD:02:07:6C:DD:9F:4E:D8:88
            X509v3 Authority Key Identifier:
                keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.50.0/24
                IPv6:
                  2001:df0:6840::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:7f:b1:cd:c0:49:11:8a:1f:e2:c1:88:50:37:10:ab:08:
         8a:ce:0a:01:23:5c:2d:70:4d:b6:80:a3:d9:63:5f:54:78:35:
         e4:9b:0c:e7:5f:bb:96:a8:67:fa:c4:f0:88:dd:9a:4b:96:2d:
         f2:20:1a:ba:ef:49:6e:3b:a8:bd:a2:7a:14:5d:66:b1:0a:ea:
         cc:b1:30:13:c2:11:e5:3f:ab:a7:94:42:65:96:0d:ea:0d:5b:
         a2:c3:20:bc:a6:97:f1:ce:92:7c:08:5e:ea:f3:fd:cd:73:63:
         91:bb:18:ca:b9:bd:0d:61:15:fa:57:48:67:4e:69:9e:87:7a:
         0d:d1:6a:e3:cc:eb:5d:6f:ea:26:e9:12:5e:ca:c2:a2:d5:95:
         a3:2b:d1:3a:13:94:30:1d:7f:68:f4:68:b9:d4:07:15:f3:20:
         91:5d:a2:a4:86:ce:d4:53:44:da:23:5e:3e:89:59:dc:83:c7:
         30:68:b7:44:af:95:9c:46:3b:4a:17:14:a3:c8:ac:c0:50:3e:
         76:6f:b5:f5:ac:54:63:36:b7:28:34:be:00:ba:4c:6a:62:a8:
         af:09:e7:bf:fd:99:ee:c0:b3:58:89:77:48:10:c5:86:11:9d:
         57:fd:11:6d:01:aa:8d:ed:e4:0d:c3:aa:fd:52:3b:6e:3c:9f:
         fa:73:a3:1c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx
QTQzMkY0REIwHhcNMjQxMjA1MDA1MzU0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwZjlhMS0xMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJ2+CkDQ+elw0G1KVS+i4zcTOi65AHF7tWpt3Zvs8lGwF4NWrUAL/EZ90yci
SwUQztre900yW+XVJwghBnRFGYV9DvIGeoYsQIcB7yNBnonfzPibkvoM0LpOLJjl
74XWe5kgt/cu/2oWiwxRU0OQl0QbsC7mUBQGhX/mRaL4MfPal0xNaCqhSen6W4Ds
6oMnQdIUt9jXCaKyC9T3WQPtm8Z6gxmPtjam0Ezaf6ohjIU/kWIuDxWOHDHGQUxI
54VTJbCvwz8J4yP4lXyNVZe5otRH0JBQ+dHruTkBXS1ay+Y8Iwx2qrucm3uAT64Y
7yHj0cINOkTV/D7f4yWwZwp6IwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFUgwAFZ
uHf/VRYFvQIHbN2fTtiIMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF
MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThGOEEvNzIxOTVBRDQ5RTEzMTFFQ0IwOTFDRTcyQzRGOUFFMDIvQUZFRDEwNkE5
RTE1MTFFQ0E0Qjk4RTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABntTIwDwQCAAIwCQMHACABDfBoQDANBgkqhkiG9w0BAQsF
AAOCAQEABWt/sc3ASRGKH+LBiFA3EKsIis4KASNcLXBNtoCj2WNfVHg15JsM51+7
lqhn+sTwiN2aS5Yt8iAauu9JbjuovaJ6FF1msQrqzLEwE8IR5T+rp5RCZZYN6g1b
osMgvKaX8c6SfAhe6vP9zXNjkbsYyrm9DWEV+ldIZ05pnod6DdFq48zrXW/qJukS
XsrCotWVoyvROhOUMB1/aPRoudQHFfMgkV2ipIbO1FNE2iNePolZ3IPHMGi3RK+V
nEY7ShcUo8iswFA+dm+19axUYza3KDS+ALpMamKorwnnv/2Z7sCzWIl3SBDFhhGd
V/0RbQGqje3kDcOq/VI7bjyf+nOjHA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:40:35 2025 by rpki-client