Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/96B7F96CAB3611EFB500860EC4F9AE02.roa
File:                     96B7F96CAB3611EFB500860EC4F9AE02.roa (raw, json)
Hash identifier:          GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=
Subject key identifier:   82:C1:F2:75:46:CD:20:88:66:FF:5B:18:07:1F:AB:0B:17:D9:FA:2A
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       05A4
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/96B7F96CAB3611EFB500860EC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 23:25:11 +0000
ROA not before:           Wed 02 Apr 2025 23:25:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     395793
IP address blocks:        103.136.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E
        Validity
            Not Before: Apr  2 23:25:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc757-d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:9b:a3:2f:09:9f:1d:f9:c3:81:63:9b:e8:
                    76:68:e8:c4:3d:45:f4:f2:be:21:40:d4:7a:83:b8:
                    0e:79:a8:8c:f2:ae:bd:9c:a2:10:ce:ac:0b:5c:59:
                    3f:cc:79:f8:1f:2f:21:b3:30:c5:da:30:ff:cd:cc:
                    ab:71:30:7b:df:0d:c2:e6:a8:c2:b2:cb:03:da:95:
                    b4:6a:d7:a4:8b:1f:32:47:35:60:59:56:89:46:86:
                    4f:82:0d:10:f2:0f:b0:4f:b3:39:ba:11:c6:62:c0:
                    16:aa:1e:fe:bf:d0:eb:07:c1:d9:5c:a9:dd:b3:bf:
                    be:ff:33:60:9e:a7:a9:8e:ef:9e:43:82:0e:a9:12:
                    c6:34:a5:9d:b6:c4:fb:d4:e5:8b:f2:68:52:4d:95:
                    c5:26:b3:4c:be:c5:01:30:52:0e:b6:8f:67:60:f3:
                    40:9d:0e:c6:46:01:0d:c3:10:b1:c8:15:d5:13:77:
                    f4:db:8d:3e:c0:46:08:5e:ed:e5:0b:ba:46:82:7b:
                    58:73:c9:2d:07:a3:5a:63:70:3f:c7:c3:9c:3b:2a:
                    6a:38:42:d8:f5:fa:c4:16:57:8a:68:bd:de:86:75:
                    30:87:3c:72:b0:29:89:3c:7b:ad:f3:74:92:98:99:
                    15:de:08:a7:e9:35:cd:17:98:13:ad:84:a0:58:24:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:F2:75:46:CD:20:88:66:FF:5B:18:07:1F:AB:0B:17:D9:FA:2A
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/96B7F96CAB3611EFB500860EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:28:c4:fb:4e:47:4f:4c:a2:49:06:94:ba:55:9e:45:ed:
         ee:f2:31:96:f6:64:78:c4:48:a1:ff:57:c1:83:db:38:52:1d:
         4b:e0:91:f5:80:93:a1:42:79:94:b6:a5:5a:f6:44:0e:94:e8:
         21:8a:71:e3:c9:d1:34:0d:32:00:eb:ae:e4:5c:8a:6b:c2:f1:
         f5:fe:cb:c1:d9:de:84:97:02:39:bc:cd:ae:a7:eb:4a:9d:ec:
         68:fc:34:ad:ac:9e:20:5e:43:c0:0a:7c:b7:7f:61:eb:72:52:
         c7:64:3b:85:71:56:33:68:a3:c2:06:d7:2e:4c:63:59:6d:40:
         58:59:9d:ab:3d:16:95:9c:9c:83:24:e9:95:c3:33:e9:c9:3c:
         f1:67:7b:ef:fc:4f:93:7c:23:7d:a0:83:09:31:8f:1b:ee:95:
         8d:80:81:98:65:a7:9e:90:d1:6f:46:70:43:ac:b2:d9:3d:7c:
         21:41:78:da:d0:ec:f6:8a:3d:5f:01:2c:29:bf:fe:d8:b1:44:
         87:89:e6:1b:48:cd:85:fd:04:3f:51:ff:90:c3:e2:af:ae:6c:
         1a:8f:16:bd:b9:ee:23:b8:49:47:36:97:ef:20:e9:5d:4d:26:
         52:06:9a:98:16:77:6d:eb:22:e7:72:26:96:f0:c3:aa:ad:44:
         24:8a:5a:b2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3
OTlBRUY3NjcwHhcNMjUwNDAyMjMyNTExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkYzc1Ny1kMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRqboy8Jnx35w4Fjm+h2aOjEPUX08r4hQNR6g7gOeaiM8q69nKIQzqwLXFk/
zHn4Hy8hszDF2jD/zcyrcTB73w3C5qjCsssD2pW0atekix8yRzVgWVaJRoZPgg0Q
8g+wT7M5uhHGYsAWqh7+v9DrB8HZXKnds7++/zNgnqepju+eQ4IOqRLGNKWdtsT7
1OWL8mhSTZXFJrNMvsUBMFIOto9nYPNAnQ7GRgENwxCxyBXVE3f0240+wEYIXu3l
C7pGgntYc8ktB6NaY3A/x8OcOypqOELY9frEFleKaL3ehnUwhzxysCmJPHut83SS
mJkV3gin6TXNF5gTrYSgWCRYpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFILB8nVG
zSCIZv9bGAcfqwsX2foqMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw
MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0IwOUUvNDcxMTlEMDBEMDBCMTFFQkI1ODkwRTdCQzRGOUFFMDIvOTZCN0Y5NkNB
QjM2MTFFRkI1MDA4NjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniJcwDQYJKoZIhvcNAQELBQADggEBAA/UKMT7TkdPTKJJ
BpS6VZ5F7e7yMZb2ZHjESKH/V8GD2zhSHUvgkfWAk6FCeZS2pVr2RA6U6CGKcePJ
0TQNMgDrruRcimvC8fX+y8HZ3oSXAjm8za6n60qd7Gj8NK2sniBeQ8AKfLd/Yety
UsdkO4VxVjNoo8IG1y5MY1ltQFhZnas9FpWcnIMk6ZXDM+nJPPFne+/8T5N8I32g
gwkxjxvulY2AgZhlp56Q0W9GcEOsstk9fCFBeNrQ7PaKPV8BLCm//tixRIeJ5htI
zYX9BD9R/5DD4q+ubBqPFr257iO4SUc2l+8g6V1NJlIGmpgWd23rIudyJpbww6qt
RCSKWrI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:52 2025 by rpki-client