Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
File:                     81BA905AB5E811EDA7091163C4F9AE02.roa (raw, json)
Hash identifier:          y6J4Nd5HI2QEm6dWVe814mbT0DsqgpoN8B2fWKlHKUM=
Subject key identifier:   E3:EC:94:E0:DF:AA:A8:21:B5:7E:78:7D:79:C9:FC:79:53:91:F9:C5
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       0169
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
Signing time:             Sat 21 Dec 2024 02:46:36 +0000
ROA not before:           Sat 21 Dec 2024 02:46:36 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     150778
IP address blocks:        103.93.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 02:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Dec 21 02:46:36 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=67662c0c-7023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:6b:93:0d:50:05:8a:12:3b:9a:d2:01:0b:
                    22:47:93:49:8f:b1:94:82:9e:d5:5f:df:19:01:df:
                    52:46:26:6a:f0:89:21:72:77:99:e2:9a:65:55:33:
                    50:18:45:66:5b:e6:74:f1:53:2d:9e:58:dc:3c:9c:
                    e1:b7:56:fe:68:8b:65:08:31:67:f0:0d:1a:90:a9:
                    24:ba:73:51:44:17:b7:aa:7c:35:40:e2:85:f2:9e:
                    13:e0:c6:a2:1a:cb:bc:e3:03:45:fc:22:6c:d4:f7:
                    7f:14:17:47:6e:29:c5:d9:7a:e1:99:b8:b9:f4:4b:
                    e3:08:f6:6d:8b:8d:d1:18:43:05:bd:9d:97:d5:db:
                    b3:77:73:bd:03:81:bf:bb:db:7a:63:c0:a9:5a:96:
                    53:3a:53:8d:14:99:fc:3d:09:24:5e:8b:68:31:a5:
                    67:a5:c9:2f:07:0e:08:5e:6c:f7:25:12:7f:bf:fb:
                    ff:af:21:e1:7f:99:4f:12:73:b2:5a:c4:80:d5:dd:
                    f0:73:4a:04:d3:8e:95:e8:ea:d9:49:ef:69:9a:c0:
                    5d:bf:38:d8:18:d0:51:53:10:9a:61:8d:e9:21:9e:
                    65:29:70:a3:02:ea:79:79:ed:97:0a:d1:a6:39:50:
                    0f:3a:90:54:a8:32:2a:c5:10:66:2e:69:75:ac:83:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:94:E0:DF:AA:A8:21:B5:7E:78:7D:79:C9:FC:79:53:91:F9:C5
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/81BA905AB5E811EDA7091163C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:29:67:72:85:56:aa:9b:d9:70:e0:10:27:d1:95:66:53:39:
         fa:d0:c4:22:a4:c4:a7:7e:dd:25:b0:13:d2:72:5c:5d:6b:0a:
         34:56:bd:24:bb:ef:15:85:1f:67:68:16:d9:15:09:4f:68:0e:
         76:a0:a4:55:09:53:9b:17:b9:a4:23:cd:38:c2:fb:6a:ea:dd:
         3e:3b:46:7e:e2:59:5a:1b:a7:b2:dd:ab:3b:73:12:33:58:27:
         40:c8:b4:0b:f7:b7:cd:76:9b:79:a1:7c:95:f5:e4:db:51:2a:
         37:3b:7d:43:75:a2:83:fb:64:61:fd:10:b7:af:3b:6d:3d:05:
         a5:f3:94:30:8c:01:24:a1:1a:d9:c6:7b:b8:13:30:ea:35:0c:
         cc:fd:48:f2:3e:f7:99:e7:cc:af:80:fc:d0:1f:f8:4e:8f:00:
         46:ff:3a:cb:64:03:d3:3c:df:61:6e:f0:96:72:94:0b:64:ff:
         e4:1a:75:1d:a8:75:3c:42:ec:54:81:8b:e1:5f:8d:8d:c4:a0:
         74:b4:da:03:31:8c:da:5c:8b:a6:0c:da:8b:6a:76:a0:f4:b9:
         e7:22:7a:3b:9c:c6:37:55:50:12:6c:bf:9d:81:e0:8c:50:c4:
         c7:c5:4e:f2:eb:8f:5e:e7:a2:8a:c7:29:be:08:8e:c0:cb:f1:
         5a:12:bd:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjQxMjIxMDI0NjM2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY2MmMwYy03MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+9rkw1QBYoSO5rSAQsiR5NJj7GUgp7VX98ZAd9SRiZq8IkhcneZ4pplVTNQ
GEVmW+Z08VMtnljcPJzht1b+aItlCDFn8A0akKkkunNRRBe3qnw1QOKF8p4T4Mai
Gsu84wNF/CJs1Pd/FBdHbinF2Xrhmbi59EvjCPZti43RGEMFvZ2X1duzd3O9A4G/
u9t6Y8CpWpZTOlONFJn8PQkkXotoMaVnpckvBw4IXmz3JRJ/v/v/ryHhf5lPEnOy
WsSA1d3wc0oE046V6OrZSe9pmsBdvzjYGNBRUxCaYY3pIZ5lKXCjAup5ee2XCtGm
OVAPOpBUqDIqxRBmLml1rINyrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOPslODf
qqghtX54fXnJ/HlTkfnFMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURBMjAvQjczQkYzN0NCNUUzMTFFREFCNTQ0NTVBQzRGOUFFMDIvODFCQTkwNUFC
NUU4MTFFREE3MDkxMTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXYwwDQYJKoZIhvcNAQELBQADggEBAL8pZ3KFVqqb2XDg
ECfRlWZTOfrQxCKkxKd+3SWwE9JyXF1rCjRWvSS77xWFH2doFtkVCU9oDnagpFUJ
U5sXuaQjzTjC+2rq3T47Rn7iWVobp7LdqztzEjNYJ0DItAv3t812m3mhfJX15NtR
Kjc7fUN1ooP7ZGH9ELevO209BaXzlDCMASShGtnGe7gTMOo1DMz9SPI+95nnzK+A
/NAf+E6PAEb/OstkA9M832Fu8JZylAtk/+QadR2odTxC7FSBi+FfjY3EoHS02gMx
jNpci6YM2otqdqD0ueciejucxjdVUBJsv52B4IxQxMfFTvLrj17noorHKb4IjsDL
8VoSvSA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:14:51 2025 by rpki-client