Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
File:                     EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (raw, json)
Hash identifier:          60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=
Subject key identifier:   1B:87:EC:3F:88:93:3B:93:82:F4:9F:79:F0:FC:B4:DD:B4:1F:EB:39
Certificate issuer:       /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial:       0176
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
Signing time:             Sun 05 Jan 2025 02:25:54 +0000
ROA not before:           Sun 05 Jan 2025 02:25:54 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     63962
IP address blocks:        103.41.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FC6
        Validity
            Not Before: Jan  5 02:25:54 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6779edb2-d832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:79:69:de:c5:80:47:ae:00:db:c2:d2:27:
                    e3:66:62:36:96:aa:eb:82:98:1c:7e:b7:7c:35:ad:
                    0d:52:9a:5b:53:b8:f0:97:8e:5d:40:c4:f3:47:2d:
                    a5:c2:e6:a2:d3:fa:62:4e:89:bc:a7:37:38:a2:a5:
                    f7:00:82:13:ad:eb:00:f5:6c:2a:7d:90:33:bc:9d:
                    d4:74:61:3e:1f:89:bf:5c:7f:f4:c7:0a:fd:91:0a:
                    bf:9f:c7:86:ee:ce:5b:57:d5:6f:cf:f4:8b:1e:9d:
                    30:dc:fe:09:05:f4:c7:e9:d5:71:35:2a:63:b8:f8:
                    a7:9d:54:51:d6:bc:bf:a1:57:0d:07:1e:29:ba:72:
                    d8:c2:7c:1e:54:ce:82:9f:0c:20:c1:b4:1a:0e:55:
                    d9:0e:e7:62:45:cc:15:20:ce:ba:c1:8c:18:74:5c:
                    b4:88:30:cc:eb:47:2b:43:60:d5:4c:f8:c6:b2:ff:
                    4a:05:92:83:5c:c5:52:f0:55:ce:93:52:67:cf:74:
                    22:25:68:f2:ad:03:1c:59:55:84:df:d8:93:1c:1e:
                    e8:2f:78:9f:98:63:b6:10:78:d8:a4:57:c7:0f:f5:
                    31:50:fa:70:52:2a:d2:d5:71:ac:c0:97:53:d2:cd:
                    9e:e4:d0:45:43:7c:54:ca:a8:db:ac:b7:33:a3:60:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:87:EC:3F:88:93:3B:93:82:F4:9F:79:F0:FC:B4:DD:B4:1F:EB:39
            X509v3 Authority Key Identifier:
                keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/EBFFB63C31A011EE90E4FA4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:af:e4:5e:de:cc:d5:85:73:00:9e:cc:93:30:13:09:c1:
         7d:4c:d2:ba:83:d4:47:aa:c3:09:ce:ec:99:b1:de:38:f4:60:
         19:dc:1a:dc:d7:8c:d7:03:b8:b3:20:81:a4:12:bb:94:2d:9d:
         57:81:0c:ef:55:e2:e8:52:fa:12:3d:87:3c:15:40:38:ee:d5:
         77:a6:1b:99:3e:c0:97:35:1f:94:99:47:3c:f4:78:87:60:06:
         5d:4d:24:71:1d:c3:61:61:fc:27:a6:7e:eb:49:38:af:f6:93:
         9e:11:e7:29:1d:66:b1:ab:94:a1:8e:db:2a:65:68:9e:d0:e3:
         be:cd:97:9e:ec:9a:bf:f9:23:e3:02:c5:1d:91:84:60:93:09:
         03:74:8a:65:c0:0b:f5:d6:a0:42:91:dd:1a:43:60:bd:4f:b6:
         28:89:7f:b1:a2:5a:b3:1a:c3:c9:73:78:83:d5:8f:a0:74:81:
         e0:e8:20:12:a3:83:e0:b9:88:40:51:9a:9d:c5:6f:b8:0d:f8:
         1c:8c:ea:59:de:2a:68:04:ad:60:6d:b7:61:eb:7b:3e:2f:fc:
         c3:19:56:b6:12:5a:9b:70:af:50:b3:ed:27:35:9e:e2:89:71:
         3a:da:bd:e9:cd:6f:3a:ad:13:09:eb:86:ad:3c:cd:f2:2d:90:
         ed:49:69:87
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND
MjYyRTVENUQwHhcNMjUwMTA1MDIyNTU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc5ZWRiMi1kODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3l5ad7FgEeuANvC0ifjZmI2lqrrgpgcfrd8Na0NUppbU7jwl45dQMTzRy2l
wuai0/piTom8pzc4oqX3AIITresA9WwqfZAzvJ3UdGE+H4m/XH/0xwr9kQq/n8eG
7s5bV9Vvz/SLHp0w3P4JBfTH6dVxNSpjuPinnVRR1ry/oVcNBx4punLYwnweVM6C
nwwgwbQaDlXZDudiRcwVIM66wYwYdFy0iDDM60crQ2DVTPjGsv9KBZKDXMVS8FXO
k1Jnz3QiJWjyrQMcWVWE39iTHB7oL3ifmGO2EHjYpFfHD/UxUPpwUirS1XGswJdT
0s2e5NBFQ3xUyqjbrLczo2DQUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBuH7D+I
kzuTgvSfefD8tN20H+s5MB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3
NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjBGQzYvMUQ5RjNFMDhBNzYxMTFFRDk4MjQyMjUyQzRGOUFFMDIvRUJGRkI2M0Mz
MUEwMTFFRTkwRTRGQTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnKXAwDQYJKoZIhvcNAQELBQADggEBAG76r+Re3szVhXMA
nsyTMBMJwX1M0rqD1EeqwwnO7Jmx3jj0YBncGtzXjNcDuLMggaQSu5QtnVeBDO9V
4uhS+hI9hzwVQDju1XemG5k+wJc1H5SZRzz0eIdgBl1NJHEdw2Fh/CemfutJOK/2
k54R5ykdZrGrlKGO2yplaJ7Q477Nl57smr/5I+MCxR2RhGCTCQN0imXAC/XWoEKR
3RpDYL1PtiiJf7GiWrMaw8lzeIPVj6B0geDoIBKjg+C5iEBRmp3Fb7gN+ByM6lne
KmgErWBtt2Hrez4v/MMZVrYSWptwr1Cz7Sc1nuKJcTravenNbzqtEwnrhq08zfIt
kO1JaYc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:34 2025 by rpki-client