Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa
File:                     A98932365ED311EF9DE3E178C4F9AE02.roa (raw, json)
Hash identifier:          yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=
Subject key identifier:   0C:B4:E4:AB:7D:B1:68:5F:30:53:C5:99:72:1B:C9:C2:EE:C6:70:55
Certificate issuer:       /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial:       69
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa
Signing time:             Wed 05 Feb 2025 05:48:22 +0000
ROA not before:           Wed 05 Feb 2025 05:48:22 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     59267
IP address blocks:        103.39.138.0/24 maxlen: 24
                          103.58.232.0/24 maxlen: 24
                          103.66.39.0/24 maxlen: 24
                          103.255.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 06:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F372C
        Validity
            Not Before: Feb  5 05:48:22 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a2fba5-5b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:bd:14:d9:04:19:4f:60:92:fa:ac:fe:e3:
                    80:64:f2:b3:d4:b8:ef:f7:88:7b:9f:0a:f7:a9:ba:
                    fe:d8:41:b1:83:4a:0b:b6:52:47:05:1c:9c:2f:36:
                    f3:69:56:ff:2a:4d:fc:de:84:0f:ef:a4:b1:ae:d8:
                    79:6d:e4:8c:3b:52:b5:18:85:ea:07:64:44:13:61:
                    2f:9f:7e:41:6e:71:a8:8d:cb:25:1f:e9:6c:79:6a:
                    b5:06:41:98:ce:f3:f6:a8:4f:c7:2e:21:57:92:08:
                    b4:1a:e0:46:32:d7:5e:04:b2:69:fa:25:33:1d:b8:
                    5d:20:5e:4c:1b:b5:28:4a:21:b3:06:7a:35:ca:5d:
                    9b:70:d7:fd:9e:5a:96:e9:45:d9:4f:6d:33:e7:a4:
                    61:19:6a:83:e5:95:d5:33:e4:13:12:30:69:28:bc:
                    7a:8e:8f:4e:83:d9:0f:e8:65:96:c7:ec:a2:3e:6a:
                    77:e4:3c:a1:53:94:c4:2d:c7:53:99:8f:1b:cc:5f:
                    8e:98:95:a0:51:cb:f9:9e:db:80:0c:87:df:ed:75:
                    f2:6c:b6:7f:0d:ed:1c:bf:ce:6d:e9:ee:de:26:01:
                    43:dc:ef:ea:2d:04:26:a8:61:c5:b5:43:6d:52:a0:
                    9b:84:09:36:2a:6e:b6:9a:c8:78:7e:dd:19:0e:7e:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:E4:AB:7D:B1:68:5F:30:53:C5:99:72:1B:C9:C2:EE:C6:70:55
            X509v3 Authority Key Identifier:
                keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.138.0/24
                  103.58.232.0/24
                  103.66.39.0/24
                  103.255.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:64:fd:20:da:ef:08:34:e4:26:63:fd:37:e2:55:5f:f3:fc:
         a7:cb:35:c2:84:8e:76:6c:13:91:60:7a:5a:6d:94:7f:ca:8b:
         83:b6:1d:08:e0:32:78:90:a4:c5:fb:84:2d:73:e5:95:27:cc:
         06:2b:cb:a5:21:d1:b3:cc:09:fa:d6:91:51:29:e4:bb:39:16:
         35:06:62:97:1a:04:ce:20:eb:69:ec:ba:06:66:1d:85:17:1b:
         9d:3b:d7:d7:39:47:f6:05:c8:82:f5:aa:0a:73:86:da:8f:c7:
         8d:ef:4b:8e:81:88:15:00:6e:08:b8:2c:92:8b:82:54:f0:9d:
         3f:7a:cd:2a:3c:4f:cc:36:9f:67:4a:2c:06:f5:6a:f1:54:59:
         66:6f:2e:c0:ff:4f:73:44:15:d9:7b:c7:67:4a:d2:fb:8b:53:
         1b:da:b8:b5:38:9a:58:43:58:bf:df:ab:2a:f8:df:51:4c:01:
         b4:88:4c:00:d7:f2:11:37:f1:21:79:ef:86:ff:48:1f:6d:c3:
         94:58:96:92:9e:17:1a:70:26:12:7c:f9:20:61:b6:89:d8:be:
         27:16:9d:4e:e9:07:68:9d:8b:b2:bd:61:94:fd:18:aa:8a:80:
         db:5a:2c:89:09:d2:78:73:d6:26:2d:ce:45:c1:ba:0b:25:f3:
         c6:c5:ef:37
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MzcyQzExMC8GA1UEBRMoNEM2MkYxRTEwQjg4M0Y1RDU3ODRENjM1NzQwRkQyMzAz
NENFQkZFMjAeFw0yNTAyMDUwNTQ4MjJaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3YTJmYmE1LTViNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiur0U2QQZT2CS+qz+44Bk8rPUuO/3iHufCvepuv7YQbGDSgu2UkcFHJwvNvNp
Vv8qTfzehA/vpLGu2Hlt5Iw7UrUYheoHZEQTYS+ffkFucaiNyyUf6Wx5arUGQZjO
8/aoT8cuIVeSCLQa4EYy114Esmn6JTMduF0gXkwbtShKIbMGejXKXZtw1/2eWpbp
RdlPbTPnpGEZaoPlldUz5BMSMGkovHqOj06D2Q/oZZbH7KI+anfkPKFTlMQtx1OZ
jxvMX46YlaBRy/me24AMh9/tdfJstn8N7Ry/zm3p7t4mAUPc7+otBCaoYcW1Q21S
oJuECTYqbraayHh+3RkOfsRxAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUDLTkq32x
aF8wU8WZchvJwu7GcFUwHwYDVR0jBBgwFoAUTGLx4QuIP11XhNY1dA/SMDTOv+Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNzJDLzY3OTZEOEUyNUVD
RTExRUZBOUE4QjAzRUM0RjlBRTAyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3Yt
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVEdMeDRRdUlQMTFYaE5ZMWRBX1NNRFRPdi1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9BOTg5MzIzNjVF
RDMxMUVGOURFM0UxNzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi
MCAwHgQCAAEwGAMEAGcnigMEAGc66AMEAGdCJwMEAGf/+zANBgkqhkiG9w0BAQsF
AAOCAQEAJ2T9INrvCDTkJmP9N+JVX/P8p8s1woSOdmwTkWB6Wm2Uf8qLg7YdCOAy
eJCkxfuELXPllSfMBivLpSHRs8wJ+taRUSnkuzkWNQZilxoEziDraey6BmYdhRcb
nTvX1zlH9gXIgvWqCnOG2o/Hje9LjoGIFQBuCLgskouCVPCdP3rNKjxPzDafZ0os
BvVq8VRZZm8uwP9Pc0QV2XvHZ0rS+4tTG9q4tTiaWENYv9+rKvjfUUwBtIhMANfy
ETfxIXnvhv9IH23DlFiWkp4XGnAmEnz5IGG2idi+JxadTukHaJ2Lsr1hlP0YqoqA
21osiQnSeHPWJi3ORcG6CyXzxsXvNw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:34:15 2025 by rpki-client