Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6313E67C8D5711EFB5214A3AC4F9AE02.roa
File:                     6313E67C8D5711EFB5214A3AC4F9AE02.roa (raw, json)
Hash identifier:          H9y99bkQAenZ+5dQW/QgFhQvNtXIL5GTmQ8MEBG2Zlw=
Subject key identifier:   96:5E:7E:70:22:AA:B0:6B:64:5B:A3:B1:F6:76:CA:E9:4D:EB:36:78
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       DE
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6313E67C8D5711EFB5214A3AC4F9AE02.roa
Signing time:             Sat 31 May 2025 05:17:04 +0000
ROA not before:           Sat 31 May 2025 05:17:04 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151151
IP address blocks:        103.15.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: May 31 05:17:04 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a90d0-46dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:7b:fa:fe:5a:bf:1b:90:65:65:54:a1:3a:
                    31:c2:f6:31:b3:24:c3:8a:b1:5e:6f:58:c7:58:7d:
                    5f:3a:5e:1c:94:05:9a:37:fb:41:f7:89:9a:38:b5:
                    33:41:d6:06:db:43:4c:a1:8b:e3:f5:ea:60:5d:34:
                    bb:fe:c3:1b:43:7f:65:20:79:71:9c:3f:3e:8d:29:
                    43:8e:88:08:f3:14:75:61:36:1b:e6:3a:1f:23:59:
                    7f:80:b4:f4:8b:6f:8f:e4:4f:34:69:67:e8:a8:7d:
                    54:15:af:20:69:40:a1:31:17:54:fb:fb:8f:f7:3b:
                    9f:b4:36:6f:da:eb:8a:f2:a2:50:9b:c5:06:d3:7a:
                    7e:be:67:f8:12:81:fb:f8:34:e6:f3:47:2f:42:9e:
                    42:83:49:e6:56:88:52:97:6e:c7:47:b2:e2:1e:1f:
                    d1:9d:dd:4a:d1:dd:d3:76:af:a8:32:71:9d:a6:b4:
                    22:48:9d:a6:14:a1:2e:ab:bf:bb:cd:ad:f5:55:85:
                    07:29:14:3a:a7:1f:0b:2b:83:f8:d4:cb:33:23:6c:
                    fc:05:bc:ee:47:8e:e4:85:60:5f:e1:72:cc:27:ed:
                    c6:2e:6c:78:92:19:b9:86:92:0c:13:91:b9:4e:79:
                    7f:be:ee:7a:6c:7c:b7:0d:bd:fd:6b:cf:25:5f:aa:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5E:7E:70:22:AA:B0:6B:64:5B:A3:B1:F6:76:CA:E9:4D:EB:36:78
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6313E67C8D5711EFB5214A3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:56:0d:c3:62:1b:11:e9:66:3e:e6:05:19:c1:34:7e:d4:e9:
         2d:fe:f1:48:29:68:eb:1f:a8:b9:80:f6:88:7c:89:29:19:25:
         e8:8a:7a:b6:b7:62:19:66:85:8a:82:91:59:a9:ed:3c:37:77:
         68:92:e4:ed:aa:47:ab:b3:15:7e:39:5e:7b:2f:eb:d3:2e:02:
         fe:f2:d7:69:9a:05:ab:d4:00:8b:f5:e1:74:e0:9d:9c:32:de:
         d0:91:9a:59:c8:86:01:f5:78:cd:a2:fb:89:dc:f5:72:71:01:
         18:68:ed:ab:33:0b:3c:74:60:e3:92:7d:48:72:05:1d:ce:18:
         73:71:e3:85:b7:83:fc:00:56:c6:e3:b6:52:b8:74:8b:a6:b7:
         2f:dc:82:6f:88:a1:60:3c:37:69:ab:15:53:fb:38:67:a8:c5:
         6d:84:0a:f4:df:59:18:81:27:72:c7:00:30:3a:a4:b6:ba:76:
         b3:b0:f2:30:26:92:a6:f9:66:f7:c9:1f:53:f6:01:9c:f1:d6:
         45:49:b2:3d:d3:ee:37:96:7d:32:96:2a:e4:40:62:10:b3:c8:
         f0:95:98:0a:d3:5f:ae:16:07:22:f3:b3:82:30:ef:3f:d3:12:
         5a:23:5d:7a:11:64:ae:6d:ac:73:b2:f6:84:07:3c:f9:95:a0:
         b3:05:8a:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4
MDdBNUQzNjAwHhcNMjUwNTMxMDUxNzA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNhOTBkMC00NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAypZ7+v5avxuQZWVUoToxwvYxsyTDirFeb1jHWH1fOl4clAWaN/tB94maOLUz
QdYG20NMoYvj9epgXTS7/sMbQ39lIHlxnD8+jSlDjogI8xR1YTYb5jofI1l/gLT0
i2+P5E80aWfoqH1UFa8gaUChMRdU+/uP9zuftDZv2uuK8qJQm8UG03p+vmf4EoH7
+DTm80cvQp5Cg0nmVohSl27HR7LiHh/Rnd1K0d3Tdq+oMnGdprQiSJ2mFKEuq7+7
za31VYUHKRQ6px8LK4P41MszI2z8BbzuR47khWBf4XLMJ+3GLmx4khm5hpIME5G5
Tnl/vu56bHy3Db39a88lX6oxcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJZefnAi
qrBrZFujsfZ2yulN6zZ4MB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC
QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTg4RUUvMzIwOTczMUFGQkFGMTFFRUE2QkMzOTUyQzRGOUFFMDIvNjMxM0U2N0M4
RDU3MTFFRkI1MjE0QTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnD5wwDQYJKoZIhvcNAQELBQADggEBAEhWDcNiGxHpZj7m
BRnBNH7U6S3+8UgpaOsfqLmA9oh8iSkZJeiKera3YhlmhYqCkVmp7Tw3d2iS5O2q
R6uzFX45Xnsv69MuAv7y12maBavUAIv14XTgnZwy3tCRmlnIhgH1eM2i+4nc9XJx
ARho7aszCzx0YOOSfUhyBR3OGHNx44W3g/wAVsbjtlK4dIumty/cgm+IoWA8N2mr
FVP7OGeoxW2ECvTfWRiBJ3LHADA6pLa6drOw8jAmkqb5ZvfJH1P2AZzx1kVJsj3T
7jeWfTKWKuRAYhCzyPCVmArTX64WByLzs4Iw7z/TElojXXoRZK5trHOy9oQHPPmV
oLMFiuE=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:10:53 2025 by rpki-client