Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/BA767AE8584A11EA91887312C4F9AE02.roa
File:                     BA767AE8584A11EA91887312C4F9AE02.roa (raw, json)
Hash identifier:          QzbZM8VI+qrpVgcRdiCcn83mrJ9UmLN8pezGTWNqCvc=
Subject key identifier:   E7:4B:83:40:65:2C:1F:2C:A8:51:4A:20:57:E3:C5:F4:B9:7A:C6:DA
Certificate issuer:       /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Certificate serial:       0A9F
Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/BA767AE8584A11EA91887312C4F9AE02.roa
Signing time:             Mon 26 May 2025 19:53:31 +0000
ROA not before:           Mon 26 May 2025 19:53:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138961
IP address blocks:        103.137.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 19:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2719 (0xa9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119635, serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
        Validity
            Not Before: May 26 19:53:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834c6bb-01f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:58:9f:ce:49:09:de:79:ba:64:28:fa:fd:
                    e8:1c:d8:4b:8f:d2:36:e5:13:46:5e:2d:ad:e9:ac:
                    34:ca:cc:4a:5e:9f:2c:e2:c3:b3:b2:eb:96:f7:06:
                    0f:4f:34:92:20:d1:29:68:65:8d:a8:f6:ee:78:ef:
                    17:24:52:5b:19:b2:0f:27:d1:9b:05:5e:d0:bd:5c:
                    1a:23:89:12:14:99:6c:89:9c:3f:ea:41:5a:37:91:
                    fd:3f:30:a0:a0:d9:5c:bf:50:6a:31:60:2e:4a:a1:
                    17:a7:72:ff:9e:87:a4:64:68:35:10:3f:cf:ae:06:
                    0e:2a:8e:87:f4:a0:2e:2e:7e:c4:dc:18:e2:5e:14:
                    76:8a:c8:c2:72:92:2a:44:ae:33:b0:c5:40:7b:61:
                    6f:dc:9d:18:a8:b4:07:2f:86:26:3c:83:cd:4b:10:
                    cd:7a:84:31:de:77:d9:90:b1:07:cb:4f:18:b6:c5:
                    ca:ba:88:48:9b:5c:64:98:2f:cb:bb:21:ff:a3:0c:
                    66:47:3e:32:1e:39:8e:23:1b:2a:21:47:49:a0:d0:
                    98:bf:e4:52:fa:b2:4f:23:56:a2:ef:87:9a:f1:75:
                    fa:e4:06:0a:2b:59:54:0a:d2:bf:c9:79:10:1c:2a:
                    4a:9a:9e:5a:16:23:06:17:60:63:87:c8:73:ee:03:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:83:40:65:2C:1F:2C:A8:51:4A:20:57:E3:C5:F4:B9:7A:C6:DA
            X509v3 Authority Key Identifier:
                keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/BA767AE8584A11EA91887312C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:15:eb:29:c6:8c:2d:04:66:43:25:76:fe:9f:e8:4d:5f:
         14:5d:b2:9d:fa:30:df:a2:f2:a7:72:5e:7e:bf:96:37:17:4c:
         ec:e6:74:3d:d3:b5:2e:c6:1c:f3:97:be:8a:9b:ff:c4:6e:be:
         ad:32:37:96:ca:59:99:fd:8f:76:0f:fd:31:97:8b:5e:3d:9f:
         6b:e4:d9:02:a3:f6:05:d0:62:1d:a5:7e:f6:79:4f:39:9c:1f:
         5d:9b:e6:bb:4d:52:eb:f2:12:7e:42:d6:86:c7:24:56:73:69:
         4f:67:5f:dc:cb:8d:b6:69:89:4e:61:88:bf:71:24:34:20:8f:
         bc:cc:23:5a:ff:a4:13:83:99:73:bf:a0:21:6d:2c:20:fa:6e:
         80:ca:60:d0:73:49:1d:b5:c5:d7:cc:0f:f3:65:ee:9d:e6:37:
         47:f1:0b:58:de:80:be:7a:d7:bf:f8:2e:68:9c:1d:40:16:e8:
         38:57:83:31:72:6c:e8:5a:6a:48:57:e0:3f:ee:15:f1:ce:1b:
         11:9e:f8:fd:d8:4f:1a:17:3b:19:8b:c8:50:59:ba:5f:f5:5a:
         5c:88:0f:1b:5a:55:50:bb:d7:cd:06:ae:e8:75:de:87:71:06:
         46:4b:3d:9e:00:c4:4b:aa:87:2f:60:67:ff:99:ac:c8:6c:bd:
         78:7d:67:3d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk2MzUxMTAvBgNVBAUTKEVCRUU4MUZDNEJDOUQ2NzNEREY3NDg1NEE2NTVFRDVG
QUNFNUQxODQwHhcNMjUwNTI2MTk1MzMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM0YzZiYi0wMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0P9Yn85JCd55umQo+v3oHNhLj9I25RNGXi2t6aw0ysxKXp8s4sOzsuuW9wYP
TzSSINEpaGWNqPbueO8XJFJbGbIPJ9GbBV7QvVwaI4kSFJlsiZw/6kFaN5H9PzCg
oNlcv1BqMWAuSqEXp3L/noekZGg1ED/PrgYOKo6H9KAuLn7E3BjiXhR2isjCcpIq
RK4zsMVAe2Fv3J0YqLQHL4YmPIPNSxDNeoQx3nfZkLEHy08YtsXKuohIm1xkmC/L
uyH/owxmRz4yHjmOIxsqIUdJoNCYv+RS+rJPI1ai74ea8XX65AYKK1lUCtK/yXkQ
HCpKmp5aFiMGF2Bjh8hz7gOVywIDAQABo4IClTCCApEwHQYDVR0OBBYEFOdLg0Bl
LB8sqFFKIFfjxfS5esbaMB8GA1UdIwQYMBaAFOvugfxLydZz3fdIVKZV7V+s5dGE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYzNS9BRjBGOEQ4QTU4
NDkxMUVBQkY2QTg0MTJDNEY5QUUwMi82LTZCX0V2SjFuUGQ5MGhVcGxYdFg2emww
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYtNkJfRXZKMW5QZDkwaFVwbFh0WDZ6bDBZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk2MzUvQUYwRjhEOEE1ODQ5MTFFQUJGNkE4NDEyQzRGOUFFMDIvQkE3NjdBRTg1
ODRBMTFFQTkxODg3MzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnibIwDQYJKoZIhvcNAQELBQADggEBAEnOFespxowtBGZD
JXb+n+hNXxRdsp36MN+i8qdyXn6/ljcXTOzmdD3TtS7GHPOXvoqb/8Ruvq0yN5bK
WZn9j3YP/TGXi149n2vk2QKj9gXQYh2lfvZ5TzmcH12b5rtNUuvyEn5C1obHJFZz
aU9nX9zLjbZpiU5hiL9xJDQgj7zMI1r/pBODmXO/oCFtLCD6boDKYNBzSR21xdfM
D/Nl7p3mN0fxC1jegL5617/4LmicHUAW6DhXgzFybOhaakhX4D/uFfHOGxGe+P3Y
TxoXOxmLyFBZul/1WlyIDxtaVVC7180Gruh13odxBkZLPZ4AxEuqhy9gZ/+ZrMhs
vXh9Zz0=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:11:08 2025 by rpki-client