Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/6F4F0F4230AA11F0AD39210DC4F9AE02.roa
File:                     6F4F0F4230AA11F0AD39210DC4F9AE02.roa (raw, json)
Hash identifier:          tRYBFCSWAI2oPFDeC9daVeSpDp6YmZ+Sk1ZTN1x1rQU=
Subject key identifier:   F0:11:48:B1:D8:95:59:5D:B9:17:CF:53:69:B5:76:10:4D:FB:1E:6E
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       0188
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/6F4F0F4230AA11F0AD39210DC4F9AE02.roa
Signing time:             Wed 14 May 2025 10:01:42 +0000
ROA not before:           Wed 14 May 2025 10:01:42 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     214143
IP address blocks:        103.120.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: May 14 10:01:42 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68246a06-21c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:71:2b:54:e8:c9:f0:8c:f0:1a:b8:3a:c7:
                    be:9e:03:d5:55:16:b3:fd:48:99:c2:c2:e2:ef:6a:
                    12:01:10:54:7c:34:0a:b2:53:4b:49:d6:f1:46:5a:
                    6b:57:9d:68:54:f8:8b:77:b9:6b:21:e9:15:b0:26:
                    b1:7d:58:fd:2f:3b:45:a0:19:26:ca:66:c0:4b:3c:
                    e8:fd:85:b5:21:9d:97:d6:22:2f:24:32:f5:10:b7:
                    26:6b:bb:96:e6:23:39:31:5d:c7:db:2e:eb:3c:d4:
                    0c:99:b6:4b:fd:03:e4:68:e7:ea:e9:f6:f6:19:1c:
                    98:f7:9a:c5:4d:bd:4e:f8:75:9e:80:46:4d:e4:97:
                    4a:09:41:a2:b9:8f:d5:d8:dc:f8:5a:f2:84:5a:3c:
                    a2:59:fd:8e:d6:a1:9a:eb:1b:2d:d1:de:b9:20:50:
                    eb:e4:3c:ca:53:82:76:68:4e:22:89:38:e6:39:ad:
                    f6:21:f9:91:d3:e6:55:94:93:2c:0c:13:40:1b:5c:
                    0a:f2:77:43:1d:44:57:8e:c2:37:1c:a3:7d:3f:e6:
                    75:11:30:2b:1e:cd:f5:1a:e6:a9:24:30:02:69:ba:
                    72:bc:db:5c:d8:da:65:c2:9e:6e:87:22:ca:e1:8c:
                    09:f2:67:d0:08:9b:a2:d9:89:64:f5:d9:b8:8a:c6:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:11:48:B1:D8:95:59:5D:B9:17:CF:53:69:B5:76:10:4D:FB:1E:6E
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/6F4F0F4230AA11F0AD39210DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:84:85:1b:e6:5a:4a:6a:8f:db:af:43:1c:36:e3:86:30:68:
         0e:05:e6:bf:de:f7:ff:8d:a3:24:05:5f:96:7c:cb:90:ed:78:
         77:93:ff:33:ce:21:20:78:c0:a5:ab:45:ae:92:7c:cc:e2:65:
         00:27:e5:35:f3:22:fa:da:98:ee:08:34:0d:a3:18:47:2d:4d:
         1b:a3:df:cb:8b:7f:db:e6:89:ac:e8:07:d3:c9:bf:fc:40:2a:
         64:90:9e:68:ee:6b:2f:af:e5:5c:89:c7:9d:76:99:19:a0:ce:
         b4:20:34:41:75:ab:e2:86:a3:2c:03:fd:71:a1:14:61:1e:5f:
         bc:61:5d:df:27:5b:09:d9:85:52:af:c1:b2:b0:1e:aa:8d:11:
         84:10:86:8a:31:15:09:89:de:c1:13:83:2a:2e:f8:fc:29:5e:
         6f:d3:08:8c:fb:d6:0c:4d:98:70:9d:c3:63:1e:b1:71:14:49:
         74:e8:61:23:d6:9b:f0:1d:22:3b:4e:79:ca:29:70:36:61:02:
         3d:19:9e:32:54:86:6c:f9:b6:12:05:52:28:35:7b:6f:5c:ce:
         46:f2:38:d0:7f:b6:09:14:e3:19:02:e7:17:78:c1:61:05:70:
         87:97:e9:ed:67:f5:d5:56:96:dc:aa:65:e8:e8:d2:73:66:97:
         0e:5e:fd:72
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5
NTY1Qzk0RDgwHhcNMjUwNTE0MTAwMTQyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI0NmEwNi0yMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeJxK1ToyfCM8Bq4Ose+ngPVVRaz/UiZwsLi72oSARBUfDQKslNLSdbxRlpr
V51oVPiLd7lrIekVsCaxfVj9LztFoBkmymbASzzo/YW1IZ2X1iIvJDL1ELcma7uW
5iM5MV3H2y7rPNQMmbZL/QPkaOfq6fb2GRyY95rFTb1O+HWegEZN5JdKCUGiuY/V
2Nz4WvKEWjyiWf2O1qGa6xst0d65IFDr5DzKU4J2aE4iiTjmOa32IfmR0+ZVlJMs
DBNAG1wK8ndDHURXjsI3HKN9P+Z1ETArHs31GuapJDACabpyvNtc2Nplwp5uhyLK
4YwJ8mfQCJui2Ylk9dm4isaMtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPARSLHY
lVlduRfPU2m1dhBN+x5uMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB
NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUFFNEQvNTdDMzdFMzgwQTU3MTFFRThDNjM1QTQ2QzRGOUFFMDIvNkY0RjBGNDIz
MEFBMTFGMEFEMzkyMTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABneA8wDQYJKoZIhvcNAQELBQADggEBAJiEhRvmWkpqj9uv
Qxw244YwaA4F5r/e9/+NoyQFX5Z8y5DteHeT/zPOISB4wKWrRa6SfMziZQAn5TXz
IvramO4INA2jGEctTRuj38uLf9vmiazoB9PJv/xAKmSQnmjuay+v5VyJx512mRmg
zrQgNEF1q+KGoywD/XGhFGEeX7xhXd8nWwnZhVKvwbKwHqqNEYQQhooxFQmJ3sET
gyou+PwpXm/TCIz71gxNmHCdw2MesXEUSXToYSPWm/AdIjtOecopcDZhAj0ZnjJU
hmz5thIFUig1e29czkbyONB/tgkU4xkC5xd4wWEFcIeX6e1n9dVWltyqZejo0nNm
lw5e/XI=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:55 2025 by rpki-client