Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/6121C23230AC11F08C150767C4F9AE02.roa
File:                     6121C23230AC11F08C150767C4F9AE02.roa (raw, json)
Hash identifier:          qk9SRvFWTxqsmsPfswd/7B1ZhpozisrjOm8xQ91ish0=
Subject key identifier:   D4:5B:B5:0D:49:FB:AD:B3:85:4A:AB:8A:6E:17:A4:B5:E6:51:5D:C2
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       020C
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/6121C23230AC11F08C150767C4F9AE02.roa
Signing time:             Thu 22 May 2025 05:34:10 +0000
ROA not before:           Thu 22 May 2025 05:34:10 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     214143
IP address blocks:        103.230.10.0/24 maxlen: 24
                          103.230.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 02:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: May 22 05:34:10 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=682eb752-a43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:5c:76:02:4a:db:2e:e5:ed:f8:16:5f:a3:
                    44:31:59:35:5b:55:d0:a3:25:6d:08:a3:75:0d:6b:
                    96:72:84:61:2b:d3:e8:60:e9:0a:5f:3a:db:01:41:
                    10:d6:0c:55:28:fd:a8:16:48:7a:c6:c0:28:dd:80:
                    a1:54:9a:42:7d:8a:fd:fd:06:7b:cd:b0:b0:dc:6c:
                    ab:8e:22:64:01:5e:be:ea:73:88:4f:c3:8e:0a:5d:
                    5f:e4:f7:c6:a8:68:78:60:12:d3:ac:ac:ff:9e:f1:
                    75:c1:c4:cb:2b:20:92:a0:a4:65:b6:dd:0a:86:7c:
                    c0:26:9c:22:fd:69:f0:6d:d5:18:e3:9a:67:ce:d6:
                    fe:2c:c3:48:9e:08:c7:99:33:b2:08:fc:38:8b:28:
                    53:d4:f1:59:aa:38:e8:1a:b0:32:63:bf:6a:bd:14:
                    7b:09:42:67:69:96:2c:26:6b:31:cb:2a:18:07:4b:
                    3c:d0:33:6f:ea:37:38:a8:3e:ca:45:9a:25:32:3b:
                    b6:55:0a:3d:d2:39:4f:2c:d8:97:df:d2:c8:8c:00:
                    54:f4:30:d0:2c:62:f2:92:71:d7:f7:8c:df:39:ae:
                    cc:4d:c1:e5:f1:ba:0b:34:4d:44:fe:fd:e1:c3:8d:
                    3a:d9:44:0d:bc:c4:6a:7a:5e:3c:c2:aa:25:6e:f3:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5B:B5:0D:49:FB:AD:B3:85:4A:AB:8A:6E:17:A4:B5:E6:51:5D:C2
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/6121C23230AC11F08C150767C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:3e:6f:b5:cb:e8:1a:f5:93:0c:41:60:69:5d:41:86:c6:
         99:98:df:55:c4:96:8d:54:03:b7:a5:c6:76:67:43:1e:b1:aa:
         89:fa:3c:4a:94:bc:8a:72:99:52:17:a0:2e:b8:49:d7:54:4e:
         06:64:ce:1f:52:15:e5:f0:09:c3:46:08:9c:d9:77:08:b1:91:
         cd:a8:da:a2:12:90:6f:18:8a:df:4d:41:2e:de:48:58:c9:66:
         4a:d9:8e:85:41:30:94:04:80:94:4d:df:64:97:13:dd:48:6e:
         67:9f:98:2f:5b:f5:01:fb:09:fb:5e:9c:d2:7d:27:53:ac:ca:
         54:3e:1e:32:81:b8:74:80:e6:d8:f4:83:cc:5d:65:f4:b5:c2:
         fe:4a:d6:38:95:3b:18:a5:e0:6a:09:c8:a7:7f:bf:22:65:e0:
         5d:3d:dd:2a:1e:0d:42:62:f0:9a:2e:76:a2:b4:b2:83:01:50:
         1d:dc:97:aa:b3:f4:76:35:88:74:ad:96:d4:78:8c:fe:6b:43:
         36:6c:7d:92:c7:b6:a1:62:d7:c8:6d:86:29:ce:b3:89:9f:47:
         26:41:09:46:c3:1c:4c:e2:6a:73:fa:da:dd:1c:d5:29:71:08:
         9d:bf:dd:97:20:01:ab:3c:cc:4e:50:c2:53:5c:95:f0:ed:b7:
         d4:db:3c:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjUwNTIyMDUzNDEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJlYjc1Mi1hNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzThcdgJK2y7l7fgWX6NEMVk1W1XQoyVtCKN1DWuWcoRhK9PoYOkKXzrbAUEQ
1gxVKP2oFkh6xsAo3YChVJpCfYr9/QZ7zbCw3GyrjiJkAV6+6nOIT8OOCl1f5PfG
qGh4YBLTrKz/nvF1wcTLKyCSoKRltt0KhnzAJpwi/WnwbdUY45pnztb+LMNIngjH
mTOyCPw4iyhT1PFZqjjoGrAyY79qvRR7CUJnaZYsJmsxyyoYB0s80DNv6jc4qD7K
RZolMju2VQo90jlPLNiX39LIjABU9DDQLGLyknHX94zfOa7MTcHl8boLNE1E/v3h
w4062UQNvMRqel48wqolbvORdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNRbtQ1J
+62zhUqrim4XpLXmUV3CMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvNjEyMUMyMzIz
MEFDMTFGMDhDMTUwNzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn5gowDQYJKoZIhvcNAQELBQADggEBACsiPm+1y+ga9ZMM
QWBpXUGGxpmY31XElo1UA7elxnZnQx6xqon6PEqUvIpymVIXoC64SddUTgZkzh9S
FeXwCcNGCJzZdwixkc2o2qISkG8Yit9NQS7eSFjJZkrZjoVBMJQEgJRN32SXE91I
bmefmC9b9QH7CftenNJ9J1OsylQ+HjKBuHSA5tj0g8xdZfS1wv5K1jiVOxil4GoJ
yKd/vyJl4F093SoeDUJi8JoudqK0soMBUB3cl6qz9HY1iHStltR4jP5rQzZsfZLH
tqFi18hthinOs4mfRyZBCUbDHEzianP62t0c1SlxCJ2/3ZcgAas8zE5QwlNclfDt
t9TbPKI=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:01:54 2025 by rpki-client