Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/EA22589E373C11F0909EF25DC4F9AE02.roa
File:                     EA22589E373C11F0909EF25DC4F9AE02.roa (raw, json)
Hash identifier:          pK7K0oDGB09OEHam5uLFYf312YyVDqFKY5nBRiwk3eo=
Subject key identifier:   86:A4:66:62:5B:25:D5:A8:D7:2C:DA:C2:C5:E8:23:94:0F:86:7D:D6
Certificate issuer:       /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial:       0186
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/EA22589E373C11F0909EF25DC4F9AE02.roa
Signing time:             Thu 22 May 2025 18:45:22 +0000
ROA not before:           Thu 22 May 2025 18:45:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139303
IP address blocks:        103.114.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
                          rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 03:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
        Validity
            Not Before: May 22 18:45:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682f70c1-dc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:b6:bd:7d:d7:8b:33:e4:e1:43:1b:21:7b:
                    a2:9e:57:d0:8e:1d:91:4d:78:d7:a6:7d:06:f3:94:
                    31:df:bb:27:e8:66:65:d3:b7:7a:95:8b:68:64:21:
                    0f:7d:9c:7b:32:8b:90:c1:2f:bd:24:e8:c8:f1:a0:
                    cd:1f:04:bb:c0:e7:e9:60:dc:0d:5f:f5:51:43:f0:
                    4d:00:ed:a9:d3:45:e8:3a:fb:44:34:04:c2:b5:86:
                    78:46:d0:25:c0:8f:94:aa:4e:bf:9c:db:ed:ed:f8:
                    6e:7c:40:b4:24:43:d1:cb:c8:05:e8:5f:49:b4:6f:
                    61:43:15:4c:d0:0a:9b:26:78:bd:45:dd:30:61:c8:
                    f4:0d:43:41:c6:8f:2b:ad:26:be:99:59:f7:25:4c:
                    d5:6c:02:14:a9:31:be:6c:85:f1:ba:d9:52:57:ed:
                    f6:44:50:0c:ac:02:4e:92:9d:a4:f7:ff:b1:10:7f:
                    e8:0a:94:ff:8d:47:26:50:82:eb:df:97:36:65:b1:
                    06:3e:89:de:13:36:4b:b2:ce:3e:1b:59:59:1b:44:
                    8c:53:a0:5f:df:85:6f:50:7f:3c:3f:c5:de:77:3e:
                    31:72:22:06:c7:7f:53:32:9c:6f:7b:73:d8:5a:e2:
                    50:8b:14:89:12:61:61:05:36:12:40:1d:fc:3d:49:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A4:66:62:5B:25:D5:A8:D7:2C:DA:C2:C5:E8:23:94:0F:86:7D:D6
            X509v3 Authority Key Identifier:
                keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/EA22589E373C11F0909EF25DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:04:9b:ad:44:c8:5d:ed:ce:12:73:4e:76:3d:32:2e:70:
         9d:38:02:00:45:d8:51:8f:48:a8:46:ce:22:ae:9b:0b:96:2d:
         7a:a8:c6:7e:0a:67:10:f9:c9:f6:35:cd:cd:e2:4b:ee:87:4e:
         20:7a:c2:b7:b2:ed:af:03:78:d8:1c:29:ac:c0:d8:1a:ce:66:
         5b:10:90:79:bf:17:11:1f:ec:25:5b:8a:ac:5c:17:a6:cc:4c:
         60:9e:ff:3a:e6:23:b9:e2:ae:f2:72:f1:ba:49:e4:82:6b:03:
         ae:1c:10:39:89:9a:1e:12:61:11:3d:0b:a2:05:53:28:70:c5:
         6b:2e:eb:e5:86:7b:40:65:37:b2:85:15:09:51:95:43:54:5d:
         74:81:63:88:94:01:67:c5:c1:41:ba:67:74:ae:2d:85:f4:fa:
         7d:69:70:d8:3e:29:a2:5a:b4:46:8e:07:67:25:51:5f:70:c5:
         94:9e:86:cf:b0:85:8c:d8:87:38:92:73:be:45:b0:66:d4:31:
         00:74:38:1a:bb:05:75:53:8f:fd:d5:0a:d3:c4:db:58:87:4e:
         c5:d5:d5:b1:88:da:3e:11:ca:4f:33:28:b3:94:0c:8e:26:9d:
         ad:de:1e:77:fa:15:b1:41:6c:59:83:ee:ff:80:28:c9:9c:98:
         60:e7:9a:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4
NDU0NzczNUMwHhcNMjUwNTIyMTg0NTIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmNzBjMS1kYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFa2vX3XizPk4UMbIXuinlfQjh2RTXjXpn0G85Qx37sn6GZl07d6lYtoZCEP
fZx7MouQwS+9JOjI8aDNHwS7wOfpYNwNX/VRQ/BNAO2p00XoOvtENATCtYZ4RtAl
wI+Uqk6/nNvt7fhufEC0JEPRy8gF6F9JtG9hQxVM0AqbJni9Rd0wYcj0DUNBxo8r
rSa+mVn3JUzVbAIUqTG+bIXxutlSV+32RFAMrAJOkp2k9/+xEH/oCpT/jUcmUILr
35c2ZbEGPoneEzZLss4+G1lZG0SMU6Bf34VvUH88P8Xedz4xciIGx39TMpxve3PY
WuJQixSJEmFhBTYSQB38PUnFqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIakZmJb
JdWo1yzawsXoI5QPhn3WMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5
NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTFBNzkvRDRDQTE1QzBGOTQ3MTFFRDg4QzE4NzQ2QzRGOUFFMDIvRUEyMjU4OUUz
NzNDMTFGMDkwOUVGMjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncv8wDQYJKoZIhvcNAQELBQADggEBAIqTBJutRMhd7c4S
c052PTIucJ04AgBF2FGPSKhGziKumwuWLXqoxn4KZxD5yfY1zc3iS+6HTiB6wrey
7a8DeNgcKazA2BrOZlsQkHm/FxEf7CVbiqxcF6bMTGCe/zrmI7nirvJy8bpJ5IJr
A64cEDmJmh4SYRE9C6IFUyhwxWsu6+WGe0BlN7KFFQlRlUNUXXSBY4iUAWfFwUG6
Z3SuLYX0+n1pcNg+KaJatEaOB2clUV9wxZSehs+whYzYhziSc75FsGbUMQB0OBq7
BXVTj/3VCtPE21iHTsXV1bGI2j4Ryk8zKLOUDI4mna3eHnf6FbFBbFmD7v+AKMmc
mGDnmmk=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:19 2025 by rpki-client