Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/89B3D06E0F9111EBA9B90727C4F9AE02.roa
File:                     89B3D06E0F9111EBA9B90727C4F9AE02.roa (raw, json)
Hash identifier:          nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=
Subject key identifier:   4D:8D:66:4B:5B:BA:4E:ED:C7:77:EF:5D:93:C3:4A:CC:C6:EB:73:08
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       0759
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/89B3D06E0F9111EBA9B90727C4F9AE02.roa
Signing time:             Wed 08 Jan 2025 21:20:14 +0000
ROA not before:           Wed 08 Jan 2025 21:20:14 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.204.4.0/24 maxlen: 24
                          103.204.5.0/24 maxlen: 24
                          103.204.6.0/24 maxlen: 24
                          103.204.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED
        Validity
            Not Before: Jan  8 21:20:14 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=677eec0e-fe5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:ae:87:11:1f:06:98:d8:e5:5a:c8:60:4e:
                    0b:e7:95:db:cc:9a:fe:15:8d:4c:fb:f7:7e:e3:20:
                    95:94:7e:89:70:27:9e:88:9a:5a:22:e1:65:8e:e5:
                    ca:31:83:35:24:6e:49:19:9a:ad:d6:54:98:9f:95:
                    95:d8:e5:47:ca:c2:e3:12:df:19:4c:d2:44:33:6c:
                    31:a8:92:40:91:27:c5:53:89:db:1f:35:6e:59:9c:
                    ba:fb:dc:0a:11:6d:98:59:aa:39:76:9a:fd:a6:be:
                    c8:f8:04:2b:37:44:b0:4e:0d:88:06:8c:92:a4:a6:
                    6c:8d:e8:a4:78:9c:e7:61:2a:d1:84:68:a1:69:7e:
                    c4:2b:a2:ba:16:08:d4:ab:64:e0:c9:6d:fe:6a:81:
                    46:a7:1e:89:b7:b6:e7:e2:c3:69:82:09:0c:5b:cb:
                    86:20:63:6d:d5:de:63:2a:d8:d9:3c:bc:50:2c:2c:
                    1f:5e:a5:89:59:83:9e:37:16:7d:98:d4:ee:54:6a:
                    5b:96:d7:75:65:f3:34:13:a8:6d:78:04:18:8a:25:
                    0f:8a:58:20:de:58:d5:a8:ca:a0:36:3c:68:d5:6c:
                    a8:bd:4c:3e:82:3f:ba:7f:4c:b0:1a:cd:8d:0e:17:
                    ec:9a:ec:87:f6:8e:06:1d:44:a2:9b:64:b1:73:c2:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8D:66:4B:5B:BA:4E:ED:C7:77:EF:5D:93:C3:4A:CC:C6:EB:73:08
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/89B3D06E0F9111EBA9B90727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:1d:c5:54:5e:b2:39:47:aa:71:ef:18:90:34:3c:0c:64:
         99:70:da:90:82:d7:c6:40:c9:58:a9:b1:6a:ca:52:91:e5:3f:
         bb:db:9e:5e:ec:b4:e0:3f:55:c4:8b:48:7e:3b:57:cc:33:03:
         2b:ce:d8:e7:5b:00:b9:f2:33:39:d4:54:d3:ac:f5:03:0a:d8:
         45:58:b1:36:0c:d8:21:8f:a4:c7:f7:03:89:e2:c6:e8:87:d7:
         f4:f2:f5:b2:22:68:ae:93:fa:f1:b9:5e:1a:a1:a1:28:ea:d9:
         02:51:fc:6e:08:40:a7:97:f3:ff:66:ed:db:cb:72:5e:e6:61:
         8c:e4:e3:b8:61:95:de:83:5a:60:e8:4e:93:d7:ec:5a:61:68:
         75:b6:d2:a4:e0:ba:98:8e:46:be:b0:88:44:a9:16:0c:dd:3d:
         b8:3e:a4:69:47:1c:1c:d8:ef:d5:80:c9:2f:c4:4a:94:77:26:
         3b:03:cc:70:e2:cb:22:0e:89:bd:5d:22:32:84:70:54:f6:d3:
         11:15:76:d4:62:c6:cf:e9:b7:31:41:15:f2:b0:9b:5c:4d:96:
         06:35:c3:ca:a1:36:af:57:9f:42:12:6f:d5:89:29:46:ff:e5:
         dd:e1:b4:d2:38:eb:7b:4e:ba:35:ea:ab:7e:6f:cd:de:8d:a9:
         fd:4a:ea:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD
MTEzQjc5MkYwHhcNMjUwMTA4MjEyMDE0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdlZWMwZS1mZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyfuuhxEfBpjY5VrIYE4L55XbzJr+FY1M+/d+4yCVlH6JcCeeiJpaIuFljuXK
MYM1JG5JGZqt1lSYn5WV2OVHysLjEt8ZTNJEM2wxqJJAkSfFU4nbHzVuWZy6+9wK
EW2YWao5dpr9pr7I+AQrN0SwTg2IBoySpKZsjeikeJznYSrRhGihaX7EK6K6FgjU
q2TgyW3+aoFGpx6Jt7bn4sNpggkMW8uGIGNt1d5jKtjZPLxQLCwfXqWJWYOeNxZ9
mNTuVGpbltd1ZfM0E6hteAQYiiUPilgg3ljVqMqgNjxo1WyovUw+gj+6f0ywGs2N
DhfsmuyH9o4GHUSim2Sxc8LGawIDAQABo4IClTCCApEwHQYDVR0OBBYEFE2NZktb
uk7tx3fvXZPDSszG63MIMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5
MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ5RUQvQjc3MTRCOTYwOTE4MTFFQjk1RkEyNzM3QzRGOUFFMDIvODlCM0QwNkUw
RjkxMTFFQkE5QjkwNzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnzAQwDQYJKoZIhvcNAQELBQADggEBABSfHcVUXrI5R6px
7xiQNDwMZJlw2pCC18ZAyVipsWrKUpHlP7vbnl7stOA/VcSLSH47V8wzAyvO2Odb
ALnyMznUVNOs9QMK2EVYsTYM2CGPpMf3A4nixuiH1/Ty9bIiaK6T+vG5XhqhoSjq
2QJR/G4IQKeX8/9m7dvLcl7mYYzk47hhld6DWmDoTpPX7FphaHW20qTgupiORr6w
iESpFgzdPbg+pGlHHBzY79WAyS/ESpR3JjsDzHDiyyIOib1dIjKEcFT20xEVdtRi
xs/ptzFBFfKwm1xNlgY1w8qhNq9Xn0ISb9WJKUb/5d3htNI463tOujXqq35vzd6N
qf1K6m0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:33 2025 by rpki-client