Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/997B94904BD411EFA1F89471C4F9AE02.roa
File:                     997B94904BD411EFA1F89471C4F9AE02.roa (raw, json)
Hash identifier:          q0ds7FsW7eLXHWKl5ftWkhv4vOTcZ7TI9DQVIRfT71Y=
Subject key identifier:   10:6F:3D:82:41:54:2D:0C:BA:5A:5A:0F:52:F3:D9:F7:1E:78:89:91
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       05B4
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/997B94904BD411EFA1F89471C4F9AE02.roa
Signing time:             Thu 22 May 2025 23:13:57 +0000
ROA not before:           Thu 22 May 2025 23:13:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149983
IP address blocks:        103.168.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 23:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: May 22 23:13:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682fafb4-7dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:b0:bf:7b:6d:1d:24:a8:88:a0:63:3b:28:
                    6a:eb:21:e1:13:12:20:e2:ef:ff:3f:73:59:77:cf:
                    73:05:c0:d9:3c:d7:bf:66:7e:1c:d8:ff:ba:b5:03:
                    f4:6c:4c:5e:32:65:f4:16:23:3b:56:01:e4:d6:04:
                    23:47:58:bc:2b:70:3f:0b:1e:f2:fe:fd:6d:e9:e6:
                    d9:9c:83:29:c3:ee:9b:0b:ee:98:6c:a7:cd:30:8c:
                    55:8a:1e:c0:0a:ff:8c:fd:84:a5:9c:8e:55:be:bc:
                    d2:50:21:67:27:79:fc:ab:40:45:9a:05:60:73:4a:
                    a1:8b:c0:09:37:56:65:46:0c:40:25:52:52:01:70:
                    06:fa:45:62:a5:7d:6a:b9:65:aa:64:e6:79:7d:82:
                    ee:42:df:3b:95:f6:81:3b:49:c2:cc:64:70:8a:fc:
                    7e:bf:4e:0d:77:2e:9f:ab:e0:5a:3b:d4:e3:cb:05:
                    74:59:fb:00:5e:d7:c8:a1:2b:a5:98:5b:95:61:f0:
                    15:7a:69:ed:2c:26:ac:b5:81:6d:08:cc:99:9b:5d:
                    ae:72:49:c9:1b:45:27:6b:bd:0d:d7:92:72:48:2f:
                    7b:35:aa:60:c6:06:1e:af:ba:ab:01:21:d3:05:48:
                    27:50:73:f4:b7:74:72:c5:d3:fb:a8:b5:17:e3:31:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:3D:82:41:54:2D:0C:BA:5A:5A:0F:52:F3:D9:F7:1E:78:89:91
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/997B94904BD411EFA1F89471C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:e7:0b:e0:13:4f:37:e6:7a:c0:a5:06:6a:32:1f:bc:5b:46:
         ee:8f:88:09:2d:b3:95:04:1c:8f:cf:d4:39:a2:51:77:bd:6e:
         cc:78:4a:03:19:d4:d4:97:b0:15:83:e6:4f:ae:cf:a9:0f:7f:
         39:fb:0f:e5:7e:a0:91:7d:3d:b1:4f:25:46:41:03:a9:10:ff:
         8a:ce:6e:e6:44:3d:7d:c7:fc:04:ee:6d:7c:84:10:a9:33:0b:
         5a:94:ff:8a:32:17:74:45:5d:e3:12:fc:01:6b:36:f2:99:9e:
         6a:4f:21:b5:d5:37:f2:20:6f:d0:da:03:16:6a:f6:6a:3c:41:
         a6:ef:33:4d:12:b1:2c:48:3b:06:1b:af:d9:d2:c8:fe:9e:2c:
         bd:bf:e0:db:4e:95:42:af:dc:f1:e0:8b:ea:4d:bb:da:9c:4b:
         09:76:0d:83:c0:2f:b5:fb:83:c2:e4:5f:1a:89:7a:4b:bb:69:
         ff:71:c9:7b:ba:3b:08:da:9f:94:84:5d:64:da:3a:47:89:1b:
         a5:be:54:9e:2c:58:b8:d2:f2:5d:fc:36:01:73:df:f2:db:c1:
         c7:f1:bf:4d:01:b4:81:18:f1:28:42:40:ce:81:4a:bb:aa:6e:
         4d:3c:22:dd:2b:ce:ac:30:56:21:5e:70:b2:f2:c2:6f:4b:c4:
         55:fa:63:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRjkxMTAvBgNVBAUTKDc0NDhDNzMwQTEwNTREN0YxRTI5REMxMTk1MTU4NURE
MTFERTE3ODcwHhcNMjUwNTIyMjMxMzU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmYWZiNC03ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArxiwv3ttHSSoiKBjOyhq6yHhExIg4u//P3NZd89zBcDZPNe/Zn4c2P+6tQP0
bExeMmX0FiM7VgHk1gQjR1i8K3A/Cx7y/v1t6ebZnIMpw+6bC+6YbKfNMIxVih7A
Cv+M/YSlnI5VvrzSUCFnJ3n8q0BFmgVgc0qhi8AJN1ZlRgxAJVJSAXAG+kVipX1q
uWWqZOZ5fYLuQt87lfaBO0nCzGRwivx+v04Ndy6fq+BaO9TjywV0WfsAXtfIoSul
mFuVYfAVemntLCastYFtCMyZm12ucknJG0Una70N15JySC97NapgxgYer7qrASHT
BUgnUHP0t3RyxdP7qLUX4zEnCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBBvPYJB
VC0MulpaD1Lz2fceeImRMB8GA1UdIwQYMBaAFHRIxzChBU1/HincEZUVhd0R3heH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGOS80RUMyQ0Q3NENG
NEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRYOGVLZHdSbFJXRjNSSGVG
NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFakhNS0VGVFg4ZUtkd1JsUldGM1JIZUY0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwRjkvNEVDMkNENzRDRjRGMTFFQkFBQjQwODRFQzRGOUFFMDIvOTk3Qjk0OTA0
QkQ0MTFFRkExRjg5NDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnqFswDQYJKoZIhvcNAQELBQADggEBAL7nC+ATTzfmesCl
BmoyH7xbRu6PiAkts5UEHI/P1DmiUXe9bsx4SgMZ1NSXsBWD5k+uz6kPfzn7D+V+
oJF9PbFPJUZBA6kQ/4rObuZEPX3H/ATubXyEEKkzC1qU/4oyF3RFXeMS/AFrNvKZ
nmpPIbXVN/Igb9DaAxZq9mo8QabvM00SsSxIOwYbr9nSyP6eLL2/4NtOlUKv3PHg
i+pNu9qcSwl2DYPAL7X7g8LkXxqJeku7af9xyXu6Owjan5SEXWTaOkeJG6W+VJ4s
WLjS8l38NgFz3/Lbwcfxv00BtIEY8ShCQM6BSruqbk08It0rzqwwViFecLLywm9L
xFX6Yzo=
-----END CERTIFICATE-----
Generated at Mon Jun 2 05:46:21 2025 by rpki-client