Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa
File:                     C66770F24B9111EA9A72503CC4F9AE02.roa (raw, json)
Hash identifier:          8QV3Z7HQrXKgQcgsCkmTuSXwKLorUwTjpR6lcWwX/xQ=
Subject key identifier:   29:E0:E1:D2:28:10:6F:10:85:43:6C:19:68:74:28:F5:9C:53:78:C9
Certificate issuer:       /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial:       0ADD
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa
Signing time:             Thu 22 May 2025 20:04:39 +0000
ROA not before:           Thu 22 May 2025 20:04:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     64095
IP address blocks:        103.60.99.0/24 maxlen: 24
                          163.47.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
                          rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781 (0xadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
        Validity
            Not Before: May 22 20:04:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f8357-b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:5e:c7:47:c1:29:f0:9c:6e:dd:42:9b:f4:
                    d5:2d:65:5c:e1:41:99:ad:06:5c:e3:a4:89:38:c0:
                    b7:8b:f7:a7:d7:85:ce:fe:42:3c:8e:e1:b9:25:5c:
                    d3:ff:15:fd:ba:d5:09:d5:3c:d9:70:00:90:14:9d:
                    a4:f1:f9:c4:f9:37:3b:9c:2a:96:1d:cc:d3:6d:35:
                    88:e7:b4:cc:93:0c:d9:78:26:df:6d:f2:33:e5:f5:
                    1b:5b:6a:2b:ca:e0:b7:31:4d:0c:02:b8:d4:b1:ae:
                    15:75:3c:e6:64:a6:d7:c0:b3:ac:d3:7c:1b:24:de:
                    55:4f:62:f0:79:15:52:4f:8f:6e:ed:a1:f8:ef:97:
                    04:c0:b2:0f:5c:9f:56:83:87:ef:01:b2:25:1a:7c:
                    0d:19:05:3a:29:db:60:32:fa:59:bb:37:04:e1:2a:
                    1f:a9:eb:e3:0c:9e:7d:27:95:fc:55:1c:89:59:ec:
                    da:f8:5a:8e:6c:d2:12:7d:24:b2:70:1c:e4:44:a2:
                    e0:e1:41:ee:49:24:6e:ce:a6:4a:b4:74:2e:2b:0f:
                    f8:7a:73:70:d0:df:f6:12:cc:1e:bd:99:86:3c:06:
                    f9:6f:c5:df:24:1e:71:f2:53:a8:0e:4d:4e:d0:39:
                    58:64:41:23:62:b2:9c:61:c1:ed:ea:c4:05:f6:50:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E0:E1:D2:28:10:6F:10:85:43:6C:19:68:74:28:F5:9C:53:78:C9
            X509v3 Authority Key Identifier:
                keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.99.0/24
                  163.47.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:53:10:a9:12:83:2d:81:d4:42:68:b1:70:dc:b0:99:87:6e:
         26:25:68:6b:ea:00:c1:8e:0a:d2:53:bd:61:db:e4:3e:2e:f9:
         3f:af:57:a5:76:11:71:98:2d:3c:3e:41:40:d8:66:8b:d2:34:
         24:45:06:33:8e:04:de:ca:09:7e:ed:cf:e6:d3:24:e4:cc:0d:
         aa:bb:bb:2b:95:85:7f:b4:fc:4a:ea:e7:73:f1:f2:80:15:fa:
         82:04:f4:08:d0:fc:6d:4a:27:cd:85:45:3a:d9:aa:0d:d1:76:
         7f:3d:50:b7:76:5d:2c:df:3e:13:8c:1d:8f:ee:2d:07:19:f7:
         55:e1:b9:7c:45:35:59:d7:41:1f:62:c1:65:00:f8:79:5e:c2:
         d6:26:42:88:c0:8a:85:1d:f1:64:b1:c8:3b:12:f6:f4:a1:33:
         7b:ab:c4:5e:e4:cf:7c:7d:90:da:ae:7f:2a:51:9c:f8:9e:11:
         09:16:13:a9:63:8d:e7:b0:8d:a8:0f:43:b9:79:22:c3:48:d1:
         d5:8b:f0:8f:f9:24:16:d0:e0:06:19:3f:3c:d5:d0:ad:e5:a5:
         c2:8a:b3:92:41:ed:7e:33:f6:70:18:f5:56:d2:ef:3a:1e:4b:
         e1:e9:ef:09:6d:09:73:fe:6a:b1:ef:98:cc:a9:e3:78:f0:18:
         74:cc:06:21
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2
RjE1Q0Q3QkUwHhcNMjUwNTIyMjAwNDM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmODM1Ny1iN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxb1ex0fBKfCcbt1Cm/TVLWVc4UGZrQZc46SJOMC3i/en14XO/kI8juG5JVzT
/xX9utUJ1TzZcACQFJ2k8fnE+Tc7nCqWHczTbTWI57TMkwzZeCbfbfIz5fUbW2or
yuC3MU0MArjUsa4VdTzmZKbXwLOs03wbJN5VT2LweRVST49u7aH475cEwLIPXJ9W
g4fvAbIlGnwNGQU6KdtgMvpZuzcE4SofqevjDJ59J5X8VRyJWeza+FqObNISfSSy
cBzkRKLg4UHuSSRuzqZKtHQuKw/4enNw0N/2EswevZmGPAb5b8XfJB5x8lOoDk1O
0DlYZEEjYrKcYcHt6sQF9lDloQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCng4dIo
EG8QhUNsGWh0KPWcU3jJMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC
OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVERUUvQURENjVFMjg0QjkwMTFFQTk1QkVBNjM5QzRGOUFFMDIvQzY2NzcwRjI0
QjkxMTFFQTlBNzI1MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnPGMDBACjL+cwDQYJKoZIhvcNAQELBQADggEBACNTEKkS
gy2B1EJosXDcsJmHbiYlaGvqAMGOCtJTvWHb5D4u+T+vV6V2EXGYLTw+QUDYZovS
NCRFBjOOBN7KCX7tz+bTJOTMDaq7uyuVhX+0/Erq53Px8oAV+oIE9AjQ/G1KJ82F
RTrZqg3Rdn89ULd2XSzfPhOMHY/uLQcZ91XhuXxFNVnXQR9iwWUA+HlewtYmQojA
ioUd8WSxyDsS9vShM3urxF7kz3x9kNqufypRnPieEQkWE6ljjeewjagPQ7l5IsNI
0dWL8I/5JBbQ4AYZPzzV0K3lpcKKs5JB7X4z9nAY9VbS7zoeS+Hp7wltCXP+arHv
mMyp43jwGHTMBiE=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:10:02 2025 by rpki-client