Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/81A55E3629E711F08823E620C4F9AE02.roa
File:                     81A55E3629E711F08823E620C4F9AE02.roa (raw, json)
Hash identifier:          KfN4zxeodpsFIbSyhLtkJmMGq5059ian7Q/W7KRDS8k=
Subject key identifier:   2F:4E:A2:FA:A2:6A:C9:06:37:FB:28:60:31:51:9D:60:2A:11:43:A3
Certificate issuer:       /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial:       07C4
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/81A55E3629E711F08823E620C4F9AE02.roa
Signing time:             Mon 05 May 2025 19:31:14 +0000
ROA not before:           Mon 05 May 2025 19:31:14 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150774
IP address blocks:        103.214.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 18:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
        Validity
            Not Before: May  5 19:31:14 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=68191202-72b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:56:b3:9b:19:3d:cd:6c:3e:c8:25:c9:25:
                    4a:34:32:d3:7e:bb:84:48:2d:3c:eb:1e:15:48:d4:
                    f5:c8:48:21:39:c5:d1:c0:d7:f4:68:12:59:a1:26:
                    2d:e7:35:6c:74:7b:5f:da:41:22:22:55:e9:dd:86:
                    0c:00:6f:ad:fb:fa:83:9a:1f:34:7b:ba:0a:a1:70:
                    89:e5:0a:12:53:22:45:1c:05:1f:c9:96:86:ab:c0:
                    e8:e7:29:bb:b0:f4:dc:35:0a:b1:33:cb:31:d5:ee:
                    d3:28:f2:1f:b6:2c:21:f1:6e:e0:f9:d9:4b:57:b1:
                    7f:78:d5:e2:7c:5c:79:83:e8:da:58:14:d8:65:dc:
                    4c:e1:10:02:a7:8b:2e:65:d5:13:e7:ee:2b:90:a7:
                    f0:d3:73:a3:a9:51:99:55:d3:01:6c:44:5c:a6:81:
                    ac:da:57:49:40:1a:fe:2d:69:ff:fb:37:ff:b2:a3:
                    5c:34:b8:6c:49:8a:ed:93:71:92:f8:6b:81:04:d4:
                    e7:ef:f4:78:87:a6:db:93:cc:b2:d4:03:22:6f:7b:
                    51:d0:aa:d0:a3:55:b6:72:86:ae:6a:f5:f2:c8:f8:
                    30:cc:b0:32:b1:4e:e8:2b:70:9b:02:67:6b:ca:12:
                    4b:3f:44:4f:a4:c2:74:e4:da:b6:74:bc:06:17:1a:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4E:A2:FA:A2:6A:C9:06:37:FB:28:60:31:51:9D:60:2A:11:43:A3
            X509v3 Authority Key Identifier:
                keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/81A55E3629E711F08823E620C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:dc:9f:26:cc:87:e1:99:59:73:5f:7d:85:c1:08:2c:2a:9a:
         96:32:a8:82:70:8f:dd:63:89:32:9c:e6:a1:ca:74:1e:a9:df:
         b1:2f:be:84:af:69:74:5d:d2:77:04:f7:8f:51:2b:15:54:13:
         01:1b:88:ed:35:71:50:88:36:eb:d4:49:65:90:e5:b0:b7:73:
         05:8b:6c:8f:40:e4:6f:b1:86:47:17:fe:39:9f:26:bf:a5:4f:
         76:c5:f3:6c:5c:b8:04:dc:16:b1:2d:af:08:15:8f:2f:1f:f6:
         35:dc:38:db:de:48:aa:0c:17:a2:53:13:75:e5:e4:83:87:a4:
         37:b7:e8:90:e4:59:48:67:db:5d:3d:8b:c5:3d:58:3c:ba:fc:
         1c:c0:01:74:c2:47:ab:10:01:ef:74:96:4f:72:d5:74:3a:00:
         ec:0a:99:58:5f:de:f7:4c:8d:62:4f:a3:2d:ab:40:98:22:48:
         7f:1f:26:ba:c8:71:28:8e:a2:31:6e:26:98:9b:e0:9a:e4:47:
         47:29:7f:a3:45:b4:f7:1a:fd:ee:0b:bd:b5:9e:61:02:1e:18:
         08:6c:70:79:db:b2:90:bf:c9:36:dc:1e:73:4d:db:28:94:86:
         0b:a0:af:45:6e:96:0b:68:dd:e5:04:a9:65:bc:a8:84:42:f6:
         09:77:72:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC
RUQwQ0U3MzcwHhcNMjUwNTA1MTkzMTE0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE5MTIwMi03MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeFWs5sZPc1sPsglySVKNDLTfruESC086x4VSNT1yEghOcXRwNf0aBJZoSYt
5zVsdHtf2kEiIlXp3YYMAG+t+/qDmh80e7oKoXCJ5QoSUyJFHAUfyZaGq8Do5ym7
sPTcNQqxM8sx1e7TKPIftiwh8W7g+dlLV7F/eNXifFx5g+jaWBTYZdxM4RACp4su
ZdUT5+4rkKfw03OjqVGZVdMBbERcpoGs2ldJQBr+LWn/+zf/sqNcNLhsSYrtk3GS
+GuBBNTn7/R4h6bbk8yy1AMib3tR0KrQo1W2coauavXyyPgwzLAysU7oK3CbAmdr
yhJLP0RPpMJ05Nq2dLwGFxqyZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC9Oovqi
askGN/soYDFRnWAqEUOjMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw
NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkNEREYvMjY2MDhENDYxMDcyMTFFQUFDMDZCMDc5QzRGOUFFMDIvODFBNTVFMzYy
OUU3MTFGMDg4MjNFNjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn1tkwDQYJKoZIhvcNAQELBQADggEBAKXcnybMh+GZWXNf
fYXBCCwqmpYyqIJwj91jiTKc5qHKdB6p37EvvoSvaXRd0ncE949RKxVUEwEbiO01
cVCINuvUSWWQ5bC3cwWLbI9A5G+xhkcX/jmfJr+lT3bF82xcuATcFrEtrwgVjy8f
9jXcONveSKoMF6JTE3Xl5IOHpDe36JDkWUhn2109i8U9WDy6/BzAAXTCR6sQAe90
lk9y1XQ6AOwKmVhf3vdMjWJPoy2rQJgiSH8fJrrIcSiOojFuJpib4JrkR0cpf6NF
tPca/e4LvbWeYQIeGAhscHnbspC/yTbcHnNN2yiUhgugr0Vulgto3eUEqWW8qIRC
9gl3cu0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:19 2025 by rpki-client