Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
File:                     E88EE726E93611EF9E3FF729C4F9AE02.roa (raw, json)
Hash identifier:          ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=
Subject key identifier:   66:1F:DD:A9:81:45:87:69:F8:C8:70:4A:E5:AC:00:85:DF:35:A2:AA
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       063B
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 19:31:22 +0000
ROA not before:           Tue 03 Jun 2025 19:31:22 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     138453
IP address blocks:        103.79.17.0/24 maxlen: 24
                          122.50.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 19:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Jun  3 19:31:22 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=683f4d89-7b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:ca:da:e4:ca:e0:0a:e9:90:fe:d5:7d:76:
                    17:9d:cd:5b:5d:b9:4a:c6:03:2a:77:8e:84:86:fc:
                    97:58:4e:89:77:c4:f3:93:ed:51:f3:6b:1a:08:2c:
                    a0:17:7e:76:f7:0f:c3:87:69:8d:02:ef:c2:ae:23:
                    6e:47:14:b9:ef:10:40:6d:92:50:fb:d2:03:50:6a:
                    e5:36:04:f1:1f:95:8c:80:52:26:75:48:2c:24:dd:
                    67:f6:d7:5f:b8:f3:93:76:c0:4a:f4:4a:0f:63:12:
                    5f:9d:2d:d8:8b:6a:2f:69:86:70:24:b2:fe:a7:97:
                    fe:49:a3:ac:63:d0:a6:87:1a:80:7e:d4:b5:bf:bc:
                    27:a4:cd:a6:bc:42:58:69:50:17:9e:ed:00:67:b0:
                    38:aa:e2:98:4a:a2:66:d4:c2:07:9e:8c:19:39:c0:
                    69:9a:50:cc:fb:3e:0f:f7:fa:e5:9b:b0:a9:aa:e4:
                    28:e5:c3:73:ea:ab:ed:ce:1f:4a:3e:1d:b2:aa:95:
                    f5:ab:e0:ea:ad:be:0f:8a:8c:b7:cd:85:a7:c2:55:
                    8d:82:10:e3:62:ee:bc:c4:75:9c:41:c9:7b:42:68:
                    6b:ad:d7:a9:d1:14:b3:9e:c0:55:ec:a7:03:e3:cc:
                    db:fa:88:3d:bf:9e:59:bf:bc:50:32:d6:83:8b:28:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:DD:A9:81:45:87:69:F8:C8:70:4A:E5:AC:00:85:DF:35:A2:AA
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.17.0/24
                  122.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:e9:f4:61:dc:65:9f:71:a5:d9:38:82:c9:cb:2a:5f:2c:
         28:40:00:aa:fa:9f:65:cb:27:d1:92:a9:10:97:60:1e:f3:df:
         9b:f6:4f:66:f5:98:e5:8b:16:e3:15:ad:a1:3e:7d:48:ec:9d:
         85:66:90:9d:1b:fc:91:46:d2:a3:db:89:1e:5c:eb:52:d0:56:
         b4:c4:e3:65:5f:88:c4:db:a7:4b:08:04:c4:56:27:0a:c9:4e:
         04:c7:53:55:f7:e6:90:d6:5a:c0:ef:20:77:db:bc:ab:e0:d1:
         00:88:a7:0f:e7:a2:bc:b4:db:95:85:a6:9b:a3:6e:25:a0:a1:
         95:20:73:13:9e:c8:74:d0:7c:ea:74:de:81:04:10:51:17:ac:
         3c:30:13:32:d4:a8:2f:09:09:bc:e3:79:c2:c7:12:f9:2c:78:
         b5:8f:ad:23:3f:4a:8b:f8:4e:cb:ec:a9:8f:3b:d2:da:6a:74:
         a3:27:46:57:09:44:f0:8e:d5:8b:b9:5a:f9:c1:2d:4c:43:11:
         69:be:65:9b:d2:c6:04:a1:26:7c:4f:f3:6b:65:7a:48:e4:a2:
         81:30:04:35:10:a9:83:e2:16:5d:df:f1:d0:6f:cb:f5:eb:f1:
         14:dd:fc:b8:4b:63:29:1e:90:24:c1:06:e7:93:50:70:64:03:
         5c:c0:c1:a1
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjUwNjAzMTkzMTIyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNmNGQ4OS03YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SfK2uTK4ArpkP7VfXYXnc1bXblKxgMqd46EhvyXWE6Jd8Tzk+1R82saCCyg
F3529w/Dh2mNAu/CriNuRxS57xBAbZJQ+9IDUGrlNgTxH5WMgFImdUgsJN1n9tdf
uPOTdsBK9EoPYxJfnS3Yi2ovaYZwJLL+p5f+SaOsY9CmhxqAftS1v7wnpM2mvEJY
aVAXnu0AZ7A4quKYSqJm1MIHnowZOcBpmlDM+z4P9/rlm7CpquQo5cNz6qvtzh9K
Ph2yqpX1q+Dqrb4Pioy3zYWnwlWNghDjYu68xHWcQcl7Qmhrrdep0RSznsBV7KcD
48zb+og9v55Zv7xQMtaDiyi6oQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGYf3amB
RYdp+MhwSuWsAIXfNaKqMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvRTg4RUU3MjZF
OTM2MTFFRjlFM0ZGNzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnTxEDBAB6MgMwDQYJKoZIhvcNAQELBQADggEBADLl6fRh
3GWfcaXZOILJyypfLChAAKr6n2XLJ9GSqRCXYB7z35v2T2b1mOWLFuMVraE+fUjs
nYVmkJ0b/JFG0qPbiR5c61LQVrTE42VfiMTbp0sIBMRWJwrJTgTHU1X35pDWWsDv
IHfbvKvg0QCIpw/nory025WFppujbiWgoZUgcxOeyHTQfOp03oEEEFEXrDwwEzLU
qC8JCbzjecLHEvkseLWPrSM/Sov4TsvsqY870tpqdKMnRlcJRPCO1Yu5WvnBLUxD
EWm+ZZvSxgShJnxP82tlekjkooEwBDUQqYPiFl3f8dBvy/Xr8RTd/LhLYykekCTB
BueTUHBkA1zAwaE=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:48 2025 by rpki-client