Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/B7498170318011F0A5A76C39C4F9AE02.roa
File:                     B7498170318011F0A5A76C39C4F9AE02.roa (raw, json)
Hash identifier:          4xMCpId57nfxz7XEfKoBdilLfSUib+cCTUbVdicWXMY=
Subject key identifier:   7A:F4:63:3C:31:EA:F5:0B:B2:00:F6:65:82:3C:3D:8A:A8:14:2F:3E
Certificate issuer:       /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial:       0A
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/B7498170318011F0A5A76C39C4F9AE02.roa
Signing time:             Thu 15 May 2025 11:35:35 +0000
ROA not before:           Thu 15 May 2025 11:35:35 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136239
IP address blocks:        103.83.32.0/23 maxlen: 24
                          103.110.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 07:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
        Validity
            Not Before: May 15 11:35:35 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6825d187-746e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:89:b3:6c:1a:10:90:6e:e5:cf:fe:1e:d7:
                    45:2a:b1:1d:e1:8e:f7:26:01:1f:f1:a4:9e:be:5f:
                    be:10:71:2b:64:03:69:98:85:c2:12:22:bd:93:06:
                    ed:99:b1:8e:d1:90:90:9a:87:f6:0c:d5:a0:0a:33:
                    79:54:89:13:89:a1:ce:40:cf:19:dd:ce:61:5d:7d:
                    5f:5d:79:dd:07:46:1c:33:1d:45:5b:01:42:a3:73:
                    2c:58:de:53:50:29:49:b4:10:fc:10:bd:8a:c5:2d:
                    51:b6:79:ae:1f:d4:6a:d9:60:93:b3:ca:e4:54:98:
                    68:39:16:0b:ac:62:6b:16:4e:ad:fb:b9:73:b0:87:
                    67:e4:ce:72:39:f0:9b:56:c8:6f:42:2f:42:20:c2:
                    9e:12:3f:48:eb:59:e9:d4:1a:d8:ed:98:14:b7:e7:
                    77:76:fd:0d:5f:e7:3c:be:16:e1:74:55:c1:a6:6d:
                    2a:5e:9f:d0:19:1f:98:71:ad:27:65:70:00:ce:9b:
                    0f:be:31:72:a1:4a:22:d2:e1:40:b6:8e:8c:49:76:
                    72:31:bf:c8:b5:c3:14:3f:b1:f7:ee:ef:17:2d:72:
                    2e:6d:69:9e:46:12:3f:66:e1:3d:10:88:c1:fb:79:
                    ac:74:78:b0:67:6c:5d:b2:63:91:7f:f3:72:29:4f:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F4:63:3C:31:EA:F5:0B:B2:00:F6:65:82:3C:3D:8A:A8:14:2F:3E
            X509v3 Authority Key Identifier:
                keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/B7498170318011F0A5A76C39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.32.0/23
                  103.110.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:73:f9:e0:52:f3:75:a5:fd:b3:d8:21:0f:58:49:ff:f6:65:
         5c:bd:8d:8f:fd:14:30:e4:1a:8a:03:c3:ec:14:a5:e2:c6:96:
         db:fd:db:10:e6:d4:3f:36:79:18:c7:6b:e8:62:89:a9:fb:8e:
         24:1e:ed:1f:0a:46:15:e1:3a:88:1d:11:1e:64:ce:78:8f:3e:
         42:09:12:82:41:ec:4f:ae:84:27:e7:8c:eb:7d:9d:34:c0:9f:
         de:10:a0:96:a5:35:4e:e8:02:31:38:1a:b7:07:48:00:e0:3b:
         c9:0a:a7:d7:78:ec:c2:2f:32:09:33:99:c7:75:76:97:db:5a:
         3a:66:77:9f:bf:43:c8:68:b9:aa:a0:dc:9a:d4:29:d3:b0:8a:
         47:e0:3d:8e:26:cb:30:df:68:90:71:84:34:98:18:38:80:3c:
         de:33:82:b1:2a:d9:54:f7:98:b1:1e:5a:81:f2:ea:b0:d3:a2:
         b9:0c:c2:e2:57:ba:0d:f2:f8:52:14:bf:02:69:5f:df:63:c9:
         6a:71:c6:1e:21:95:f3:f7:eb:7b:1d:77:f2:7b:65:25:7d:64:
         00:88:cc:80:ae:5a:a9:57:f6:16:db:f3:76:70:88:77:61:00:
         ca:76:02:78:23:2a:72:ac:52:26:66:81:10:fc:1e:dc:30:a3:
         c8:1a:1e:cf
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RTY1QjExMC8GA1UEBRMoM0UwNjI4OTZGNzk2MTQwQzY0MDU1RTQ3RDQ1MzA4NDgy
M0E3MDgyNDAeFw0yNTA1MTUxMTM1MzVaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MjVkMTg3LTc0NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBTImzbBoQkG7lz/4e10UqsR3hjvcmAR/xpJ6+X74QcStkA2mYhcISIr2TBu2Z
sY7RkJCah/YM1aAKM3lUiROJoc5AzxndzmFdfV9ded0HRhwzHUVbAUKjcyxY3lNQ
KUm0EPwQvYrFLVG2ea4f1GrZYJOzyuRUmGg5FgusYmsWTq37uXOwh2fkznI58JtW
yG9CL0Igwp4SP0jrWenUGtjtmBS353d2/Q1f5zy+FuF0VcGmbSpen9AZH5hxrSdl
cADOmw++MXKhSiLS4UC2joxJdnIxv8i1wxQ/sffu7xctci5taZ5GEj9m4T0QiMH7
eax0eLBnbF2yY5F/83IpT6RFAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUevRjPDHq
9QuyAPZlgjw9iqgULz4wHwYDVR0jBBgwFoAUPgYolveWFAxkBV5H1FMISCOnCCQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjVCLzdGNEJFOUEyMjZG
NDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4a0JWNUgxRk1JU0NPbkND
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGdZb2x2ZVdGQXhrQlY1SDFGTUlTQ09uQ0NRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY1Qi83RjRCRTlBMjI2RjQxMUYwODRGNTk3NzJDNEY5QUUwMi9CNzQ5ODE3MDMx
ODAxMUYwQTVBNzZDMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAWdTIAMEAWduHjANBgkqhkiG9w0BAQsFAAOCAQEAkHP54FLz
daX9s9ghD1hJ//ZlXL2Nj/0UMOQaigPD7BSl4saW2/3bEObUPzZ5GMdr6GKJqfuO
JB7tHwpGFeE6iB0RHmTOeI8+QgkSgkHsT66EJ+eM632dNMCf3hCglqU1TugCMTga
twdIAOA7yQqn13jswi8yCTOZx3V2l9taOmZ3n79DyGi5qqDcmtQp07CKR+A9jibL
MN9okHGENJgYOIA83jOCsSrZVPeYsR5agfLqsNOiuQzC4le6DfL4UhS/Amlf32PJ
anHGHiGV8/frex138ntlJX1kAIjMgK5aqVf2FtvzdnCId2EAynYCeCMqcqxSJmaB
EPwe3DCjyBoezw==
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:12:28 2025 by rpki-client