Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
File:                     E91D4C42E19011EC8E1ECA75C4F9AE02.roa (raw, json)
Hash identifier:          ZetAVFLz5a9A9d96t5a3lmM5CeQl7iCEfmN2/6tRSWE=
Subject key identifier:   07:1D:51:55:6D:F5:C2:4D:09:70:C3:9B:DF:54:27:28:CA:43:C4:7A
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0B09
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
Signing time:             Mon 12 May 2025 19:34:52 +0000
ROA not before:           Mon 12 May 2025 19:34:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59353
IP address blocks:        103.230.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 19:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2825 (0xb09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: May 12 19:34:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68224d5c-7346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:93:c0:52:76:a5:ee:7e:c4:bb:f2:61:c3:
                    ba:d1:63:37:11:28:c3:09:82:89:6b:ce:af:aa:a2:
                    21:18:89:ff:21:56:a6:99:e0:43:a3:9f:ca:46:73:
                    df:af:69:67:17:11:1d:98:00:bb:c7:b4:b4:01:b6:
                    af:06:05:27:d3:17:e5:f5:29:29:ba:24:de:ec:7f:
                    50:c7:35:d0:a6:ed:7e:70:39:64:25:2d:f5:7e:e6:
                    40:8a:d3:0e:cd:3d:39:b8:3f:e6:f7:6e:b5:fb:db:
                    c7:d9:9a:71:3d:47:fd:76:d0:7b:25:3d:1a:97:53:
                    c1:9d:81:41:e9:3d:4e:d9:b5:52:c4:11:85:ce:ed:
                    d7:54:64:12:f7:7d:cb:b5:98:55:c9:f4:48:6c:c0:
                    84:f2:81:16:de:99:ec:1f:24:d8:e4:64:19:5e:32:
                    8f:8f:ef:fd:f8:4e:a4:29:0e:88:30:ff:22:f5:d9:
                    7d:b3:6e:f8:96:99:2c:ce:70:e5:7e:49:c8:9c:3a:
                    60:95:5f:6a:3f:3d:27:cb:38:33:57:d3:41:d9:bf:
                    2f:8a:4c:4b:bd:2a:9a:ea:50:b2:3e:6e:8e:ba:2c:
                    cc:0f:1d:68:16:ae:60:62:5e:1b:31:79:54:a4:a5:
                    61:db:25:f0:96:b6:f4:05:50:4e:83:00:a4:ea:2d:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:51:55:6D:F5:C2:4D:09:70:C3:9B:DF:54:27:28:CA:43:C4:7A
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/E91D4C42E19011EC8E1ECA75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:32:ae:b3:d6:00:78:d6:0e:06:41:43:de:68:70:b5:fb:cd:
         e8:36:68:52:27:40:76:37:e1:1e:c2:33:2e:37:d6:04:93:ca:
         72:d5:f2:85:5b:d0:22:75:b0:1f:c9:be:99:b9:9d:b9:99:75:
         28:17:fd:8f:db:0a:c4:60:c7:cf:d0:0c:33:6b:23:aa:aa:8c:
         c2:be:29:c7:3d:0a:b3:71:e1:ed:31:4a:89:93:72:4e:77:c3:
         06:a8:86:6a:80:4b:78:02:ae:20:9e:fa:e4:18:31:63:a6:7b:
         14:ed:27:d6:da:1e:3e:69:dd:49:5e:e8:53:5f:10:87:e7:16:
         54:47:25:7d:b2:1d:26:7f:e7:e7:9f:00:46:e0:8f:ba:73:db:
         b1:48:06:2b:6f:8c:6e:c8:84:96:b8:d7:53:7f:71:64:bf:46:
         04:bb:11:34:10:b9:dd:13:4d:da:ec:45:90:a7:61:73:83:ab:
         5f:6b:63:33:a1:b4:9d:bc:6e:e7:78:0f:54:d7:4c:4a:2a:1c:
         72:14:38:e6:7b:76:db:a5:2a:a6:6c:9e:fa:8a:5b:55:13:3e:
         c6:58:be:4e:88:4e:8d:14:f6:ae:08:da:ad:7e:c6:3a:b4:c7:
         fc:4f:66:3e:c5:26:5f:f1:71:3b:a6:84:eb:60:28:8a:d6:3b:
         05:a9:40:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEyNTkxMTAvBgNVBAUTKEIwQjFBNUQ1NTkyQkNFNUM4MUVCNzI2RDQ2NDBDQTk1
NTEwNENFOTMwHhcNMjUwNTEyMTkzNDUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODIyNGQ1Yy03MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vKTwFJ2pe5+xLvyYcO60WM3ESjDCYKJa86vqqIhGIn/IVammeBDo5/KRnPf
r2lnFxEdmAC7x7S0AbavBgUn0xfl9SkpuiTe7H9QxzXQpu1+cDlkJS31fuZAitMO
zT05uD/m9261+9vH2ZpxPUf9dtB7JT0al1PBnYFB6T1O2bVSxBGFzu3XVGQS933L
tZhVyfRIbMCE8oEW3pnsHyTY5GQZXjKPj+/9+E6kKQ6IMP8i9dl9s274lpksznDl
fknInDpglV9qPz0nyzgzV9NB2b8vikxLvSqa6lCyPm6OuizMDx1oFq5gYl4bMXlU
pKVh2yXwlrb0BVBOgwCk6i16SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAcdUVVt
9cJNCXDDm99UJyjKQ8R6MB8GA1UdIwQYMBaAFLCxpdVZK85cgetybUZAypVRBM6T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI1OS9ENEYyNzU4MjQ1
OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnpseUI2M0p0UmtES2xWRUV6
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NMR2wxVmtyemx5QjYzSnRSa0RLbFZFRXpwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODEyNTkvRDRGMjc1ODI0NTk2MTFFQUIwREJFNDJBQzRGOUFFMDIvRTkxRDRDNDJF
MTkwMTFFQzhFMUVDQTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn5rQwDQYJKoZIhvcNAQELBQADggEBADEyrrPWAHjWDgZB
Q95ocLX7zeg2aFInQHY34R7CMy431gSTynLV8oVb0CJ1sB/Jvpm5nbmZdSgX/Y/b
CsRgx8/QDDNrI6qqjMK+Kcc9CrNx4e0xSomTck53wwaohmqAS3gCriCe+uQYMWOm
exTtJ9baHj5p3Ule6FNfEIfnFlRHJX2yHSZ/5+efAEbgj7pz27FIBitvjG7IhJa4
11N/cWS/RgS7ETQQud0TTdrsRZCnYXODq19rYzOhtJ28bud4D1TXTEoqHHIUOOZ7
dtulKqZsnvqKW1UTPsZYvk6ITo0U9q4I2q1+xjq0x/xPZj7FJl/xcTumhOtgKIrW
OwWpQBs=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:23:29 2025 by rpki-client