Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
File:                     57B4ADB0066A11ECA8CBA567C4F9AE02.roa (raw, json)
Hash identifier:          CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=
Subject key identifier:   82:C5:16:77:B2:6B:BA:93:E6:A7:24:70:F6:82:70:6D:A7:63:2C:86
Certificate issuer:       /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial:       0800
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
Signing time:             Wed 14 May 2025 18:32:33 +0000
ROA not before:           Wed 14 May 2025 18:32:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137823
IP address blocks:        103.115.24.0/22 maxlen: 22
                          103.115.24.0/23 maxlen: 23
                          103.115.24.0/24 maxlen: 24
                          103.115.25.0/24 maxlen: 24
                          103.115.26.0/23 maxlen: 23
                          103.115.26.0/24 maxlen: 24
                          103.115.27.0/24 maxlen: 24
                          2402:dbc0::/32 maxlen: 32
                          2402:dbc0:4000::/34 maxlen: 34
                          2402:dbc0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 18:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
        Validity
            Not Before: May 14 18:32:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6824e1c1-8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:1b:5d:86:dc:12:62:23:c7:6d:15:a2:0a:
                    3b:b9:74:2e:eb:0e:5d:dd:e5:a3:d7:7c:4e:2a:1d:
                    86:13:89:55:42:90:66:8c:ca:95:b0:36:bd:8b:55:
                    79:2d:c5:de:c7:29:35:df:9d:94:aa:10:f1:0b:69:
                    7e:74:15:9a:7c:77:56:95:27:37:b1:24:55:2f:90:
                    e9:8c:f9:41:42:49:1e:92:85:58:5d:59:c9:4b:8e:
                    19:df:ac:04:27:fa:03:82:ac:8f:12:b5:8e:41:0d:
                    1b:d7:4d:98:16:69:f8:ae:07:f1:f2:80:d5:2c:8a:
                    14:e2:67:ae:1e:b6:bc:b1:d6:c4:d0:54:02:ae:f0:
                    b5:05:42:e7:4f:88:9b:7d:2b:20:f2:d8:b7:a1:ed:
                    68:1a:87:da:02:cd:9b:af:7f:86:67:bf:24:61:0a:
                    87:cf:09:ca:e1:55:89:60:4d:ae:10:66:78:25:3f:
                    ee:02:dd:35:fd:6b:da:98:a5:a9:bd:74:76:a3:ce:
                    ec:f5:05:bc:d8:b3:8b:4e:8d:46:bc:da:01:59:fd:
                    c7:de:0b:85:c0:9c:b1:c4:19:db:02:26:53:76:79:
                    e0:1f:ba:e9:08:68:89:cd:43:9f:2f:93:23:34:ab:
                    5e:50:9c:f9:02:e4:c2:2b:b4:06:a4:40:73:83:26:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:16:77:B2:6B:BA:93:E6:A7:24:70:F6:82:70:6D:A7:63:2C:86
            X509v3 Authority Key Identifier:
                keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.24.0/22
                IPv6:
                  2402:dbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:97:6c:2a:63:be:e0:48:3d:20:a6:b4:f2:aa:a6:8d:c9:2e:
         e0:25:c0:73:78:6e:08:3b:a2:d4:ba:11:08:53:19:7e:71:b3:
         2d:d0:89:c0:33:e4:26:29:73:db:bd:62:ad:11:92:45:c4:6a:
         cc:53:23:dd:d0:2f:f7:af:b8:4f:4d:82:18:25:0c:cf:45:4b:
         ef:5e:57:92:e7:60:2a:1e:54:cb:b5:11:97:2b:a6:2c:37:eb:
         a9:0c:c0:2a:1e:0d:d9:91:cc:26:3b:cd:75:46:21:f7:99:f3:
         62:6d:46:e5:36:50:4f:d0:06:a3:eb:0c:6f:86:eb:a4:e5:94:
         ff:aa:9c:4b:58:e3:ce:04:48:2c:cd:4c:27:c8:70:ea:df:12:
         ff:18:5d:0f:c9:81:c2:b0:30:80:3b:95:4d:70:d8:26:d9:5e:
         e1:50:a3:3f:ff:bd:11:e1:20:cb:9e:95:79:73:07:d5:85:03:
         55:3a:b5:82:a2:78:02:81:be:a4:41:f5:d7:bb:3d:f7:bc:32:
         35:b8:3c:cf:8c:99:1a:13:fe:07:d7:4a:4a:82:fe:01:b6:e0:
         cf:d8:b1:35:04:6a:04:38:ea:e0:a0:6e:5a:3c:39:69:82:9e:
         ad:c7:e0:35:b2:a2:ed:60:3d:ec:23:f1:1e:71:57:76:bd:b4:
         c4:f3:d0:ba
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3RDAxMTAvBgNVBAUTKEZFOTA3REE3QTdGOTkzNzlBNkZENDYzREQxN0QyNUI0
RDUwMURGRTgwHhcNMjUwNTE0MTgzMjMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI0ZTFjMS04NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAra4bXYbcEmIjx20Vogo7uXQu6w5d3eWj13xOKh2GE4lVQpBmjMqVsDa9i1V5
LcXexyk1352UqhDxC2l+dBWafHdWlSc3sSRVL5DpjPlBQkkekoVYXVnJS44Z36wE
J/oDgqyPErWOQQ0b102YFmn4rgfx8oDVLIoU4meuHra8sdbE0FQCrvC1BULnT4ib
fSsg8ti3oe1oGofaAs2br3+GZ78kYQqHzwnK4VWJYE2uEGZ4JT/uAt01/WvamKWp
vXR2o87s9QW82LOLTo1GvNoBWf3H3guFwJyxxBnbAiZTdnngH7rpCGiJzUOfL5Mj
NKteUJz5AuTCK7QGpEBzgyamQQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFILFFney
a7qT5qckcPaCcG2nYyyGMB8GA1UdIwQYMBaAFP6Qfaen+ZN5pv1GPdF9JbTVAd/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw
ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWszbW1fVVk5MFgwbHROVUIz
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19wQjlwNmY1azNtbV9VWTkwWDBsdE5VQjMtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ3RDAvOTgyQjJENUEwMDgyMTFFQUI3MUY0QTJCQzRGOUFFMDIvNTdCNEFEQjAw
NjZBMTFFQ0E4Q0JBNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJncxgwDQQCAAIwBwMFACQC28AwDQYJKoZIhvcNAQELBQAD
ggEBAECXbCpjvuBIPSCmtPKqpo3JLuAlwHN4bgg7otS6EQhTGX5xsy3QicAz5CYp
c9u9Yq0RkkXEasxTI93QL/evuE9NghglDM9FS+9eV5LnYCoeVMu1EZcrpiw366kM
wCoeDdmRzCY7zXVGIfeZ82JtRuU2UE/QBqPrDG+G66TllP+qnEtY484ESCzNTCfI
cOrfEv8YXQ/JgcKwMIA7lU1w2CbZXuFQoz//vRHhIMuelXlzB9WFA1U6tYKieAKB
vqRB9de7Pfe8MjW4PM+MmRoT/gfXSkqC/gG24M/YsTUEagQ46uCgblo8OWmCnq3H
4DWyou1gPewj8R5xV3a9tMTz0Lo=
-----END CERTIFICATE-----
Generated at Mon Jun 2 06:35:20 2025 by rpki-client