Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/CA1D2934296011EEB6BB2647C4F9AE02.roa
File:                     CA1D2934296011EEB6BB2647C4F9AE02.roa (raw, json)
Hash identifier:          GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=
Subject key identifier:   D4:4E:16:19:DA:46:59:C0:54:54:4D:24:7B:D6:38:2E:01:0D:E0:BD
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       0168
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/CA1D2934296011EEB6BB2647C4F9AE02.roa
Signing time:             Fri 23 May 2025 03:32:55 +0000
ROA not before:           Fri 23 May 2025 03:32:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     396356
IP address blocks:        103.115.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: May 23 03:32:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682fec66-4dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:0c:17:97:6d:7e:f2:18:5f:ef:fd:dd:81:
                    66:18:d4:6c:f6:fe:a4:66:e8:6e:ed:64:eb:22:df:
                    28:5c:53:0b:ac:eb:7f:e6:19:a9:f8:5c:a7:e3:55:
                    63:5a:10:92:1c:f8:82:ff:e1:5c:e5:e0:e9:52:f2:
                    e2:39:75:b8:e6:a6:c7:74:87:0d:da:aa:26:ee:c4:
                    bf:28:be:5e:d3:e7:51:d6:e9:85:f2:3c:16:40:26:
                    b0:d2:cc:8b:22:2d:56:5c:61:fb:cd:71:3b:23:fd:
                    ce:8f:45:f9:40:c2:9c:28:6e:5a:30:12:44:4c:dc:
                    6d:24:db:66:ee:3f:de:8e:af:77:04:36:f8:26:9c:
                    f4:6b:a1:04:e6:87:49:7b:09:5e:9f:db:8c:22:ff:
                    88:b9:13:5d:d0:e0:dd:60:ff:91:66:f6:0e:28:e8:
                    ed:d5:1b:b4:41:e7:11:01:b2:bb:1d:f5:00:64:8f:
                    31:33:bd:10:77:33:12:a6:33:6f:e0:fd:9c:b6:c1:
                    18:df:e6:a0:b0:df:9c:c4:7c:23:95:c5:55:5a:2b:
                    07:ae:90:2b:8f:33:0e:28:ad:a3:b6:26:b0:c0:a1:
                    94:d8:ee:5e:ac:3c:47:6d:5a:99:01:89:8d:e0:92:
                    c1:fc:ef:e3:eb:df:05:5d:de:30:e5:be:5e:ed:2b:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4E:16:19:DA:46:59:C0:54:54:4D:24:7B:D6:38:2E:01:0D:E0:BD
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/CA1D2934296011EEB6BB2647C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:cb:42:0d:8d:07:17:dd:03:21:8f:3a:e8:a3:31:9e:43:
         27:af:1b:01:ee:01:1c:5a:fe:7c:2e:72:2b:e4:11:f8:5b:7a:
         b0:95:28:76:05:bf:c5:9e:f9:36:da:ab:13:39:de:6b:b0:b2:
         7d:d2:87:99:3a:76:f5:c0:ba:36:9f:e9:35:99:14:86:89:70:
         26:3f:70:e7:0e:57:77:20:3a:26:09:12:12:fa:57:8c:e8:cb:
         ca:9b:7e:1b:26:a6:f0:17:0f:e4:7a:0f:8c:56:85:4c:06:49:
         08:12:0b:22:ef:ff:80:d7:0e:3d:d8:ac:3e:1b:86:63:b1:34:
         59:36:b2:e8:8b:11:58:d4:a2:7f:47:be:16:fb:6b:64:17:f4:
         be:e7:09:a7:f4:ba:97:f1:9b:71:c8:de:d0:a1:08:e4:05:a0:
         30:5b:62:39:d7:29:28:9e:57:98:59:da:df:f1:8e:ca:e4:bd:
         89:04:d0:be:36:fa:9f:10:b4:3c:7a:83:9a:de:4e:07:5f:7e:
         9f:24:b8:91:b8:68:49:05:11:cd:1c:23:a5:b9:1e:39:b2:55:
         a0:2e:0d:19:04:b9:c6:1d:a7:82:de:af:55:31:89:a7:8e:5b:
         5a:a7:fc:32:38:13:90:44:a6:b5:b3:63:77:a8:74:ab:b3:7b:
         73:ce:d7:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB
NDk2RjQ0OTkwHhcNMjUwNTIzMDMzMjU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmZWM2Ni00ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1h4MF5dtfvIYX+/93YFmGNRs9v6kZuhu7WTrIt8oXFMLrOt/5hmp+Fyn41Vj
WhCSHPiC/+Fc5eDpUvLiOXW45qbHdIcN2qom7sS/KL5e0+dR1umF8jwWQCaw0syL
Ii1WXGH7zXE7I/3Oj0X5QMKcKG5aMBJETNxtJNtm7j/ejq93BDb4Jpz0a6EE5odJ
ewlen9uMIv+IuRNd0ODdYP+RZvYOKOjt1Ru0QecRAbK7HfUAZI8xM70QdzMSpjNv
4P2ctsEY3+agsN+cxHwjlcVVWisHrpArjzMOKK2jtiawwKGU2O5erDxHbVqZAYmN
4JLB/O/j698FXd4w5b5e7SvP6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNROFhna
RlnAVFRNJHvWOC4BDeC9MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3
MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTU0QTAvOTBCN0E3OUEyNzBFMTFFRUFBQTVCNzZGQzRGOUFFMDIvQ0ExRDI5MzQy
OTYwMTFFRUI2QkIyNjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnc7gwDQYJKoZIhvcNAQELBQADggEBAHpDy0INjQcX3QMh
jzroozGeQyevGwHuARxa/nwucivkEfhberCVKHYFv8We+TbaqxM53muwsn3Sh5k6
dvXAujaf6TWZFIaJcCY/cOcOV3cgOiYJEhL6V4zoy8qbfhsmpvAXD+R6D4xWhUwG
SQgSCyLv/4DXDj3YrD4bhmOxNFk2suiLEVjUon9Hvhb7a2QX9L7nCaf0upfxm3HI
3tChCOQFoDBbYjnXKSieV5hZ2t/xjsrkvYkE0L42+p8QtDx6g5reTgdffp8kuJG4
aEkFEc0cI6W5HjmyVaAuDRkEucYdp4Ler1UxiaeOW1qn/DI4E5BEprWzY3eodKuz
e3PO1+0=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:06:41 2025 by rpki-client