Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/B856D46C3B9611F0B2363C74C4F9AE02.roa
File:                     B856D46C3B9611F0B2363C74C4F9AE02.roa (raw, json)
Hash identifier:          rMvOfQ7a6paQVDGYsdXHj3LXBCDY/jQZKGdkQ6C4iMc=
Subject key identifier:   F9:15:79:05:C4:AD:FA:F5:C5:36:B1:14:62:DA:40:88:A8:3E:C6:D9
Certificate issuer:       /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial:       01CE
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/B856D46C3B9611F0B2363C74C4F9AE02.roa
Signing time:             Wed 28 May 2025 07:38:17 +0000
ROA not before:           Wed 28 May 2025 07:38:17 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     395793
IP address blocks:        103.101.222.0/24 maxlen: 24
                          103.101.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
        Validity
            Not Before: May 28 07:38:17 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6836bd69-e05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:67:a9:6b:6c:d0:c7:de:05:05:e4:53:9d:
                    bd:34:aa:75:e9:64:bc:4e:e0:ab:e0:93:cb:6b:17:
                    a6:4d:eb:f1:87:73:a2:01:56:ef:4e:d6:8f:71:8a:
                    61:c8:e6:38:5c:5c:40:21:e2:80:3b:eb:c2:b5:e6:
                    6e:dc:f8:5a:39:2c:d7:1a:c7:a5:9d:f5:00:44:60:
                    72:11:6f:a7:e5:be:f8:20:ab:2a:e9:5f:73:89:a5:
                    6d:c3:07:28:23:0d:e4:eb:95:84:b4:f1:0c:d5:7e:
                    c3:e6:27:ce:da:5c:15:5f:e7:f0:74:b7:8f:47:64:
                    c3:c2:16:6f:ce:9b:69:56:ae:62:1c:9b:36:1e:01:
                    98:90:9c:be:a5:80:76:4a:d9:bc:4d:90:31:b8:4f:
                    42:6f:ea:69:c6:6e:32:4e:1d:9d:8c:84:40:2f:94:
                    51:ca:39:3b:88:69:20:3e:71:d0:e1:d2:04:f3:d4:
                    25:f5:b9:9d:b2:71:b1:fe:dd:32:04:20:74:3d:33:
                    b5:98:ac:24:bf:6f:1b:48:5e:47:d6:ae:ab:38:17:
                    b7:fb:21:f5:9b:fe:9b:09:37:fb:f6:3e:50:42:90:
                    15:f4:69:d8:3a:ea:28:2b:34:d4:a8:68:32:46:74:
                    7d:9b:a5:34:b9:b1:b3:1d:3f:00:a3:70:9f:ac:64:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:79:05:C4:AD:FA:F5:C5:36:B1:14:62:DA:40:88:A8:3E:C6:D9
            X509v3 Authority Key Identifier:
                keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/B856D46C3B9611F0B2363C74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:ed:c1:d0:d0:4d:c2:ef:31:35:14:73:7f:55:6f:87:3a:95:
         f6:53:3b:7a:d0:ef:d0:79:f4:92:e5:db:a3:18:c4:5b:d1:0c:
         a5:04:13:f1:5e:be:5d:ff:ed:86:85:51:ed:e6:bf:ca:e3:7b:
         b1:10:eb:97:4e:c1:67:94:48:08:90:78:43:72:4e:f5:af:7c:
         2b:cb:15:fe:09:24:14:a1:25:2f:52:70:22:43:e2:b1:c1:a9:
         8d:d4:b2:07:e0:fb:73:f9:4f:66:f0:de:99:31:d9:3a:66:bb:
         1f:67:43:27:34:92:ae:2b:6b:97:da:6b:4e:5e:e6:73:a4:ba:
         d3:2b:1e:7a:b1:7f:b8:f5:89:5a:95:ef:83:25:1a:90:d1:5c:
         09:41:c3:01:2f:fd:f5:85:30:67:a5:2c:c8:6f:2d:fa:8f:d7:
         20:56:b3:e6:b6:99:9f:97:71:c9:52:7a:50:5d:8a:82:2b:41:
         93:36:66:c4:db:f6:f8:8a:65:8e:aa:27:9c:f5:c9:f4:17:e5:
         8a:40:e3:a7:12:da:b4:aa:9d:f3:f9:b6:21:cd:5b:cf:13:cd:
         de:b8:9d:33:1a:11:f3:74:a1:cf:ef:9e:6a:f4:46:c2:24:a3:
         8a:a4:52:a2:04:f4:21:b8:01:4c:dc:29:59:a3:77:55:37:ee:
         75:10:a8:bc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3
NEE5MkQ0NEQwHhcNMjUwNTI4MDczODE3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM2YmQ2OS1lMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJxnqWts0MfeBQXkU529NKp16WS8TuCr4JPLaxemTevxh3OiAVbvTtaPcYph
yOY4XFxAIeKAO+vCteZu3PhaOSzXGselnfUARGByEW+n5b74IKsq6V9ziaVtwwco
Iw3k65WEtPEM1X7D5ifO2lwVX+fwdLePR2TDwhZvzptpVq5iHJs2HgGYkJy+pYB2
Stm8TZAxuE9Cb+ppxm4yTh2djIRAL5RRyjk7iGkgPnHQ4dIE89Ql9bmdsnGx/t0y
BCB0PTO1mKwkv28bSF5H1q6rOBe3+yH1m/6bCTf79j5QQpAV9GnYOuooKzTUqGgy
RnR9m6U0ubGzHT8Ao3CfrGSvPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPkVeQXE
rfr1xTaxFGLaQIioPsbZMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5
MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxRDMvNUZBMzZFMzQ4OTIzMTFFREJDQTI5NjEzQzRGOUFFMDIvQjg1NkQ0NkMz
Qjk2MTFGMEIyMzYzQzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnZd4wDQYJKoZIhvcNAQELBQADggEBAMftwdDQTcLvMTUU
c39Vb4c6lfZTO3rQ79B59JLl26MYxFvRDKUEE/Fevl3/7YaFUe3mv8rje7EQ65dO
wWeUSAiQeENyTvWvfCvLFf4JJBShJS9ScCJD4rHBqY3Usgfg+3P5T2bw3pkx2Tpm
ux9nQyc0kq4ra5faa05e5nOkutMrHnqxf7j1iVqV74MlGpDRXAlBwwEv/fWFMGel
LMhvLfqP1yBWs+a2mZ+XcclSelBdioIrQZM2ZsTb9viKZY6qJ5z1yfQX5YpA46cS
2rSqnfP5tiHNW88Tzd64nTMaEfN0oc/vnmr0RsIko4qkUqIE9CG4AUzcKVmjd1U3
7nUQqLw=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:17:38 2025 by rpki-client