Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
File:                     0218C21E261711EE9AEA7674C4F9AE02.roa (raw, json)
Hash identifier:          uhmsph/UZ+El90Yxy7WpECGs3tuN2cOfnCiiAfNg+oE=
Subject key identifier:   46:11:FC:98:9D:07:E1:73:3C:82:A1:0F:15:81:F9:BD:E2:BE:B3:CE
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       0164
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
Signing time:             Sat 31 May 2025 03:52:40 +0000
ROA not before:           Sat 31 May 2025 03:52:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9230
IP address blocks:        103.137.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: May 31 03:52:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a7d08-e06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:ba:20:28:24:8f:7f:94:7f:b0:97:ec:5c:
                    47:d9:02:49:05:14:00:09:4b:1b:05:99:3c:43:c6:
                    b3:ff:19:de:7d:8c:45:c5:d3:a1:87:ee:28:d3:db:
                    6b:d9:38:bf:a0:88:a9:df:41:62:00:25:0e:c5:c0:
                    2f:4a:2f:ad:a4:a5:e4:dc:6a:d8:3b:0d:da:7f:9d:
                    93:3e:44:d4:36:55:60:40:3a:32:81:77:66:76:5c:
                    f2:0d:d4:f5:c6:ee:f4:01:3d:9c:12:61:44:93:a7:
                    66:cb:46:b9:f5:e3:00:21:53:32:64:b5:94:d6:2e:
                    55:cc:2c:a1:73:5c:f8:51:24:85:15:ce:b2:cd:bf:
                    66:89:ea:15:02:c1:fb:41:a7:72:0e:f0:ee:45:be:
                    4e:9b:6f:b0:1f:bf:d2:70:0a:91:c6:90:51:17:36:
                    a5:d1:27:e5:18:25:7a:c3:a4:d6:dd:2d:86:f7:52:
                    6d:ee:6e:e4:0e:fd:74:38:da:29:70:12:67:a3:9b:
                    20:7c:7b:d5:0c:78:c6:b0:d5:40:c2:67:ed:c3:68:
                    e1:d4:4e:9a:21:7f:d7:94:f1:c0:6e:9a:f5:6d:a7:
                    a7:9e:7d:4c:0e:f7:ea:32:55:06:36:da:ce:f9:20:
                    cc:85:35:13:99:7c:89:3a:d4:7d:e7:9f:10:98:73:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:FC:98:9D:07:E1:73:3C:82:A1:0F:15:81:F9:BD:E2:BE:B3:CE
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:62:0b:9f:be:de:4c:c7:98:34:11:ac:68:06:8d:c2:dc:
         20:4e:7c:16:05:7a:a0:dd:64:e2:05:a2:c5:cd:fe:72:24:c5:
         c0:a4:10:03:b0:bf:f4:0f:97:f0:3e:4e:d4:41:f5:c1:0c:26:
         95:b4:68:a2:8f:41:e2:51:57:c2:3b:2f:f6:0e:4a:b1:69:09:
         b6:43:fa:51:1c:39:7c:64:69:52:0e:dd:8a:c9:49:bb:a9:1e:
         fe:80:e1:f1:9a:c4:dd:b1:88:e2:b3:25:b6:98:81:f9:58:73:
         a6:8a:5f:64:13:d4:60:b9:2f:79:95:d6:df:f0:cb:96:8e:34:
         f1:16:a4:2a:73:68:12:68:15:3c:8a:7c:dc:3d:33:1a:86:f7:
         57:00:73:8f:13:30:aa:6c:ef:68:04:77:5e:e3:45:ff:ad:87:
         07:4e:90:21:3d:4f:34:35:e1:46:ce:63:1a:d5:45:f4:a1:65:
         d3:72:55:eb:72:96:6f:21:bf:5c:d7:23:ba:3e:08:42:05:5a:
         0c:0e:9a:94:f7:f1:09:e3:06:3d:a2:b8:b9:e9:03:67:7b:57:
         fc:32:0d:d5:88:d1:fa:01:bb:e3:08:d8:55:08:73:54:fb:6c:
         45:6b:58:61:3a:d9:d5:66:6e:a0:57:95:af:5f:74:a3:b6:69:
         9e:a7:e2:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx
NzkwQjdENDEwHhcNMjUwNTMxMDM1MjQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNhN2QwOC1lMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsn26ICgkj3+Uf7CX7FxH2QJJBRQACUsbBZk8Q8az/xnefYxFxdOhh+4o09tr
2Ti/oIip30FiACUOxcAvSi+tpKXk3GrYOw3af52TPkTUNlVgQDoygXdmdlzyDdT1
xu70AT2cEmFEk6dmy0a59eMAIVMyZLWU1i5VzCyhc1z4USSFFc6yzb9mieoVAsH7
QadyDvDuRb5Om2+wH7/ScAqRxpBRFzal0SflGCV6w6TW3S2G91Jt7m7kDv10ONop
cBJno5sgfHvVDHjGsNVAwmftw2jh1E6aIX/XlPHAbpr1baennn1MDvfqMlUGNtrO
+SDMhTUTmXyJOtR9558QmHNCDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEYR/Jid
B+FzPIKhDxWB+b3ivrPOMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2
MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBM0IvODlEMDA2MEEyNjE2MTFFRUJFNzYxMDVDQzRGOUFFMDIvMDIxOEMyMUUy
NjE3MTFFRTlBRUE3Njc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnicQwDQYJKoZIhvcNAQELBQADggEBAFNPYgufvt5Mx5g0
EaxoBo3C3CBOfBYFeqDdZOIFosXN/nIkxcCkEAOwv/QPl/A+TtRB9cEMJpW0aKKP
QeJRV8I7L/YOSrFpCbZD+lEcOXxkaVIO3YrJSbupHv6A4fGaxN2xiOKzJbaYgflY
c6aKX2QT1GC5L3mV1t/wy5aONPEWpCpzaBJoFTyKfNw9MxqG91cAc48TMKps72gE
d17jRf+thwdOkCE9TzQ14UbOYxrVRfShZdNyVetylm8hv1zXI7o+CEIFWgwOmpT3
8QnjBj2iuLnpA2d7V/wyDdWI0foBu+MI2FUIc1T7bEVrWGE62dVmbqBXla9fdKO2
aZ6n4n4=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:31 2025 by rpki-client