Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A9B82544A89A11EFA52A9970C4F9AE02.roa
File:                     A9B82544A89A11EFA52A9970C4F9AE02.roa (raw, json)
Hash identifier:          SIcxhOEIM41kk3geT6tTo6gosphamPrjvTMVkyrZL2U=
Subject key identifier:   E2:9F:59:3D:3A:4B:35:FA:1C:16:4E:4C:38:18:9F:FA:51:94:20:92
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       5C
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A9B82544A89A11EFA52A9970C4F9AE02.roa
Signing time:             Mon 05 May 2025 02:39:19 +0000
ROA not before:           Mon 05 May 2025 02:39:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142300
IP address blocks:        103.188.92.0/24 maxlen: 24
                          103.188.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: May  5 02:39:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681824d6-21fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:be:07:23:c1:04:85:95:a3:2b:2b:12:ac:
                    bf:1e:9b:34:4b:92:9f:49:b6:23:7a:3e:d4:10:8f:
                    a7:dc:a1:12:82:51:5f:b9:e9:cb:f6:67:cc:98:0c:
                    7d:ae:ea:c6:a5:ed:ac:35:e2:ac:c8:d9:48:79:21:
                    67:40:9e:95:7f:00:7f:3f:1d:bc:21:8f:97:97:47:
                    2a:91:e2:e4:ad:b7:bc:cc:46:3a:09:2a:35:4d:66:
                    a1:ab:ba:e3:95:ea:ae:de:fa:4f:69:ad:c7:90:72:
                    64:c4:6c:f4:8e:f5:fe:b3:97:cf:7c:8b:fb:63:8a:
                    a1:e4:0c:c0:32:2b:5b:83:43:3c:ef:86:f8:b1:c7:
                    33:22:36:36:c5:46:55:d8:e9:dc:48:08:16:c4:38:
                    3b:e3:46:1c:15:61:a2:c5:24:df:8e:6e:af:cc:16:
                    78:47:24:97:b3:dc:35:7c:a5:1b:05:30:dd:d8:33:
                    8e:d8:42:8d:19:19:bf:f0:69:52:b1:eb:65:e1:ce:
                    f3:f7:dd:08:4d:f9:59:33:10:7d:42:a5:7c:ec:a7:
                    5f:26:c1:5d:20:e1:cb:6b:b3:e2:a9:1e:fc:50:1b:
                    a6:d3:ce:50:f2:9a:94:09:f9:7a:17:33:9a:a8:22:
                    ee:75:fc:38:66:3d:4b:00:e5:e5:95:1f:60:44:eb:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9F:59:3D:3A:4B:35:FA:1C:16:4E:4C:38:18:9F:FA:51:94:20:92
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A9B82544A89A11EFA52A9970C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:6d:ca:c7:79:0f:a6:f1:e6:81:34:74:ed:2d:b7:31:2c:45:
         ec:9c:5d:1a:08:30:c9:fa:ee:4a:ec:97:28:50:6e:8d:b6:9f:
         2a:74:c1:fa:47:f8:ec:d4:c3:55:50:e3:f3:8c:cf:f7:6b:7e:
         18:2f:84:bd:bd:01:ed:c1:c4:a1:76:e2:b1:1e:0e:ae:e8:a3:
         04:74:31:22:4e:87:c0:fa:69:c7:59:9d:de:de:6d:e4:52:c8:
         f4:1c:48:7f:18:fe:85:93:85:97:4a:32:53:d9:05:47:1b:7f:
         6e:ea:87:7b:33:e8:63:31:74:e6:41:4c:2b:4d:51:60:ff:d4:
         0b:0f:ba:cd:ec:69:53:58:17:94:25:a5:fb:ac:6a:9d:90:98:
         be:57:c0:bf:64:4b:a4:11:cf:7a:cc:cf:af:78:60:7d:87:4b:
         38:bb:5d:c3:f5:a4:0c:a3:e9:ab:0b:47:6b:78:aa:08:96:59:
         2c:3d:6b:72:2a:95:98:a3:70:5a:fe:3c:2e:2a:d2:2f:38:03:
         79:5b:36:d5:96:9f:3c:44:68:2b:cf:f7:94:d1:88:b8:26:5f:
         96:77:e1:2f:87:55:4a:4f:3e:8b:6d:4e:ec:ed:3c:29:76:fd:
         9e:69:8b:59:d0:bb:35:ff:95:03:88:9d:f7:c0:4b:38:23:ce:
         d1:a5:92:d8
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RUMyRDExMC8GA1UEBRMoMzA0RDY0RTNGMTA1MTI5N0U0QjYyQUM3REUzNDgwRjQ3
QTI5QUUwRjAeFw0yNTA1MDUwMjM5MTlaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MTgyNGQ2LTIxZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsTb4HI8EEhZWjKysSrL8emzRLkp9JtiN6PtQQj6fcoRKCUV+56cv2Z8yYDH2u
6sal7aw14qzI2Uh5IWdAnpV/AH8/Hbwhj5eXRyqR4uStt7zMRjoJKjVNZqGruuOV
6q7e+k9prceQcmTEbPSO9f6zl898i/tjiqHkDMAyK1uDQzzvhvixxzMiNjbFRlXY
6dxICBbEODvjRhwVYaLFJN+Obq/MFnhHJJez3DV8pRsFMN3YM47YQo0ZGb/waVKx
62XhzvP33QhN+VkzEH1CpXzsp18mwV0g4ctrs+KpHvxQG6bTzlDympQJ+XoXM5qo
Iu51/DhmPUsA5eWVH2BE60oBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4p9ZPTpL
NfocFk5MOBif+lGUIJIwHwYDVR0jBBgwFoAUME1k4/EFEpfktirH3jSA9Hoprg8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFQzJELzgyQjcyNUU4QkNF
MzExRUQ4NDlGOTMzMUM0RjlBRTAyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJn
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTUUxazRfRUZFcGZrdGlySDNqU0E5SG9wcmc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9BOUI4MjU0NEE4
OUExMUVGQTUyQTk5NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe8XDANBgkqhkiG9w0BAQsFAAOCAQEArW3Kx3kPpvHmgTR0
7S23MSxF7JxdGggwyfruSuyXKFBujbafKnTB+kf47NTDVVDj84zP92t+GC+Evb0B
7cHEoXbisR4OruijBHQxIk6HwPppx1md3t5t5FLI9BxIfxj+hZOFl0oyU9kFRxt/
buqHezPoYzF05kFMK01RYP/UCw+6zexpU1gXlCWl+6xqnZCYvlfAv2RLpBHPeszP
r3hgfYdLOLtdw/WkDKPpqwtHa3iqCJZZLD1rciqVmKNwWv48LirSLzgDeVs21Zaf
PERoK8/3lNGIuCZflnfhL4dVSk8+i21O7O08KXb9nmmLWdC7Nf+VA4id98BLOCPO
0aWS2A==
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:11:30 2025 by rpki-client