Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
File:                     F95379BE124411EB9E551E38C4F9AE02.roa (raw, json)
Hash identifier:          hzhgTWFnab8T39Mu9sUJRnqHMQMLHx+/is4D+pExOhI=
Subject key identifier:   CE:72:38:83:8D:51:03:5C:3E:C0:27:51:6C:66:1C:3E:34:D8:8F:AC
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       07FB
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:47:55 +0000
ROA not before:           Mon 02 Jun 2025 21:47:55 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140103
IP address blocks:        103.148.148.0/24 maxlen: 24
                          103.148.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
        Validity
            Not Before: Jun  2 21:47:55 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=683e1c0b-61c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:19:72:d1:64:3c:e4:60:ef:1e:a9:18:97:
                    7d:ce:23:5c:c9:64:bb:c0:27:a0:53:29:5a:7a:e1:
                    78:f5:0c:cc:3c:49:b8:50:b1:50:a2:18:66:37:5c:
                    c7:9c:f3:4a:6d:e2:01:e5:60:0a:67:f1:09:7e:e0:
                    27:63:c1:92:33:d1:4a:cf:fa:d4:f8:20:9c:45:8c:
                    b0:39:19:52:e2:14:7c:a1:9c:f2:61:ef:ff:b9:02:
                    c1:90:c7:eb:04:a4:59:ad:ff:4a:2a:48:f3:18:f4:
                    2b:7a:e9:93:00:9b:af:77:19:31:ea:b7:c3:fa:74:
                    3c:04:d6:38:36:4e:1a:11:85:c0:39:d5:52:1b:ba:
                    00:e8:8c:08:90:fc:94:45:b3:ef:95:07:8b:db:70:
                    81:0e:3d:e1:fe:d5:23:3d:50:aa:cc:c7:44:83:b6:
                    3d:bb:89:cf:2e:d4:29:d5:3f:78:f9:3e:4f:e4:99:
                    ff:df:26:f9:f0:20:77:67:b2:c9:0a:44:2d:2d:8e:
                    95:05:cb:38:aa:0f:3a:f8:6a:e1:1d:e8:87:38:9c:
                    77:4a:28:01:2e:6f:1c:7a:86:8d:8b:97:e3:0e:cf:
                    ac:75:7b:07:f6:b2:d7:1a:8d:ec:07:87:be:31:c2:
                    57:c2:f2:e1:e6:3d:6a:a4:ae:df:d8:33:22:d8:84:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:72:38:83:8D:51:03:5C:3E:C0:27:51:6C:66:1C:3E:34:D8:8F:AC
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:2a:c0:9e:c8:18:67:6e:36:40:69:58:57:b7:e4:90:01:
         3e:44:92:72:3c:22:d2:96:7b:c1:74:33:d7:a2:86:da:0c:ee:
         10:96:d1:1b:6e:f2:aa:75:f9:8a:c3:93:32:d6:92:12:a6:5f:
         42:04:6e:5d:c9:06:66:6d:f0:0f:80:54:26:29:51:5f:15:91:
         7e:7f:7e:c4:97:6f:00:ef:df:59:72:84:00:2f:4e:23:3f:ff:
         42:e0:ec:7c:7d:47:9e:eb:6e:14:52:70:36:eb:45:40:2d:d4:
         90:cf:69:c8:12:d6:3b:7d:90:8d:e3:b5:a5:11:86:ce:10:0f:
         2c:36:22:3a:db:72:69:d0:5e:c3:47:79:27:7e:26:ac:bd:81:
         26:7b:95:8c:7b:02:30:a1:35:49:be:a8:9f:4d:f6:85:1d:49:
         85:75:66:3c:ec:3c:e9:0c:2e:ce:57:19:34:4f:e9:b9:77:f3:
         e9:ff:ef:9d:db:08:e0:11:ec:71:19:80:07:da:a9:29:e8:ce:
         ee:72:1a:13:0d:0c:95:76:2e:89:21:b1:7a:cf:a8:5b:78:82:
         65:43:e3:38:72:d6:06:f5:da:5c:67:2b:13:27:9b:54:c6:f5:
         70:83:e0:af:5a:dc:f2:17:4b:08:3b:fd:a5:fc:c2:30:92:7e:
         eb:08:1d:b1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURBMTkxMTAvBgNVBAUTKEU4MEY1NzgxNkVCODA2ODg1REM1RUIxRUMyRTFBRDU0
QTJGOUYyREYwHhcNMjUwNjAyMjE0NzU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlMWMwYi02MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4sZctFkPORg7x6pGJd9ziNcyWS7wCegUylaeuF49QzMPEm4ULFQohhmN1zH
nPNKbeIB5WAKZ/EJfuAnY8GSM9FKz/rU+CCcRYywORlS4hR8oZzyYe//uQLBkMfr
BKRZrf9KKkjzGPQreumTAJuvdxkx6rfD+nQ8BNY4Nk4aEYXAOdVSG7oA6IwIkPyU
RbPvlQeL23CBDj3h/tUjPVCqzMdEg7Y9u4nPLtQp1T94+T5P5Jn/3yb58CB3Z7LJ
CkQtLY6VBcs4qg86+GrhHeiHOJx3SigBLm8ceoaNi5fjDs+sdXsH9rLXGo3sB4e+
McJXwvLh5j1qpK7f2DMi2IQ3OQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM5yOION
UQNcPsAnUWxmHD402I+sMB8GA1UdIwQYMBaAFOgPV4FuuAaIXcXrHsLhrVSi+fLf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREExOS8wMTNDRDdEMEVE
NEYxMUVBOTNDODE0M0RDNEY5QUUwMi82QTlYZ1c2NEJvaGR4ZXNld3VHdFZLTDU4
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZBOVhnVzY0Qm9oZHhlc2V3dUd0VktMNTh0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QURBMTkvMDEzQ0Q3RDBFRDRGMTFFQTkzQzgxNDNEQzRGOUFFMDIvRjk1Mzc5QkUx
MjQ0MTFFQjlFNTUxRTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlJQwDQYJKoZIhvcNAQELBQADggEBAHhrKsCeyBhnbjZA
aVhXt+SQAT5EknI8ItKWe8F0M9eihtoM7hCW0Rtu8qp1+YrDkzLWkhKmX0IEbl3J
BmZt8A+AVCYpUV8VkX5/fsSXbwDv31lyhAAvTiM//0Lg7Hx9R57rbhRScDbrRUAt
1JDPacgS1jt9kI3jtaURhs4QDyw2IjrbcmnQXsNHeSd+Jqy9gSZ7lYx7AjChNUm+
qJ9N9oUdSYV1ZjzsPOkMLs5XGTRP6bl38+n/753bCOAR7HEZgAfaqSnozu5yGhMN
DJV2LokhsXrPqFt4gmVD4zhy1gb12lxnKxMnm1TG9XCD4K9a3PIXSwg7/aX8wjCS
fusIHbE=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:59:28 2025 by rpki-client