Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
File:                     FEDE0F2066C611EC93A73A3DC4F9AE02.roa (raw, json)
Hash identifier:          OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=
Subject key identifier:   B7:C3:79:CA:EE:1F:76:AD:3D:B1:79:88:DD:1A:F2:87:32:40:E8:1E
Certificate issuer:       /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial:       03E8
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
Signing time:             Fri 31 Jan 2025 00:45:25 +0000
ROA not before:           Fri 31 Jan 2025 00:45:25 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     133585
IP address blocks:        103.178.100.0/23 maxlen: 23
                          103.178.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
                          rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8FA2
        Validity
            Not Before: Jan 31 00:45:25 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=679c1d25-9d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:93:8c:1a:45:0f:79:59:4a:b6:37:9e:a0:
                    9f:f5:73:23:c7:0c:21:92:01:e9:f7:3d:b1:a5:e9:
                    c0:d7:5d:8b:7e:85:8c:10:d4:0a:38:5b:c5:aa:da:
                    51:7b:93:55:f5:26:4f:49:76:b3:46:9b:c7:ad:c3:
                    ae:18:65:4f:b3:d6:7f:18:96:b6:4d:f5:de:ef:b9:
                    2e:46:24:e9:c5:97:14:c7:6a:e4:1b:70:5a:10:33:
                    52:68:96:94:7d:ff:c5:dc:e9:14:89:d5:73:7a:6f:
                    75:9a:02:97:77:75:ee:11:2e:46:cf:91:a0:c7:50:
                    75:4f:23:5a:2b:07:3e:06:21:ed:30:e8:80:93:a2:
                    68:17:d5:63:9e:aa:7b:ab:7f:09:b0:ca:04:98:f4:
                    86:1b:f7:4f:f7:f2:88:68:60:dc:4b:56:ae:2b:cb:
                    a7:2d:3c:1d:02:6e:69:c6:e8:b6:c4:36:26:74:dc:
                    6c:0f:5f:5b:06:8d:5a:1c:6e:a5:07:9f:15:2e:2f:
                    2c:c8:04:3f:6c:00:64:9c:3c:41:71:76:e5:01:77:
                    82:16:6a:34:8c:8a:5f:af:74:f5:de:a5:08:93:c5:
                    9b:79:01:b6:de:22:56:db:eb:b9:93:19:e3:98:17:
                    6a:f3:c8:d2:f3:85:35:a3:86:61:88:c5:1a:4f:59:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:79:CA:EE:1F:76:AD:3D:B1:79:88:DD:1A:F2:87:32:40:E8:1E
            X509v3 Authority Key Identifier:
                keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:1a:dd:e9:e1:28:2f:c4:bf:ef:d7:26:c2:df:53:b8:88:
         f6:ae:12:54:4b:c2:68:80:55:d9:de:1b:62:7f:f6:63:28:b8:
         20:57:35:d2:2c:b4:d6:37:02:0a:90:ec:6e:6a:09:b3:43:95:
         8e:b3:c7:b5:4d:7b:db:ae:e9:11:5a:80:dc:dd:99:9d:11:cb:
         b8:e5:f3:02:4b:8f:51:1d:5c:46:3d:d3:73:e0:56:cf:e9:15:
         1c:8c:cc:04:44:1c:bc:0d:c8:65:1a:13:21:fb:d3:0e:4c:ac:
         e2:13:04:02:8f:d1:19:11:7a:8b:49:10:3c:c3:e3:fc:64:8b:
         24:00:26:f1:18:c5:5d:d5:d3:c4:06:61:c7:1c:d9:92:5b:4a:
         c3:c7:0c:2b:07:dc:44:33:80:7f:07:8b:3b:77:b0:5a:b2:ad:
         ab:dd:5b:a1:cb:e6:c4:b2:56:b2:6d:5b:9b:93:c0:66:58:bd:
         c1:84:b5:24:b9:68:99:b7:d2:5e:cc:25:29:71:16:7d:46:ad:
         c9:9e:13:42:35:25:5e:d7:39:5d:a0:91:7a:d9:36:45:62:a5:
         7a:0a:ae:14:66:b5:50:b3:b1:d2:c0:28:2c:cc:ec:c2:cf:06:
         a6:7c:a6:c8:a7:62:fe:72:f6:a8:c0:c9:80:f2:b9:df:2d:d6:
         c6:77:f6:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5
OTczOTE0QUIwHhcNMjUwMTMxMDA0NTI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzljMWQyNS05ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3fiTjBpFD3lZSrY3nqCf9XMjxwwhkgHp9z2xpenA112LfoWMENQKOFvFqtpR
e5NV9SZPSXazRpvHrcOuGGVPs9Z/GJa2TfXe77kuRiTpxZcUx2rkG3BaEDNSaJaU
ff/F3OkUidVzem91mgKXd3XuES5Gz5Ggx1B1TyNaKwc+BiHtMOiAk6JoF9Vjnqp7
q38JsMoEmPSGG/dP9/KIaGDcS1auK8unLTwdAm5pxui2xDYmdNxsD19bBo1aHG6l
B58VLi8syAQ/bABknDxBcXblAXeCFmo0jIpfr3T13qUIk8WbeQG23iJW2+u5kxnj
mBdq88jS84U1o4ZhiMUaT1l5ZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLfDecru
H3atPbF5iN0a8ocyQOgeMB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2
QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjhGQTIvOTFCN0RGNEM2NkMyMTFFQ0I1NUE5RjMxQzRGOUFFMDIvRkVERTBGMjA2
NkM2MTFFQzkzQTczQTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsmQwDQYJKoZIhvcNAQELBQADggEBAFnCGt3p4SgvxL/v
1ybC31O4iPauElRLwmiAVdneG2J/9mMouCBXNdIstNY3AgqQ7G5qCbNDlY6zx7VN
e9uu6RFagNzdmZ0Ry7jl8wJLj1EdXEY903PgVs/pFRyMzAREHLwNyGUaEyH70w5M
rOITBAKP0RkReotJEDzD4/xkiyQAJvEYxV3V08QGYccc2ZJbSsPHDCsH3EQzgH8H
izt3sFqyravdW6HL5sSyVrJtW5uTwGZYvcGEtSS5aJm30l7MJSlxFn1GrcmeE0I1
JV7XOV2gkXrZNkVipXoKrhRmtVCzsdLAKCzM7MLPBqZ8psinYv5y9qjAyYDyud8t
1sZ39qE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:44:05 2025 by rpki-client