Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa
File:                     0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa (raw, json)
Hash identifier:          F3ruMwZ8Zkd7JvEXX/ban+THiOr2874j2Qf3JBG20Oc=
Subject key identifier:   28:7F:6F:75:B4:F9:49:73:2F:84:3B:75:A3:F6:96:D6:01:4F:21:22
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0DF1
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa
Signing time:             Fri 28 Mar 2025 18:28:36 +0000
ROA not before:           Fri 28 Mar 2025 18:28:36 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     1239
IP address blocks:        103.83.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3569 (0xdf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741
        Validity
            Not Before: Mar 28 18:28:36 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67e6ea54-8d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:1b:c8:b6:52:90:16:8d:cc:7c:0e:3f:ff:
                    8c:89:7a:d4:54:28:85:d3:7e:56:db:c2:5b:7f:84:
                    2b:09:ee:64:2c:17:d7:4e:a1:ff:bd:e3:6f:1b:14:
                    f5:7a:72:39:a9:a7:bb:64:c5:bc:32:3f:f3:df:f9:
                    01:ea:1d:86:a7:c7:32:e8:0b:b6:06:10:6a:4f:ae:
                    34:21:5b:57:ca:15:3e:7b:56:58:d2:24:5b:a7:2c:
                    a4:ab:91:19:7d:b5:cb:d5:82:97:d9:31:90:c3:2b:
                    3e:5b:87:ce:e2:4a:b0:68:d7:51:86:6f:47:fc:8e:
                    c7:e3:72:bb:06:8d:7b:d1:86:32:ee:77:ea:20:2a:
                    c1:77:f5:c8:05:b3:c1:de:ac:27:8b:a2:16:f4:09:
                    c5:0d:5c:14:49:51:02:ab:ba:a4:2a:db:53:99:b6:
                    32:f8:a6:e7:41:20:1c:1a:4e:47:84:3a:b0:43:f7:
                    dd:11:37:da:b3:4b:8c:46:e1:81:87:1f:aa:f8:2c:
                    86:6a:ca:49:ce:a2:13:57:71:37:f6:34:75:5e:28:
                    a1:30:f5:3d:fb:11:db:32:a2:87:3c:a6:18:27:5f:
                    fa:46:91:3e:14:c8:b9:18:c0:99:71:88:ff:5a:ec:
                    92:92:d9:26:32:81:89:4a:6d:a1:21:ef:e7:3f:6b:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7F:6F:75:B4:F9:49:73:2F:84:3B:75:A3:F6:96:D6:01:4F:21:22
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:6e:23:66:81:56:fb:e8:e1:25:c8:0c:4f:44:ee:01:7d:
         1d:8a:3f:00:5f:af:17:7c:27:59:d8:e4:6b:f1:07:4b:6c:4a:
         37:ef:1e:25:a4:86:8a:89:8e:2a:b2:fc:65:3b:6d:12:e1:7c:
         3f:7f:4b:5b:83:86:a9:fb:8d:e1:dc:84:b4:7b:20:d9:d2:bc:
         07:19:62:f3:bb:18:61:de:67:0e:b8:5b:fc:36:b6:57:54:e7:
         22:0e:35:cb:a4:1e:70:6e:05:be:c0:ef:ae:1d:ab:fc:90:6c:
         31:83:73:aa:e4:b0:46:3e:f2:9f:f3:3a:9d:c7:7b:72:12:72:
         cc:f1:d3:bf:b5:dc:55:7f:5d:aa:59:03:f8:de:c9:6c:b5:3a:
         d9:21:55:39:96:ba:dc:19:17:da:b3:92:06:4d:f1:ca:98:ca:
         2c:47:1c:12:e0:80:20:fa:e3:a9:72:5b:5d:32:d2:a2:a1:08:
         3c:9e:b9:92:ec:73:07:42:5d:c4:3c:16:69:a7:9c:2e:3d:cd:
         20:80:bd:e8:1a:4b:73:5f:94:da:87:ed:1a:0a:dc:93:dc:2e:
         ed:70:a0:85:be:df:0f:8f:ae:fa:d9:d0:08:80:a2:da:fd:b7:
         b7:ac:6b:54:a5:eb:84:d3:d6:c0:75:dd:af:bd:ea:f5:32:43:
         b6:54:57:9d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0
NEIzMzA2MEMwHhcNMjUwMzI4MTgyODM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U2ZWE1NC04ZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0A8byLZSkBaNzHwOP/+MiXrUVCiF035W28Jbf4QrCe5kLBfXTqH/veNvGxT1
enI5qae7ZMW8Mj/z3/kB6h2Gp8cy6Au2BhBqT640IVtXyhU+e1ZY0iRbpyykq5EZ
fbXL1YKX2TGQwys+W4fO4kqwaNdRhm9H/I7H43K7Bo170YYy7nfqICrBd/XIBbPB
3qwni6IW9AnFDVwUSVECq7qkKttTmbYy+KbnQSAcGk5HhDqwQ/fdETfas0uMRuGB
hx+q+CyGaspJzqITV3E39jR1XiihMPU9+xHbMqKHPKYYJ1/6RpE+FMi5GMCZcYj/
WuySktkmMoGJSm2hIe/nP2tJTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCh/b3W0
+UlzL4Q7daP2ltYBTyEiMB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE
MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA3NDEvNzdDOTE2OEVCRDEyMTFFOTkwRjRCRjJDQzRGOUFFMDIvMEVCN0FBQzBG
MzIyMTFFRUE2QjdCRDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnU8AwDQYJKoZIhvcNAQELBQADggEBAIksbiNmgVb76OEl
yAxPRO4BfR2KPwBfrxd8J1nY5GvxB0tsSjfvHiWkhoqJjiqy/GU7bRLhfD9/S1uD
hqn7jeHchLR7INnSvAcZYvO7GGHeZw64W/w2tldU5yIONcukHnBuBb7A764dq/yQ
bDGDc6rksEY+8p/zOp3He3IScszx07+13FV/XapZA/jeyWy1OtkhVTmWutwZF9qz
kgZN8cqYyixHHBLggCD646lyW10y0qKhCDyeuZLscwdCXcQ8FmmnnC49zSCAvega
S3NflNqH7RoK3JPcLu1woIW+3w+PrvrZ0AiAotr9t7esa1Sl64TT1sB13a+96vUy
Q7ZUV50=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:38 2025 by rpki-client