Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
File:                     A778AAF6A42111EAB3108934C4F9AE02.roa (raw, json)
Hash identifier:          nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=
Subject key identifier:   EC:D4:3B:35:BF:BA:DA:8C:42:37:61:98:AC:59:EF:F1:44:26:F1:A1
Certificate issuer:       /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial:       091E
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
Signing time:             Fri 30 May 2025 20:58:15 +0000
ROA not before:           Fri 30 May 2025 20:58:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140631
IP address blocks:        103.150.74.0/23 maxlen: 23
                          103.150.74.0/24 maxlen: 24
                          103.150.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
        Validity
            Not Before: May 30 20:58:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a1be7-2209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:51:2d:c4:e9:13:f5:0d:18:e1:40:0c:17:
                    ca:c9:12:e0:b1:99:9d:58:02:ed:81:db:97:ef:b6:
                    a0:a2:19:c3:6d:27:ff:fb:76:49:4f:60:3b:73:0f:
                    6d:33:74:bb:6a:cb:8a:e3:b6:02:0c:c6:b4:60:e1:
                    f3:37:42:31:65:08:35:ca:87:4e:12:76:30:ad:47:
                    e1:24:14:f5:a1:8a:02:c3:24:ae:b3:1f:1b:97:2b:
                    1b:8f:a8:55:9b:68:f5:90:08:72:72:50:92:81:eb:
                    c8:84:76:98:1d:f2:ce:13:de:f7:76:79:5b:55:51:
                    76:fd:b7:ad:6a:fd:c5:a4:48:3a:a4:36:09:75:d9:
                    fe:64:a3:c2:b9:d6:6b:e5:8e:b3:4a:a1:7e:ae:45:
                    bb:52:ea:c7:8e:79:ea:98:e3:8d:51:c4:fe:f4:39:
                    ad:37:52:4a:fd:32:1d:a7:6b:64:c8:40:ab:18:f6:
                    5e:37:c5:d7:47:9b:73:07:2f:fe:b0:cc:4a:c5:88:
                    53:7b:03:79:5b:7d:99:a0:f4:52:c8:9d:31:eb:cc:
                    97:1f:75:8c:9c:80:91:f6:43:c8:fa:dd:3c:70:79:
                    02:03:37:0b:a7:fa:eb:40:2a:ae:b9:e3:85:56:b8:
                    74:fc:63:03:17:e3:7d:66:fb:f5:aa:b5:83:02:e9:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D4:3B:35:BF:BA:DA:8C:42:37:61:98:AC:59:EF:F1:44:26:F1:A1
            X509v3 Authority Key Identifier:
                keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:ee:e1:ee:5c:ad:e3:0c:2f:e7:78:e7:c0:ff:ef:37:76:
         c5:7d:5d:af:a0:d9:06:42:00:f7:bc:0c:da:53:0a:73:87:73:
         62:80:98:a6:77:e7:fd:69:87:53:c6:7f:fe:00:f8:cc:e0:6d:
         e2:e2:42:41:c5:7e:30:79:19:e4:70:f8:58:46:59:3a:48:4c:
         7b:a6:e6:27:3b:92:b7:ef:6a:1f:e8:2f:e9:b1:40:27:16:a1:
         f5:9a:26:d7:03:4e:5d:d9:61:a1:8d:e3:d5:38:1c:07:af:bc:
         5e:c0:50:2f:ed:4d:1a:96:03:30:f3:0a:7d:27:0e:64:d6:72:
         34:d1:a1:f7:0f:c7:65:ed:27:0e:00:fe:3e:6d:58:19:24:f0:
         25:e2:c2:30:17:d2:e1:4d:c3:93:d2:0b:8c:ff:fa:56:95:70:
         e5:29:34:82:ea:50:b7:ec:d1:40:80:19:ae:c7:51:20:74:81:
         ff:d5:8f:02:75:4c:c1:20:36:3d:71:cb:03:5e:d6:2a:12:05:
         a3:26:2e:dd:b8:86:7f:c9:fa:1d:00:92:75:29:c7:5a:8d:76:
         23:54:71:dd:75:33:ed:63:35:e3:cc:88:db:9c:3d:df:78:08:
         2f:6f:81:e6:ca:af:8a:9f:a0:cb:dd:5a:a5:9d:20:84:2f:a6:
         39:89:49:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjUwNTMwMjA1ODE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNhMWJlNy0yMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jFRLcTpE/UNGOFADBfKyRLgsZmdWALtgduX77agohnDbSf/+3ZJT2A7cw9t
M3S7asuK47YCDMa0YOHzN0IxZQg1yodOEnYwrUfhJBT1oYoCwySusx8blysbj6hV
m2j1kAhyclCSgevIhHaYHfLOE973dnlbVVF2/betav3FpEg6pDYJddn+ZKPCudZr
5Y6zSqF+rkW7UurHjnnqmOONUcT+9DmtN1JK/TIdp2tkyECrGPZeN8XXR5tzBy/+
sMxKxYhTewN5W32ZoPRSyJ0x68yXH3WMnICR9kPI+t08cHkCAzcLp/rrQCquueOF
Vrh0/GMDF+N9Zvv1qrWDAulIOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOzUOzW/
utqMQjdhmKxZ7/FEJvGhMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBGQ0MvRjVDNDI0MDhBNDFGMTFFQUJEQzJGNTMxQzRGOUFFMDIvQTc3OEFBRjZB
NDIxMTFFQUIzMTA4OTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlkowDQYJKoZIhvcNAQELBQADggEBAD627uHuXK3jDC/n
eOfA/+83dsV9Xa+g2QZCAPe8DNpTCnOHc2KAmKZ35/1ph1PGf/4A+MzgbeLiQkHF
fjB5GeRw+FhGWTpITHum5ic7krfvah/oL+mxQCcWofWaJtcDTl3ZYaGN49U4HAev
vF7AUC/tTRqWAzDzCn0nDmTWcjTRofcPx2XtJw4A/j5tWBkk8CXiwjAX0uFNw5PS
C4z/+laVcOUpNILqULfs0UCAGa7HUSB0gf/VjwJ1TMEgNj1xywNe1ioSBaMmLt24
hn/J+h0AknUpx1qNdiNUcd11M+1jNePMiNucPd94CC9vgebKr4qfoMvdWqWdIIQv
pjmJSUk=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:53:06 2025 by rpki-client