Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/E0C16642013B11EFA1286E46C4F9AE02.roa
File:                     E0C16642013B11EFA1286E46C4F9AE02.roa (raw, json)
Hash identifier:          jv6F443GLQ59zvl/7e2oKHz2W75XIIy4c7gmHh4C5vI=
Subject key identifier:   D3:E5:EF:64:A3:37:62:46:1E:A6:B8:3B:00:C3:A5:95:9F:C4:42:8E
Certificate issuer:       /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
Certificate serial:       EF
Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/E0C16642013B11EFA1286E46C4F9AE02.roa
Signing time:             Mon 19 May 2025 04:56:19 +0000
ROA not before:           Mon 19 May 2025 04:56:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138658
IP address blocks:        103.14.151.0/24 maxlen: 24
                          2401:9460::/32 maxlen: 32
                          2401:9460:8000::/36 maxlen: 36
                          2401:9460:9000::/36 maxlen: 36
                          2401:9460:a000::/36 maxlen: 36
                          2401:9460:b000::/36 maxlen: 36
                          2401:9460:c000::/36 maxlen: 36
                          2401:9460:d000::/36 maxlen: 36
                          2401:9460:e000::/36 maxlen: 36
                          2401:9460:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl
                          rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C62B6, serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
        Validity
            Not Before: May 19 04:56:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682ab9f3-0463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:53:fb:4b:47:12:b6:00:82:e3:39:50:de:
                    cc:2b:28:37:a3:c5:0f:6a:f8:87:cc:5d:cf:ed:6f:
                    c5:d9:dc:91:91:f2:d5:90:2b:28:e9:ab:d0:17:26:
                    4a:ec:a6:d8:ee:cd:24:82:0f:b8:f7:6b:36:78:fd:
                    ad:38:75:fa:92:c0:90:a9:84:1b:51:21:23:17:b4:
                    da:bf:e8:b7:89:33:da:42:90:a0:ca:ab:a2:a3:41:
                    52:fa:d7:bd:2d:71:fa:de:2d:d2:61:96:4f:f9:45:
                    5e:37:d1:94:3d:07:b9:10:a8:f0:2e:cf:34:36:8f:
                    c1:d1:73:ba:c4:79:fc:ea:62:6a:0c:7d:72:2d:87:
                    8f:53:34:ee:49:b3:05:eb:35:3a:e5:dc:ce:e1:e3:
                    75:16:4d:00:62:bb:7f:16:07:a1:cc:71:35:7a:21:
                    51:b1:02:7a:66:93:f6:09:e8:05:f8:88:dd:22:d8:
                    5a:e3:7e:38:43:3b:af:49:14:d8:42:c6:11:c0:f1:
                    fb:91:84:7a:8d:a3:17:99:6e:a1:de:c0:a4:65:a7:
                    43:10:73:10:da:be:49:8e:f1:b0:23:22:fa:53:d4:
                    77:5c:95:a8:e7:01:cf:3d:22:7f:d4:be:e0:21:80:
                    84:5c:30:d2:d2:62:a6:7b:12:45:2e:a5:b7:3f:60:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E5:EF:64:A3:37:62:46:1E:A6:B8:3B:00:C3:A5:95:9F:C4:42:8E
            X509v3 Authority Key Identifier:
                keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/E0C16642013B11EFA1286E46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.151.0/24
                IPv6:
                  2401:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:90:ac:26:8b:cb:92:91:2b:b2:1d:69:ed:c2:0e:5f:b7:
         55:b6:54:d8:aa:0b:b6:6b:2b:0d:53:05:05:72:ce:68:e9:70:
         4e:da:05:d1:c4:63:1c:70:78:48:b8:a5:cc:32:47:44:36:a6:
         e9:e7:82:63:74:4b:0f:8f:aa:f3:17:d7:07:69:24:db:6e:61:
         77:47:0e:a2:eb:09:3e:52:05:61:7b:8f:64:8e:d7:23:57:18:
         6f:51:15:45:80:31:3f:f7:22:64:ee:3c:0d:dd:33:a5:fb:fe:
         e5:fd:4a:8c:53:67:22:f2:ac:1f:01:51:f5:75:fe:db:53:56:
         57:86:21:2a:13:3f:b0:6f:ea:91:a0:38:45:ea:dd:6f:e9:4d:
         a2:02:71:62:05:0c:f9:c1:c5:b9:bf:c8:c5:4e:d9:bb:7b:5f:
         d1:10:51:c1:95:63:13:5a:6d:f2:27:94:e3:11:66:f3:e2:06:
         6e:4d:68:67:ce:df:2b:cd:47:e0:7c:0a:34:ed:52:45:00:9d:
         11:de:d0:e5:e8:60:14:9e:95:a8:c7:3f:30:3e:d9:bf:1b:33:
         e5:ea:f0:d3:d2:02:8e:ae:35:59:16:95:06:91:0f:ff:7c:22:
         00:0a:71:1a:7f:80:d6:ab:70:a7:ac:2c:67:b8:23:4f:69:14:
         4a:30:1c:5f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYyQjYxMTAvBgNVBAUTKEMxNEEwRTYwODJGMEU5MjJDQUZFMjI5Njk1MjNFODY0
QzdBOEYxREMwHhcNMjUwNTE5MDQ1NjE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJhYjlmMy0wNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQJT+0tHErYAguM5UN7MKyg3o8UPaviHzF3P7W/F2dyRkfLVkCso6avQFyZK
7KbY7s0kgg+492s2eP2tOHX6ksCQqYQbUSEjF7Tav+i3iTPaQpCgyquio0FS+te9
LXH63i3SYZZP+UVeN9GUPQe5EKjwLs80No/B0XO6xHn86mJqDH1yLYePUzTuSbMF
6zU65dzO4eN1Fk0AYrt/FgehzHE1eiFRsQJ6ZpP2CegF+IjdItha4344QzuvSRTY
QsYRwPH7kYR6jaMXmW6h3sCkZadDEHMQ2r5JjvGwIyL6U9R3XJWo5wHPPSJ/1L7g
IYCEXDDS0mKmexJFLqW3P2ATjwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNPl72Sj
N2JGHqa4OwDDpZWfxEKOMB8GA1UdIwQYMBaAFMFKDmCC8Okiyv4ilpUj6GTHqPHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJCNi9COTk4N0FBNEZF
NDAxMUVFOEZFNzQ1NjlDNEY5QUUwMi93VW9PWUlMdzZTTEtfaUtXbFNQb1pNZW84
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVb09ZSUx3NlNMS19pS1dsU1BvWk1lbzhkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYyQjYvQjk5ODdBQTRGRTQwMTFFRThGRTc0NTY5QzRGOUFFMDIvRTBDMTY2NDIw
MTNCMTFFRkExMjg2RTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnDpcwDQQCAAIwBwMFACQBlGAwDQYJKoZIhvcNAQELBQAD
ggEBAHVtkKwmi8uSkSuyHWntwg5ft1W2VNiqC7ZrKw1TBQVyzmjpcE7aBdHEYxxw
eEi4pcwyR0Q2punngmN0Sw+PqvMX1wdpJNtuYXdHDqLrCT5SBWF7j2SO1yNXGG9R
FUWAMT/3ImTuPA3dM6X7/uX9SoxTZyLyrB8BUfV1/ttTVleGISoTP7Bv6pGgOEXq
3W/pTaICcWIFDPnBxbm/yMVO2bt7X9EQUcGVYxNabfInlOMRZvPiBm5NaGfO3yvN
R+B8CjTtUkUAnRHe0OXoYBSelajHPzA+2b8bM+Xq8NPSAo6uNVkWlQaRD/98IgAK
cRp/gNarcKesLGe4I09pFEowHF8=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:08:35 2025 by rpki-client