Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/7E0A4CF07DD511EA906A3E7AC4F9AE02.roa
File:                     7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (raw, json)
Hash identifier:          unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=
Subject key identifier:   82:B5:6B:AF:A0:7F:83:06:D0:49:03:94:FF:F6:FF:55:AD:16:75:6D
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       09E9
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/7E0A4CF07DD511EA906A3E7AC4F9AE02.roa
Signing time:             Fri 16 May 2025 20:29:17 +0000
ROA not before:           Fri 16 May 2025 20:29:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135895
IP address blocks:        103.54.111.0/24 maxlen: 24
                          103.67.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: May 16 20:29:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6827a01d-c54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8d:ee:3d:e0:4d:f5:94:7b:f0:4f:08:d8:b9:
                    09:c4:41:2d:b6:c7:a9:09:0b:28:a9:74:44:8b:b2:
                    a3:4a:d9:2e:69:31:2a:77:71:92:65:38:0c:93:38:
                    06:b3:24:02:ae:64:98:d9:2c:d5:0b:0e:a6:83:d8:
                    8a:53:8c:79:f6:62:f1:ab:29:06:0f:a1:18:b3:ea:
                    5d:6c:bb:40:19:92:8a:0a:05:39:60:00:3b:3b:be:
                    59:ba:3e:5c:39:9e:8e:7e:a0:4b:a0:8a:73:cc:f8:
                    0b:1e:9d:7e:59:fa:42:c4:65:f8:c5:61:d8:ee:ea:
                    27:6a:de:03:bc:12:06:6c:76:31:f6:12:6b:cd:ff:
                    14:88:8a:0e:39:33:a0:10:4d:f0:89:9b:d4:9c:15:
                    42:a9:9c:03:67:ff:c7:94:0b:fe:c6:03:6e:e9:b9:
                    66:0a:2c:45:31:22:4e:01:3a:71:e5:9a:90:ed:5d:
                    03:de:c6:3f:01:e6:32:e4:63:b1:67:27:1f:d9:1a:
                    a8:d5:6c:f7:a1:d0:dd:2b:23:3d:57:be:ea:25:a3:
                    a6:6a:f0:f9:71:e7:8d:14:0c:19:e0:ce:88:2b:2c:
                    54:b6:aa:be:18:64:ed:cb:a7:ad:77:4f:8a:af:0a:
                    9a:33:df:e7:74:3d:3d:53:5f:57:c2:ca:c5:9f:ed:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B5:6B:AF:A0:7F:83:06:D0:49:03:94:FF:F6:FF:55:AD:16:75:6D
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/7E0A4CF07DD511EA906A3E7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.111.0/24
                  103.67.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:8e:15:f8:3a:4e:d3:aa:00:1e:b0:9d:f2:ea:ff:27:87:
         bf:64:17:dc:aa:bc:85:80:b0:47:cd:1a:82:24:da:24:61:3c:
         98:9f:96:49:73:c0:44:c6:2b:b4:9c:84:2d:97:31:59:bc:4d:
         21:76:d3:2e:6f:ff:8d:16:e9:a2:ed:4c:3b:04:8e:5d:45:d5:
         e1:75:c0:fb:4c:b1:ca:c8:fc:f2:1d:0b:a4:81:f3:f3:c8:4c:
         b5:49:23:33:6d:a5:fc:f4:2c:5c:9e:42:f3:d1:64:d5:26:6d:
         16:3e:ce:64:be:1a:ca:40:78:e8:56:81:73:79:78:1e:60:93:
         ad:c2:18:e9:53:a6:73:05:96:a3:eb:e5:a3:7d:49:d7:c1:00:
         ab:de:26:04:9e:df:4b:bd:b3:ec:c1:00:fc:4c:90:86:4a:be:
         65:ff:d5:1e:da:61:2d:b8:94:23:59:1d:17:2a:ab:e6:1d:38:
         51:27:20:e1:2c:50:2a:f1:90:37:e2:a3:91:45:c9:c0:9e:8d:
         df:f1:8c:7d:85:86:4f:18:bb:35:0c:51:6d:52:85:43:62:dc:
         78:a5:ab:83:da:8f:b0:e8:90:84:4a:59:76:0d:50:7e:fc:e0:
         96:a0:9b:3b:db:37:a8:25:90:7f:5d:76:18:83:3a:a0:94:92:
         f8:15:f9:49
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE
NDJBREI5QUIwHhcNMjUwNTE2MjAyOTE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI3YTAxZC1jNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+o3uPeBN9ZR78E8I2LkJxEEttsepCQsoqXREi7KjStkuaTEqd3GSZTgMkzgG
syQCrmSY2SzVCw6mg9iKU4x59mLxqykGD6EYs+pdbLtAGZKKCgU5YAA7O75Zuj5c
OZ6OfqBLoIpzzPgLHp1+WfpCxGX4xWHY7uonat4DvBIGbHYx9hJrzf8UiIoOOTOg
EE3wiZvUnBVCqZwDZ//HlAv+xgNu6blmCixFMSJOATpx5ZqQ7V0D3sY/AeYy5GOx
Zycf2Rqo1Wz3odDdKyM9V77qJaOmavD5ceeNFAwZ4M6IKyxUtqq+GGTty6etd0+K
rwqaM9/ndD09U19XwsrFn+3YbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIK1a6+g
f4MG0EkDlP/2/1WtFnVtMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE
RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjRGRTYvQkIwOTU4MkM3REQ0MTFFQTk0QkVBRjc5QzRGOUFFMDIvN0UwQTRDRjA3
REQ1MTFFQTkwNkEzRTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnNm8DBABnQ6cwDQYJKoZIhvcNAQELBQADggEBAHYfjhX4
Ok7TqgAesJ3y6v8nh79kF9yqvIWAsEfNGoIk2iRhPJiflklzwETGK7SchC2XMVm8
TSF20y5v/40W6aLtTDsEjl1F1eF1wPtMscrI/PIdC6SB8/PITLVJIzNtpfz0LFye
QvPRZNUmbRY+zmS+GspAeOhWgXN5eB5gk63CGOlTpnMFlqPr5aN9SdfBAKveJgSe
30u9s+zBAPxMkIZKvmX/1R7aYS24lCNZHRcqq+YdOFEnIOEsUCrxkDfio5FFycCe
jd/xjH2Fhk8YuzUMUW1ShUNi3Hilq4Paj7DokIRKWXYNUH784JagmzvbN6glkH9d
dhiDOqCUkvgV+Uk=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:07:37 2025 by rpki-client