Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
File:                     99C51F96DA6D11EC86CE4D59C4F9AE02.roa (raw, json)
Hash identifier:          nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=
Subject key identifier:   7A:AC:19:9F:0E:39:85:42:E5:E2:11:B5:E3:4C:69:8F:D7:2F:73:8F
Certificate issuer:       /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial:       02FB
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
Signing time:             Sun 25 May 2025 01:08:05 +0000
ROA not before:           Sun 25 May 2025 01:08:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149817
IP address blocks:        103.187.8.0/24 maxlen: 24
                          2001:df0:b3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 01:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
        Validity
            Not Before: May 25 01:08:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68326d75-20ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:ca:97:b6:00:01:8d:a0:f7:b7:d6:2f:e4:
                    fe:70:41:db:fd:0b:94:48:c9:b4:f9:f8:47:e2:b0:
                    d6:a5:bd:ed:24:49:02:89:98:c6:85:19:83:4c:d2:
                    f6:0b:5e:90:54:b0:2f:1d:87:16:62:c8:47:96:59:
                    4d:6e:dc:54:8f:20:7d:b5:b0:bd:33:11:91:b4:c2:
                    ed:ac:1c:51:47:5b:3b:b8:31:cc:b7:98:ec:dd:0b:
                    2b:74:21:c4:97:76:f9:b5:50:f0:38:03:4b:7f:37:
                    09:77:28:b5:eb:c1:7a:ef:e6:93:a8:72:cf:b2:20:
                    cc:d2:d7:b8:d6:2f:80:07:c0:81:d3:31:11:16:da:
                    18:75:56:42:86:36:71:68:f3:42:6a:1f:c3:a5:e8:
                    d8:06:e0:87:53:60:be:cb:79:63:8b:6d:bd:ff:0a:
                    5d:be:fc:d6:50:19:48:71:24:3d:78:1a:88:e5:db:
                    fc:e1:3b:6a:62:ad:c3:90:1b:16:4e:c6:f8:85:17:
                    aa:1a:4f:19:b9:84:66:49:bb:1a:7a:ac:e3:0a:cd:
                    cb:85:f3:99:2e:2a:25:8b:15:13:f3:db:16:66:78:
                    4c:8f:e9:c7:08:36:e7:43:a5:bc:a4:b8:d1:43:b5:
                    9f:fc:dc:84:c2:f7:3c:33:82:f4:63:23:6d:f6:5b:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AC:19:9F:0E:39:85:42:E5:E2:11:B5:E3:4C:69:8F:D7:2F:73:8F
            X509v3 Authority Key Identifier:
                keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.8.0/24
                IPv6:
                  2001:df0:b3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:34:8f:2c:bf:17:33:af:9f:e9:57:11:72:c6:ac:64:9e:06:
         80:da:a0:9a:9b:99:8c:5f:9b:bc:52:99:65:e7:b2:81:db:b1:
         f3:e0:9e:73:36:3d:04:2c:a8:c7:f0:2f:b9:b6:dd:96:0f:20:
         8f:3e:25:96:3c:e6:6a:11:0c:11:55:01:7e:00:0f:7d:14:b2:
         f9:35:34:fe:7f:13:a4:28:17:1b:d2:06:5f:1d:03:5a:cc:dc:
         68:af:12:0c:1c:cd:17:35:c5:39:f2:9c:bf:5a:8c:e8:ac:78:
         7b:f6:e8:3a:db:43:4f:77:e1:10:ea:a6:78:c2:be:83:df:79:
         77:94:b0:0c:af:8b:92:52:34:d3:4a:10:46:da:5b:b8:2a:eb:
         07:f3:fc:fa:ea:3e:bb:7b:15:77:35:fa:ef:de:4c:0c:3b:26:
         62:8f:d9:9a:c5:84:b0:29:95:5c:62:c3:7a:cc:ab:40:6a:02:
         34:d0:00:e2:4e:8d:0f:95:d7:27:4d:fa:7b:5d:e7:98:ba:07:
         57:80:32:a9:f7:f4:1d:bb:c0:34:5e:de:b7:25:2d:09:c6:41:
         aa:97:05:c4:58:5b:e6:eb:ae:f9:d1:56:fe:36:78:0d:52:44:
         97:49:70:2c:6d:05:9d:95:b2:cc:ac:9f:c5:d4:15:91:70:6d:
         7d:e6:56:2b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx
MTRGNDBDQTgwHhcNMjUwNTI1MDEwODA1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODMyNmQ3NS0yMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGnKl7YAAY2g97fWL+T+cEHb/QuUSMm0+fhH4rDWpb3tJEkCiZjGhRmDTNL2
C16QVLAvHYcWYshHlllNbtxUjyB9tbC9MxGRtMLtrBxRR1s7uDHMt5js3QsrdCHE
l3b5tVDwOANLfzcJdyi168F67+aTqHLPsiDM0te41i+AB8CB0zERFtoYdVZChjZx
aPNCah/DpejYBuCHU2C+y3lji229/wpdvvzWUBlIcSQ9eBqI5dv84TtqYq3DkBsW
Tsb4hReqGk8ZuYRmSbsaeqzjCs3LhfOZLiolixUT89sWZnhMj+nHCDbnQ6W8pLjR
Q7Wf/NyEwvc8M4L0YyNt9lu9nQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHqsGZ8O
OYVC5eIRteNMaY/XL3OPMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB
NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE
S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjUzQTUvNTAwQ0ZFOThEQTY2MTFFQzgwREZFNzM2QzRGOUFFMDIvOTlDNTFGOTZE
QTZEMTFFQzg2Q0U0RDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnuwgwDwQCAAIwCQMHACABDfCzwDANBgkqhkiG9w0BAQsF
AAOCAQEAFDSPLL8XM6+f6VcRcsasZJ4GgNqgmpuZjF+bvFKZZeeygdux8+CeczY9
BCyox/Avubbdlg8gjz4lljzmahEMEVUBfgAPfRSy+TU0/n8TpCgXG9IGXx0DWszc
aK8SDBzNFzXFOfKcv1qM6Kx4e/boOttDT3fhEOqmeMK+g995d5SwDK+LklI000oQ
RtpbuCrrB/P8+uo+u3sVdzX6795MDDsmYo/ZmsWEsCmVXGLDesyrQGoCNNAA4k6N
D5XXJ036e13nmLoHV4Ayqff0HbvANF7etyUtCcZBqpcFxFhb5uuu+dFW/jZ4DVJE
l0lwLG0FnZWyzKyfxdQVkXBtfeZWKw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:43 2025 by rpki-client