Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa
File:                     C5639A24E0F511EABB96D531C4F9AE02.roa (raw, json)
Hash identifier:          DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=
Subject key identifier:   13:EE:0B:7E:41:D3:9F:D4:9D:4B:E6:AC:22:A1:57:E6:6D:F6:D4:C6
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       080D
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa
Signing time:             Fri 18 Apr 2025 21:23:39 +0000
ROA not before:           Fri 18 Apr 2025 21:23:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.152.248.0/24 maxlen: 24
                          103.152.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Apr 18 21:23:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6802c2db-0a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:27:52:26:87:ea:d3:10:a2:a5:d3:77:2c:
                    36:17:c0:f9:32:5c:d7:8f:09:20:45:0a:5c:79:c7:
                    5c:26:11:f6:16:52:96:cf:98:0b:e4:15:3f:db:b6:
                    74:07:b9:4a:c2:a9:3f:f1:8f:4d:a3:5f:6d:19:0b:
                    c9:f1:b3:26:77:f5:f1:12:7b:65:46:d2:b8:e6:17:
                    4e:23:5f:af:6b:ee:5b:4f:c6:46:b8:95:82:d2:d6:
                    39:2c:7f:87:67:dd:9c:ab:83:3c:bc:c0:0a:6f:8d:
                    a2:1a:d9:a1:79:4d:9b:08:05:60:b1:ca:32:f3:63:
                    67:64:96:f3:d3:bf:6f:1e:ae:ca:ff:c5:d9:48:1f:
                    fa:3c:f9:46:e4:1f:0f:97:6e:37:fd:fa:91:dd:74:
                    4f:cb:67:a3:ae:3c:c2:02:1e:47:37:02:93:dc:22:
                    c1:a5:ee:59:f7:e2:26:ae:13:8c:f2:f7:0d:ee:d4:
                    dd:56:1c:0a:b4:b9:34:0c:87:c7:57:83:8c:54:48:
                    69:a8:a5:25:6d:ed:59:3a:74:4d:16:4f:cb:2b:6e:
                    6d:91:8a:8c:85:b3:2e:4a:e5:23:0c:1e:71:81:af:
                    bd:ae:b7:fb:ef:7a:08:27:b9:e7:fe:90:fa:fd:49:
                    98:11:fb:b0:cb:26:fb:68:d0:63:69:49:16:2b:ac:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EE:0B:7E:41:D3:9F:D4:9D:4B:E6:AC:22:A1:57:E6:6D:F6:D4:C6
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:66:e7:0d:d8:8d:0a:9e:9c:cd:49:99:22:11:5f:33:8d:60:
         d5:b8:76:ad:26:ba:10:21:8b:12:d1:b8:98:d9:6c:a8:67:74:
         2c:c9:01:69:72:a6:fa:77:0c:a2:44:db:05:d9:f1:8b:cc:58:
         b6:fe:a7:0c:21:f0:54:72:78:a0:2b:e7:2a:5d:60:c5:9a:f3:
         28:6e:80:d0:12:ac:73:bc:19:e1:13:f1:e3:9c:0b:3f:08:a0:
         e9:f7:64:38:c1:ec:f5:d2:3e:98:fd:15:46:00:25:3e:e3:3f:
         e4:8d:83:e2:ff:1b:f3:62:80:a1:b3:a9:7f:30:e3:8e:fe:f9:
         3d:11:a7:31:e3:19:1f:25:01:19:6d:80:4c:0e:26:78:7c:80:
         41:0c:f3:2a:61:9a:dd:b6:ff:3f:6f:0a:ce:85:64:96:cb:ac:
         93:f5:41:d9:9b:77:c0:88:27:c3:c0:3c:6f:5b:4e:a2:77:96:
         d4:a4:ac:6e:45:fc:af:e0:e3:ca:e6:fc:b2:70:6b:10:b9:6b:
         12:b4:5c:ab:bb:75:86:9c:33:69:52:fa:81:68:80:0d:ac:c9:
         2e:84:4e:6b:49:0f:ae:8a:50:43:97:d3:8a:d0:8a:b7:61:8d:
         97:a1:aa:e7:05:a8:eb:a1:a2:91:e3:0e:15:5e:c9:96:42:ff:
         bb:6d:cb:0a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2
OTQ5RUJFQzIwHhcNMjUwNDE4MjEyMzM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAyYzJkYi0wYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4V0nUiaH6tMQoqXTdyw2F8D5MlzXjwkgRQpcecdcJhH2FlKWz5gL5BU/27Z0
B7lKwqk/8Y9No19tGQvJ8bMmd/XxEntlRtK45hdOI1+va+5bT8ZGuJWC0tY5LH+H
Z92cq4M8vMAKb42iGtmheU2bCAVgscoy82NnZJbz079vHq7K/8XZSB/6PPlG5B8P
l243/fqR3XRPy2ejrjzCAh5HNwKT3CLBpe5Z9+ImrhOM8vcN7tTdVhwKtLk0DIfH
V4OMVEhpqKUlbe1ZOnRNFk/LK25tkYqMhbMuSuUjDB5xga+9rrf773oIJ7nn/pD6
/UmYEfuwyyb7aNBjaUkWK6wsuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBPuC35B
05/UnUvmrCKhV+Zt9tTGMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE
RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJGRTUvOURBRjQ4NkVEREVCMTFFQUIzMEVEOTIxQzRGOUFFMDIvQzU2MzlBMjRF
MEY1MTFFQUJCOTZENTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmPgwDQYJKoZIhvcNAQELBQADggEBAIVm5w3YjQqenM1J
mSIRXzONYNW4dq0muhAhixLRuJjZbKhndCzJAWlypvp3DKJE2wXZ8YvMWLb+pwwh
8FRyeKAr5ypdYMWa8yhugNASrHO8GeET8eOcCz8IoOn3ZDjB7PXSPpj9FUYAJT7j
P+SNg+L/G/NigKGzqX8w447++T0RpzHjGR8lARltgEwOJnh8gEEM8yphmt22/z9v
Cs6FZJbLrJP1Qdmbd8CIJ8PAPG9bTqJ3ltSkrG5F/K/g48rm/LJwaxC5axK0XKu7
dYacM2lS+oFogA2syS6ETmtJD66KUEOX04rQirdhjZehqucFqOuhopHjDhVeyZZC
/7ttywo=
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:39:52 2025 by rpki-client on console.sobornost.net