Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E3A0B86070F611EFA4CF2731C4F9AE02.roa
File:                     E3A0B86070F611EFA4CF2731C4F9AE02.roa (raw, json)
Hash identifier:          pAv+dRx1aGgFIyHddbIxGijvD4aztLGF4oGsAvvyRak=
Subject key identifier:   1F:0C:3F:34:FC:CD:C8:F4:5B:B1:D6:3C:32:7D:FE:9A:9B:91:C6:65
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0936
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E3A0B86070F611EFA4CF2731C4F9AE02.roa
Signing time:             Sun 06 Apr 2025 20:30:29 +0000
ROA not before:           Sun 06 Apr 2025 20:30:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151106
IP address blocks:        103.112.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358 (0x936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Apr  6 20:30:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f2e465-3ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:14:33:da:f5:44:77:de:d5:c3:ac:08:56:
                    5f:22:cc:c5:ae:7e:b9:31:0c:4d:b5:ad:c8:c7:40:
                    be:4b:01:02:b6:1b:00:a7:a3:e8:65:b5:86:63:88:
                    99:55:f2:6d:22:d1:9f:16:4b:67:e0:87:65:18:53:
                    47:2e:54:dc:28:9c:b2:6f:a0:23:65:97:a5:6b:48:
                    44:d5:4b:d7:c8:94:a4:c5:20:fc:60:90:3c:9e:a0:
                    23:62:75:d0:55:19:ab:4a:55:06:75:d2:fb:17:ea:
                    46:c5:c7:bd:53:43:b8:e3:f9:9f:e5:10:35:67:34:
                    ac:1e:cc:ec:dd:79:5f:a6:1a:fb:2b:4e:dc:65:5e:
                    b1:8e:a5:30:66:95:fc:c4:7c:1f:87:6d:95:2c:0b:
                    7b:1f:81:e1:c3:75:59:7a:9b:17:ee:e5:26:31:10:
                    6c:70:e6:67:3c:4e:6b:4f:9d:96:5c:24:42:73:d1:
                    6b:c9:21:13:2f:61:de:89:a0:2e:c0:d4:15:76:be:
                    fc:28:70:93:3d:38:ea:d3:48:92:65:ed:78:58:86:
                    ef:ef:0d:bd:bb:95:e4:23:75:36:da:ed:1b:9e:4e:
                    9b:94:3e:2d:80:1a:9d:1d:eb:a2:38:b6:48:29:47:
                    32:9a:e0:98:d8:d1:46:2a:6a:d8:26:f3:21:47:6e:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0C:3F:34:FC:CD:C8:F4:5B:B1:D6:3C:32:7D:FE:9A:9B:91:C6:65
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E3A0B86070F611EFA4CF2731C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b0:01:e3:3a:12:57:68:4d:58:45:be:18:c2:bc:3b:f0:3f:
         d1:1b:01:d8:53:b4:4f:d6:6b:82:82:c6:3d:cc:8c:bd:1d:87:
         b2:12:5d:05:a7:5b:7d:a1:7c:d5:72:2c:3d:1a:0c:22:05:69:
         fc:93:a0:6b:a3:8c:47:a4:7d:fb:19:c4:84:68:8a:3d:70:78:
         7d:05:64:5e:e4:fa:41:3d:d2:a9:34:4d:a6:f5:58:94:19:99:
         f9:60:cc:78:06:36:28:73:aa:05:b7:3a:8e:85:07:f2:ff:62:
         ce:19:69:0f:f5:dc:f7:95:64:80:da:7e:24:8a:be:dd:27:ca:
         ed:76:6b:78:52:ed:3d:c7:01:99:fc:b5:e1:d5:78:fa:7c:38:
         2c:23:de:9c:39:f5:41:18:f3:c4:43:60:39:a4:11:4f:a5:4b:
         8d:e2:9e:42:2c:14:31:9a:f5:f3:b7:b2:1a:ae:68:8b:0b:a6:
         3e:de:81:0c:7c:51:83:bb:b1:c5:97:d2:38:a7:1e:fb:b3:ed:
         9a:55:22:c1:e0:cf:fb:36:38:76:e2:db:98:95:b5:71:d3:b7:
         e4:a2:42:64:1b:e6:c2:76:29:6d:95:b7:c8:dc:c0:a5:38:b0:
         e2:96:28:03:7f:d2:23:03:15:1a:eb:9c:3c:ee:fc:3a:6f:83:
         ac:91:e3:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjUwNDA2MjAzMDI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2YyZTQ2NS0zYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA140UM9r1RHfe1cOsCFZfIszFrn65MQxNta3Ix0C+SwECthsAp6PoZbWGY4iZ
VfJtItGfFktn4IdlGFNHLlTcKJyyb6AjZZela0hE1UvXyJSkxSD8YJA8nqAjYnXQ
VRmrSlUGddL7F+pGxce9U0O44/mf5RA1ZzSsHszs3Xlfphr7K07cZV6xjqUwZpX8
xHwfh22VLAt7H4Hhw3VZepsX7uUmMRBscOZnPE5rT52WXCRCc9FrySETL2HeiaAu
wNQVdr78KHCTPTjq00iSZe14WIbv7w29u5XkI3U22u0bnk6blD4tgBqdHeuiOLZI
KUcymuCY2NFGKmrYJvMhR274hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB8MPzT8
zcj0W7HWPDJ9/pqbkcZlMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvRTNBMEI4NjA3
MEY2MTFFRkE0Q0YyNzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncAEwDQYJKoZIhvcNAQELBQADggEBAKewAeM6EldoTVhF
vhjCvDvwP9EbAdhTtE/Wa4KCxj3MjL0dh7ISXQWnW32hfNVyLD0aDCIFafyToGuj
jEekffsZxIRoij1weH0FZF7k+kE90qk0Tab1WJQZmflgzHgGNihzqgW3Oo6FB/L/
Ys4ZaQ/13PeVZIDafiSKvt0nyu12a3hS7T3HAZn8teHVePp8OCwj3pw59UEY88RD
YDmkEU+lS43inkIsFDGa9fO3shquaIsLpj7egQx8UYO7scWX0jinHvuz7ZpVIsHg
z/s2OHbi25iVtXHTt+SiQmQb5sJ2KW2Vt8jcwKU4sOKWKAN/0iMDFRrrnDzu/Dpv
g6yR4yM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:31 2025 by rpki-client on console.sobornost.net