Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
File:                     2F74D644ABC711EF9CD3CE81C4F9AE02.roa (raw, json)
Hash identifier:          wmmIaxLCg5K0uFc5rnys8oy6i0z0O/e/VdhovEca3nw=
Subject key identifier:   CD:E8:C6:E9:17:24:C4:A5:15:C4:01:DA:A1:95:05:CC:7F:15:AB:B1
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       0430
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
Signing time:             Fri 11 Apr 2025 00:35:01 +0000
ROA not before:           Fri 11 Apr 2025 00:35:01 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139820
IP address blocks:        103.148.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Apr 11 00:35:01 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f863b5-8764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:0b:d1:0a:cc:70:4b:7e:2d:63:7c:61:04:
                    b3:55:07:6d:55:58:fd:40:0e:0c:69:b3:95:6a:47:
                    0a:94:b3:bb:c6:66:f4:a5:09:cf:00:45:5d:45:d3:
                    77:b8:80:db:d1:af:17:39:6f:6f:9b:c7:3e:54:17:
                    a2:07:ef:2b:f9:a9:34:17:1e:d4:b7:0a:1d:04:5e:
                    d1:23:e2:c0:0e:23:54:91:b3:15:96:f9:24:4d:8d:
                    e1:3e:51:b5:70:9d:47:50:75:78:18:3a:fc:39:99:
                    0e:71:aa:6d:50:22:60:44:9d:58:49:f3:9a:a5:22:
                    49:eb:8c:8e:af:21:e2:0c:b3:b2:14:1b:56:29:e4:
                    2e:52:d3:b2:2f:b1:3a:b1:54:99:52:9e:c4:5c:84:
                    a8:95:43:fe:a9:49:9f:2e:f0:a5:db:d0:df:bd:c7:
                    83:bf:14:91:4b:76:f9:89:0c:1c:a1:40:52:eb:de:
                    10:58:ed:d0:05:ba:eb:9a:81:d3:b0:f9:fc:63:f7:
                    73:a1:5b:cb:e7:1a:14:50:b2:41:43:79:30:25:87:
                    d7:2b:ec:72:45:65:15:d4:d6:3b:28:81:06:c4:c7:
                    f2:36:a6:9f:0a:2e:3d:59:dd:74:d3:5e:7d:a8:ad:
                    9e:3f:98:de:7a:49:8b:0e:7f:c0:10:e4:8c:5b:ce:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:C6:E9:17:24:C4:A5:15:C4:01:DA:A1:95:05:CC:7F:15:AB:B1
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:cd:51:23:15:54:db:3d:3e:3e:94:30:1f:84:53:20:eb:
         c2:1a:ea:47:1d:52:27:4d:9a:f7:59:06:18:d5:ac:0a:3a:96:
         d1:94:46:da:4d:ea:40:01:ac:95:40:b0:65:24:e1:71:9c:b7:
         04:98:52:86:59:c1:48:aa:c8:89:65:32:96:7e:e5:db:68:18:
         82:95:23:66:03:f7:dc:cd:8f:e2:31:cd:60:43:41:9a:f5:c0:
         e6:0c:d8:6c:99:b9:80:f9:f2:b9:4c:6d:47:1b:33:7f:b2:8d:
         6b:3d:19:9c:35:6b:e1:43:2f:b9:1d:49:55:be:ab:32:ae:3d:
         cd:4f:ec:53:7c:6a:a4:8b:5f:4d:99:65:78:17:03:34:6e:db:
         b4:f3:1a:38:e6:6f:e8:c5:08:e0:af:6f:79:3c:74:a6:53:58:
         6e:bc:f6:f7:6a:02:a0:ed:13:5e:1f:af:f2:8e:4d:79:e2:16:
         4a:96:45:c3:e8:34:23:ec:08:15:7d:c8:77:d1:4a:bf:dd:1d:
         72:36:a6:d3:7c:88:5c:43:95:fc:ee:ba:9f:ec:00:74:68:7f:
         e4:68:f8:c5:20:46:da:66:8b:f6:c9:0c:a4:9f:20:54:41:41:
         f1:30:8e:a3:12:e2:37:bd:e5:cf:57:0e:12:22:84:7b:20:56:
         34:9e:7b:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB
MzdDRjNFNDcwHhcNMjUwNDExMDAzNTAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y4NjNiNS04NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfEL0QrMcEt+LWN8YQSzVQdtVVj9QA4MabOVakcKlLO7xmb0pQnPAEVdRdN3
uIDb0a8XOW9vm8c+VBeiB+8r+ak0Fx7UtwodBF7RI+LADiNUkbMVlvkkTY3hPlG1
cJ1HUHV4GDr8OZkOcaptUCJgRJ1YSfOapSJJ64yOryHiDLOyFBtWKeQuUtOyL7E6
sVSZUp7EXISolUP+qUmfLvCl29DfvceDvxSRS3b5iQwcoUBS694QWO3QBbrrmoHT
sPn8Y/dzoVvL5xoUULJBQ3kwJYfXK+xyRWUV1NY7KIEGxMfyNqafCi49Wd100159
qK2eP5jeekmLDn/AEOSMW84U6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFM3oxukX
JMSlFcQB2qGVBcx/FauxMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE
NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTM4MTQvMjU0MkI0MjI1RDcxMTFFQzk5MDg5MTREQzRGOUFFMDIvMkY3NEQ2NDRB
QkM3MTFFRjlDRDNDRTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlFwwDQYJKoZIhvcNAQELBQADggEBACGdzVEjFVTbPT4+
lDAfhFMg68Ia6kcdUidNmvdZBhjVrAo6ltGURtpN6kABrJVAsGUk4XGctwSYUoZZ
wUiqyIllMpZ+5dtoGIKVI2YD99zNj+IxzWBDQZr1wOYM2GyZuYD58rlMbUcbM3+y
jWs9GZw1a+FDL7kdSVW+qzKuPc1P7FN8aqSLX02ZZXgXAzRu27TzGjjmb+jFCOCv
b3k8dKZTWG689vdqAqDtE14fr/KOTXniFkqWRcPoNCPsCBV9yHfRSr/dHXI2ptN8
iFxDlfzuup/sAHRof+Ro+MUgRtpmi/bJDKSfIFRBQfEwjqMS4je95c9XDhIihHsg
VjSeexw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net