Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/EDC6896617B611F08E260814C4F9AE02.roa
File:                     EDC6896617B611F08E260814C4F9AE02.roa (raw, json)
Hash identifier:          bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=
Subject key identifier:   B8:89:C0:CE:B8:7B:37:00:9E:C4:65:62:ED:5B:3A:9F:A1:BC:3F:34
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       057A
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/EDC6896617B611F08E260814C4F9AE02.roa
Signing time:             Fri 15 Aug 2025 00:05:26 +0000
ROA not before:           Fri 15 Aug 2025 00:05:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     210110
IP address blocks:        103.170.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug 15 00:05:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689e79c6-a74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:63:ef:f1:5b:3f:c0:d8:64:7c:cc:cd:e2:
                    ed:2d:18:00:cd:6e:f8:84:8f:94:94:11:74:d6:04:
                    e1:2e:80:88:55:ad:9d:df:7f:f8:65:5d:f2:6e:e6:
                    f0:ba:ac:ca:3d:c2:b4:81:17:da:fa:3b:5b:4b:05:
                    f9:f4:59:ab:62:f7:73:66:bf:8f:a5:b3:21:62:3b:
                    55:cb:c0:6a:65:5d:e1:a5:ef:9f:46:6b:b1:8a:53:
                    54:de:ff:4a:e7:1f:33:81:d1:3c:c4:b0:5a:b8:21:
                    c4:6d:6b:f0:e4:26:72:dc:e5:d2:9b:66:c3:bc:c0:
                    b1:f8:b4:47:bc:66:a7:fd:a5:55:5c:8f:05:d6:f0:
                    4b:32:a4:6d:0b:99:02:44:c2:e6:c8:10:83:c3:86:
                    1a:69:e1:5a:bf:10:a6:34:47:3a:8e:45:f1:36:8c:
                    92:7a:ce:44:24:66:8b:49:07:26:27:f8:8f:70:67:
                    3a:8e:4c:3a:28:7e:82:51:4d:f8:80:04:25:a9:24:
                    e9:4c:27:3a:71:3d:8e:f3:81:b1:99:b5:d5:4c:c5:
                    df:56:40:80:12:dd:a9:23:35:bd:8e:54:28:a4:a8:
                    3c:ca:5f:92:51:20:63:e7:18:dd:6b:00:c1:af:9b:
                    cb:e0:0a:8a:f0:5a:79:ba:3c:f7:30:b9:ee:c8:50:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:C0:CE:B8:7B:37:00:9E:C4:65:62:ED:5B:3A:9F:A1:BC:3F:34
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/EDC6896617B611F08E260814C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:56:00:49:a5:a3:61:4f:68:5e:2d:e5:cb:af:b4:b3:65:51:
         c4:27:9d:2e:36:ea:a4:53:65:28:0c:f2:14:cb:d8:4f:fb:f3:
         ef:12:8a:99:66:9e:c2:ee:19:8a:f9:7d:89:83:d6:13:8c:e8:
         ad:52:bb:bf:32:7d:65:ed:b7:36:9d:43:89:5a:f2:b1:09:29:
         4a:39:36:7e:44:d7:84:32:3f:ba:7c:0c:2d:5c:7e:02:02:82:
         d2:d5:c3:d8:65:94:00:61:e3:cc:9c:9a:1b:1f:3b:d3:36:ef:
         fb:ca:86:3f:7c:05:d1:fc:47:c0:46:e8:06:37:3d:ec:85:e6:
         86:e0:97:e6:f4:95:12:c4:c3:67:f9:2a:3d:cb:51:2a:fa:0e:
         41:0d:9c:05:4f:3a:c2:73:89:14:70:89:40:0c:c9:3b:25:e3:
         db:d0:4c:0a:0c:dc:1e:34:10:2b:2f:99:bb:25:a6:c2:b4:d9:
         f4:a6:be:cb:d9:ae:47:41:08:cc:f9:cd:6b:cb:ce:aa:53:c7:
         d8:41:a2:78:23:02:2f:a8:6a:95:de:fe:57:68:c7:e3:8b:ef:
         fd:40:15:b5:34:2f:25:db:e8:0e:f4:d6:d6:77:44:87:e0:b4:
         e4:80:4b:5d:f9:4e:31:5c:c7:2b:a1:be:f4:9f:27:9c:20:72:
         d5:f9:c7:e8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2
RDFEMDI1RTEwHhcNMjUwODE1MDAwNTI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODllNzljNi1hNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyr9j7/FbP8DYZHzMzeLtLRgAzW74hI+UlBF01gThLoCIVa2d33/4ZV3ybubw
uqzKPcK0gRfa+jtbSwX59FmrYvdzZr+PpbMhYjtVy8BqZV3hpe+fRmuxilNU3v9K
5x8zgdE8xLBauCHEbWvw5CZy3OXSm2bDvMCx+LRHvGan/aVVXI8F1vBLMqRtC5kC
RMLmyBCDw4YaaeFavxCmNEc6jkXxNoySes5EJGaLSQcmJ/iPcGc6jkw6KH6CUU34
gAQlqSTpTCc6cT2O84GxmbXVTMXfVkCAEt2pIzW9jlQopKg8yl+SUSBj5xjdawDB
r5vL4AqK8Fp5ujz3MLnuyFCsuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLiJwM64
ezcAnsRlYu1bOp+hvD80MB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw
MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI4RTMvNTM5M0MwRUUwMDI2MTFFQ0E0MDYxNjE0QzRGOUFFMDIvRURDNjg5NjYx
N0I2MTFGMDhFMjYwODE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnqkgwDQYJKoZIhvcNAQELBQADggEBAAVWAEmlo2FPaF4t
5cuvtLNlUcQnnS426qRTZSgM8hTL2E/78+8SiplmnsLuGYr5fYmD1hOM6K1Su78y
fWXttzadQ4la8rEJKUo5Nn5E14QyP7p8DC1cfgICgtLVw9hllABh48ycmhsfO9M2
7/vKhj98BdH8R8BG6AY3PeyF5obgl+b0lRLEw2f5Kj3LUSr6DkENnAVPOsJziRRw
iUAMyTsl49vQTAoM3B40ECsvmbslpsK02fSmvsvZrkdBCMz5zWvLzqpTx9hBongj
Ai+oapXe/ldox+OL7/1AFbU0LyXb6A701tZ3RIfgtOSAS135TjFcxyuhvvSfJ5wg
ctX5x+g=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:04 2025 by rpki-client