Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/495B172A8B5711EFBFF2106FC4F9AE02.roa
File:                     495B172A8B5711EFBFF2106FC4F9AE02.roa (raw, json)
Hash identifier:          HvYff+t8FkKqoHlQP17oAIXGJPFKmtzTDxLPGgQVF2c=
Subject key identifier:   A4:D7:C3:83:AF:15:26:D0:B8:2B:25:41:FC:3F:48:4A:95:81:0B:E8
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       BF
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/495B172A8B5711EFBFF2106FC4F9AE02.roa
Signing time:             Tue 19 Aug 2025 05:48:57 +0000
ROA not before:           Tue 19 Aug 2025 05:48:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        203.10.24.0/24 maxlen: 24
                          203.10.25.0/24 maxlen: 24
                          203.10.26.0/24 maxlen: 24
                          203.10.27.0/24 maxlen: 24
                          203.10.28.0/24 maxlen: 24
                          203.10.29.0/24 maxlen: 24
                          203.10.30.0/24 maxlen: 24
                          203.10.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Validity
            Not Before: Aug 19 05:48:57 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68a41049-4fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:9c:78:de:18:82:68:08:ef:0c:df:f6:6e:
                    f4:0b:f1:18:a9:19:df:e7:8e:5e:10:d4:bc:16:6e:
                    3b:ff:d6:99:e6:fa:b5:bc:d2:91:86:80:52:57:7f:
                    24:44:aa:e0:90:27:52:90:8c:15:00:04:af:a5:24:
                    98:36:b8:35:c6:df:2c:8c:88:59:37:78:fd:42:e8:
                    7a:eb:1c:b3:d5:15:52:5f:a7:2d:4b:39:91:5d:c0:
                    6c:a3:1e:63:39:18:1e:b8:a8:dd:46:84:45:00:d4:
                    91:7f:5a:3b:37:74:49:20:03:03:f8:e9:af:23:eb:
                    46:f3:9a:4c:29:03:31:e9:16:e6:da:2c:05:8f:ae:
                    39:5b:6e:7f:3f:bc:b8:cd:7c:1f:d1:fe:f0:9f:37:
                    2e:84:0f:25:12:e2:e5:da:0a:f3:43:ce:26:b4:27:
                    4b:d5:06:ed:d8:6f:f5:1e:1e:50:2f:f6:70:62:9c:
                    dc:75:52:06:06:b6:c5:74:05:5b:18:84:f7:78:1e:
                    b6:e9:1f:95:5c:aa:ce:1f:94:30:c6:29:ca:bd:fa:
                    a5:09:84:03:7b:2d:9f:da:49:a9:23:d5:51:96:44:
                    61:5f:fa:0b:54:c5:a4:6d:47:36:8b:95:05:88:f5:
                    24:b9:a8:d7:a2:f2:73:43:71:b6:00:d7:33:a0:c3:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D7:C3:83:AF:15:26:D0:B8:2B:25:41:FC:3F:48:4A:95:81:0B:E8
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/495B172A8B5711EFBFF2106FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:29:25:a0:32:c1:27:54:1e:a7:f6:2d:54:8e:b7:29:f4:f3:
         df:b2:f7:ff:9b:8a:be:1f:3a:85:00:f5:56:d9:30:14:56:9e:
         93:c3:d2:1b:3f:9c:51:1e:54:c5:a5:d5:34:f7:4a:f4:51:d2:
         2a:af:e8:58:dc:46:d5:67:d7:ac:bc:79:9c:40:bc:f8:7e:ac:
         0e:5f:e2:c5:f2:b8:dd:65:cf:d5:00:c0:3c:af:48:55:5b:17:
         51:31:87:21:78:2b:22:51:20:d9:e9:9e:48:11:88:10:a4:60:
         1b:db:fe:e7:61:e8:a4:83:63:26:21:18:20:39:eb:f0:ed:f2:
         8a:4f:5a:49:a5:6a:1e:cf:85:07:fc:48:0d:68:8d:07:c3:b0:
         78:f1:c6:14:5e:55:83:65:3c:28:c3:85:4b:c1:59:f0:a4:1c:
         5e:07:10:47:38:59:29:30:ee:f0:f4:58:d7:ba:84:7a:4c:33:
         0d:22:fb:0c:a1:a9:84:fe:6c:b6:b3:dc:bd:d8:a6:63:aa:2c:
         56:45:97:13:57:ef:69:a2:1b:be:85:45:92:7d:2c:86:b9:87:
         b1:bd:13:9f:88:87:60:99:c9:8b:59:2f:09:63:51:06:c1:dd:
         86:93:32:f1:de:1d:0a:d1:d5:71:00:25:c2:80:c9:0b:d5:3f:
         53:b0:55:c4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg2MEExMTAvBgNVBAUTKDY1NjI3MTEyRUFFN0IyQzkyRjg5RjdBNzhBNzFBMkE0
RkE5NUY1M0QwHhcNMjUwODE5MDU0ODU3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE0MTA0OS00ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA29CceN4YgmgI7wzf9m70C/EYqRnf545eENS8Fm47/9aZ5vq1vNKRhoBSV38k
RKrgkCdSkIwVAASvpSSYNrg1xt8sjIhZN3j9Quh66xyz1RVSX6ctSzmRXcBsox5j
ORgeuKjdRoRFANSRf1o7N3RJIAMD+OmvI+tG85pMKQMx6Rbm2iwFj645W25/P7y4
zXwf0f7wnzcuhA8lEuLl2grzQ84mtCdL1Qbt2G/1Hh5QL/ZwYpzcdVIGBrbFdAVb
GIT3eB626R+VXKrOH5QwxinKvfqlCYQDey2f2kmpI9VRlkRhX/oLVMWkbUc2i5UF
iPUkuajXovJzQ3G2ANczoMPtbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKTXw4Ov
FSbQuCslQfw/SEqVgQvoMB8GA1UdIwQYMBaAFGVicRLq57LJL4n3p4pxoqT6lfU9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODYwQS9CNTBBM0MyNDhC
NTQxMUVGOTQ3NDcyNDlDNEY5QUUwMi9aV0p4RXVybnNza3ZpZmVuaW5HaXBQcVY5
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pXSnhFdXJuc3NrdmlmZW5pbkdpcFBxVjlUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzg2MEEvQjUwQTNDMjQ4QjU0MTFFRjk0NzQ3MjQ5QzRGOUFFMDIvNDk1QjE3MkE4
QjU3MTFFRkJGRjIxMDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAPLChgwDQYJKoZIhvcNAQELBQADggEBALApJaAywSdUHqf2
LVSOtyn089+y9/+bir4fOoUA9VbZMBRWnpPD0hs/nFEeVMWl1TT3SvRR0iqv6Fjc
RtVn16y8eZxAvPh+rA5f4sXyuN1lz9UAwDyvSFVbF1ExhyF4KyJRINnpnkgRiBCk
YBvb/udh6KSDYyYhGCA56/Dt8opPWkmlah7PhQf8SA1ojQfDsHjxxhReVYNlPCjD
hUvBWfCkHF4HEEc4WSkw7vD0WNe6hHpMMw0i+wyhqYT+bLaz3L3YpmOqLFZFlxNX
72miG76FRZJ9LIa5h7G9E5+Ih2CZyYtZLwljUQbB3YaTMvHeHQrR1XEAJcKAyQvV
P1OwVcQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:40:03 2025 by rpki-client