Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/951CA536C1B511EF87BCEA11C4F9AE02.roa
File:                     951CA536C1B511EF87BCEA11C4F9AE02.roa (raw, json)
Hash identifier:          GqSqhnn63EZ4p4JuVF5u2QSaZSQqUmP27m/tmKbsSUg=
Subject key identifier:   E7:81:FB:67:9F:F2:C3:2E:5A:B0:88:3C:9B:0D:1F:82:2E:96:3B:52
Certificate issuer:       /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial:       0BC2
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/951CA536C1B511EF87BCEA11C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 19:38:43 +0000
ROA not before:           Tue 02 Sep 2025 19:38:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150401
IP address blocks:        103.112.177.0/24 maxlen: 24
                          103.112.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
                          rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010 (0xbc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
        Validity
            Not Before: Sep  2 19:38:43 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b747c3-2ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:d7:67:9c:03:cf:f4:15:ab:9c:27:63:16:
                    e4:d1:50:da:71:57:69:04:b5:c6:72:63:88:98:95:
                    1f:e3:ab:2b:f7:d0:80:54:d9:40:53:a6:40:4d:92:
                    4f:d0:cb:ef:d1:15:db:b1:03:c2:45:a8:ff:d0:c6:
                    14:ea:6e:dc:af:a4:0e:72:7d:c5:97:11:73:b5:fe:
                    50:75:13:31:f1:43:9f:c8:be:af:a5:b1:d5:a8:9a:
                    6c:71:a4:97:d6:ed:8d:6c:f3:8b:f0:5e:0e:68:01:
                    c4:9d:1a:5a:c8:74:a5:f6:3f:68:3a:38:fc:86:bf:
                    1d:93:16:cc:f1:2d:ad:09:d5:c1:30:bf:99:8f:07:
                    d8:50:1f:79:3f:99:25:03:93:54:45:a2:79:81:1e:
                    c0:fc:58:a1:e7:db:5a:31:e8:84:08:3e:e9:78:49:
                    56:e2:be:c7:70:c0:77:52:7f:94:aa:ca:0b:fb:63:
                    95:9e:5d:03:25:22:9f:fb:0e:cb:3e:87:2f:f4:74:
                    f2:2e:cc:ee:82:5f:e5:d1:46:a8:47:24:e3:88:d2:
                    3e:e8:a5:e7:07:f2:13:04:fd:a8:46:10:06:e0:65:
                    3b:07:ef:bf:df:0a:45:1a:89:10:98:8f:d0:f0:dc:
                    1a:17:a4:1e:56:56:e0:d1:9d:71:4b:cc:7f:bc:98:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:81:FB:67:9F:F2:C3:2E:5A:B0:88:3C:9B:0D:1F:82:2E:96:3B:52
            X509v3 Authority Key Identifier:
                keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/951CA536C1B511EF87BCEA11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.177.0-103.112.179.255

    Signature Algorithm: sha256WithRSAEncryption
         20:9c:14:d9:d4:18:c8:29:aa:d6:9c:5a:cd:4f:3d:ff:0f:ad:
         29:64:49:03:df:64:f0:a1:56:81:47:3e:04:ff:aa:0f:3d:d7:
         83:2c:6f:3d:35:35:5d:b6:59:e5:6b:67:5b:ca:52:8c:d4:8e:
         7b:c2:96:91:04:ac:07:b0:46:5f:eb:42:c8:c9:82:a8:0c:da:
         ed:98:b1:e8:f7:f4:4f:8a:ec:1e:72:09:e1:c8:43:c1:17:ab:
         5f:b4:9e:d8:a8:18:e3:05:2b:c4:80:21:2e:f2:35:3a:96:23:
         28:56:15:e4:a0:dc:b3:a3:c3:cb:36:d8:16:b2:60:43:c2:be:
         39:c3:72:6d:59:7b:2f:44:f2:39:5f:0c:4f:6b:1e:7f:52:86:
         3e:cb:68:14:4c:f4:a7:8e:38:74:85:2b:3c:79:32:b7:1f:92:
         f6:db:1e:9b:d7:d7:48:c5:f3:c2:d4:be:ce:03:ff:74:ec:10:
         49:2d:76:c9:82:9e:82:51:56:d5:f2:76:48:ed:91:bf:d8:35:
         4e:72:24:56:c1:d1:ef:77:0d:98:1d:7a:11:35:eb:e9:1f:25:
         b2:a8:83:1f:fa:85:47:f6:68:51:5d:94:14:d7:c0:b0:23:b6:
         af:62:0e:75:ce:81:f2:aa:d2:60:97:f6:55:aa:f9:72:47:af:
         c2:70:87:5c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF
QTQ3NDUzNDYwHhcNMjUwOTAyMTkzODQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3NDdjMy0yZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzhzXZ5wDz/QVq5wnYxbk0VDacVdpBLXGcmOImJUf46sr99CAVNlAU6ZATZJP
0Mvv0RXbsQPCRaj/0MYU6m7cr6QOcn3FlxFztf5QdRMx8UOfyL6vpbHVqJpscaSX
1u2NbPOL8F4OaAHEnRpayHSl9j9oOjj8hr8dkxbM8S2tCdXBML+ZjwfYUB95P5kl
A5NURaJ5gR7A/Fih59taMeiECD7peElW4r7HcMB3Un+UqsoL+2OVnl0DJSKf+w7L
Pocv9HTyLszugl/l0UaoRyTjiNI+6KXnB/ITBP2oRhAG4GU7B++/3wpFGokQmI/Q
8NwaF6QeVlbg0Z1xS8x/vJhU9QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOeB+2ef
8sMuWrCIPJsNH4IuljtSMB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB
RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV
MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E2OUUvRkI5RkI5M0EyQUU2MTFFQUFCRDU2QjE0QzRGOUFFMDIvOTUxQ0E1MzZD
MUI1MTFFRjg3QkNFQTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAGdwsQMEAmdwsDANBgkqhkiG9w0BAQsFAAOCAQEAIJwU
2dQYyCmq1pxazU89/w+tKWRJA99k8KFWgUc+BP+qDz3XgyxvPTU1XbZZ5WtnW8pS
jNSOe8KWkQSsB7BGX+tCyMmCqAza7Zix6Pf0T4rsHnIJ4chDwRerX7Se2KgY4wUr
xIAhLvI1OpYjKFYV5KDcs6PDyzbYFrJgQ8K+OcNybVl7L0TyOV8MT2sef1KGPsto
FEz0p444dIUrPHkytx+S9tsem9fXSMXzwtS+zgP/dOwQSS12yYKeglFW1fJ2SO2R
v9g1TnIkVsHR73cNmB16ETXr6R8lsqiDH/qFR/ZoUV2UFNfAsCO2r2IOdc6B8qrS
YJf2Var5ckevwnCHXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:27 2025 by rpki-client