Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
File:                     E52CB968094711EDA5B20C0AC4F9AE02.roa (raw, json)
Hash identifier:          9v/ZeGZKD58JIKPG+TPtlKNDrryBJF2rWiKbvOcAj4I=
Subject key identifier:   52:09:D7:71:F7:6E:F8:F8:37:61:EC:D0:C1:94:C8:34:23:75:F3:B6
Certificate issuer:       /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Certificate serial:       02D9
Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
Signing time:             Sun 05 Oct 2025 01:56:49 +0000
ROA not before:           Sun 05 Oct 2025 01:56:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9893
IP address blocks:        203.31.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
        Validity
            Not Before: Oct  5 01:56:49 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e1d060-5bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:24:d1:c5:dc:d6:e2:d4:8b:b5:51:ee:dc:
                    50:22:b6:df:c8:b9:33:34:8e:93:aa:97:6f:98:b3:
                    ef:41:df:40:42:4b:16:9c:72:19:6b:e7:1c:28:81:
                    81:b0:41:d1:82:ae:e5:3e:1d:d3:2e:10:f5:6a:14:
                    8b:71:eb:d2:57:7d:0a:ad:39:54:d2:d5:62:0e:00:
                    fe:57:15:8e:8d:59:c3:86:24:de:40:9c:91:49:8b:
                    f0:0a:f0:f4:60:a9:50:06:77:c4:4b:52:55:0f:f5:
                    b2:6d:8d:41:e1:c9:60:9c:38:2d:a4:71:b8:35:51:
                    cd:3c:82:56:21:c4:f5:26:9c:ac:fc:a8:b8:c8:97:
                    c9:3b:5c:bc:f8:e0:17:ff:09:be:c8:02:c2:2b:61:
                    14:4e:c1:db:fa:e3:c5:6d:5b:00:d2:37:13:28:6d:
                    d2:1a:0d:77:66:f8:e0:e5:16:94:46:a4:5d:f7:a5:
                    97:d3:7f:24:5a:3d:c3:09:94:42:49:cf:b9:6b:07:
                    43:95:99:25:9f:c7:89:cc:05:23:2a:ed:c8:04:ee:
                    25:32:b1:9a:ba:a7:22:8c:f4:d7:04:43:23:20:37:
                    98:0d:42:31:35:70:62:dd:d4:ec:4b:9f:9a:6c:2b:
                    7f:bb:1a:36:7d:e5:a4:60:6b:a1:95:67:77:4a:f3:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:D7:71:F7:6E:F8:F8:37:61:EC:D0:C1:94:C8:34:23:75:F3:B6
            X509v3 Authority Key Identifier:
                keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:7a:8f:d8:a4:3c:55:d0:1e:6c:c2:66:ed:f8:3a:e5:03:
         ca:48:55:8c:7e:a0:27:af:6f:ef:88:30:e9:dc:bd:e7:5d:44:
         12:10:7c:ce:30:94:ab:79:90:18:4c:b3:c2:07:21:9d:a2:38:
         aa:bf:d4:76:47:a5:ba:2a:8c:fd:53:eb:9f:4b:6f:e9:df:1b:
         a9:dd:cc:a9:51:a1:7c:b1:eb:13:87:26:6d:f1:af:e3:c1:df:
         bb:46:3e:95:65:4d:b8:98:a4:0e:c4:6d:62:8a:05:a9:8e:6b:
         6f:b6:6b:a5:c2:4c:52:56:b8:bb:fd:64:00:56:44:1c:39:aa:
         eb:3f:ec:b8:9a:6c:9e:e5:5b:63:3b:5b:70:dd:2d:22:53:6f:
         4c:38:3d:07:1d:6d:f9:ab:d2:17:10:ce:db:85:ba:fb:d5:06:
         48:84:e8:51:e3:6f:f7:3e:a9:c3:37:4e:24:73:76:e3:68:fd:
         c8:d8:f3:08:59:5b:a3:5d:0c:26:3c:bb:c5:58:f2:6f:49:3b:
         26:d3:d3:80:ad:d6:4d:b6:ca:cd:9b:6a:90:71:40:bc:6c:0a:
         f8:f0:26:6f:bd:a1:dd:70:04:eb:98:19:f2:c3:d8:4b:bd:21:
         da:e3:af:fc:18:b2:bf:04:f7:2a:73:a9:e8:74:85:e6:bb:2c:
         47:be:42:a9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE
QTQ0MDNDQjYwHhcNMjUxMDA1MDE1NjQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGUxZDA2MC01YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlYk0cXc1uLUi7VR7txQIrbfyLkzNI6TqpdvmLPvQd9AQksWnHIZa+ccKIGB
sEHRgq7lPh3TLhD1ahSLcevSV30KrTlU0tViDgD+VxWOjVnDhiTeQJyRSYvwCvD0
YKlQBnfES1JVD/WybY1B4clgnDgtpHG4NVHNPIJWIcT1Jpys/Ki4yJfJO1y8+OAX
/wm+yALCK2EUTsHb+uPFbVsA0jcTKG3SGg13Zvjg5RaURqRd96WX038kWj3DCZRC
Sc+5awdDlZkln8eJzAUjKu3IBO4lMrGauqcijPTXBEMjIDeYDUIxNXBi3dTsS5+a
bCt/uxo2feWkYGuhlWd3SvPKyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFIJ13H3
bvj4N2Hs0MGUyDQjdfO2MB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5
NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM0QjgvQTg2QjM3NUEwOTQ0MTFFRDhERDEwOTcxQzRGOUFFMDIvRTUyQ0I5Njgw
OTQ3MTFFREE1QjIwQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLH1owDQYJKoZIhvcNAQELBQADggEBAIOyeo/YpDxV0B5s
wmbt+DrlA8pIVYx+oCevb++IMOncveddRBIQfM4wlKt5kBhMs8IHIZ2iOKq/1HZH
pboqjP1T659Lb+nfG6ndzKlRoXyx6xOHJm3xr+PB37tGPpVlTbiYpA7EbWKKBamO
a2+2a6XCTFJWuLv9ZABWRBw5qus/7LiabJ7lW2M7W3DdLSJTb0w4PQcdbfmr0hcQ
ztuFuvvVBkiE6FHjb/c+qcM3TiRzduNo/cjY8whZW6NdDCY8u8VY8m9JOybT04Ct
1k22ys2bapBxQLxsCvjwJm+9od1wBOuYGfLD2Eu9Idrjr/wYsr8E9ypzqeh0hea7
LEe+Qqk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:30 2025 by rpki-client