Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/5CBE3872145C11F0BFD6B347C4F9AE02.roa
File:                     5CBE3872145C11F0BFD6B347C4F9AE02.roa (raw, json)
Hash identifier:          /WHhFE8HR2/iD7xp6rQgZmxwAGaC9m5vwnf8mgyK/js=
Subject key identifier:   07:74:00:97:88:59:F4:63:8E:6D:BD:9C:89:74:04:4C:57:E5:57:4A
Certificate issuer:       /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial:       01C0
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/5CBE3872145C11F0BFD6B347C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 03:52:33 +0000
ROA not before:           Thu 25 Sep 2025 03:52:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55501
IP address blocks:        103.155.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
        Validity
            Not Before: Sep 25 03:52:33 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d4bc81-69f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:5d:8a:aa:9c:d0:4b:37:6d:d0:55:15:8d:
                    a0:a9:ab:74:2f:62:28:2c:1b:25:c6:21:2e:d0:a8:
                    28:ce:69:af:84:bb:f6:9a:d4:96:43:57:fb:bd:fc:
                    0b:de:35:98:68:33:6e:59:1c:49:fd:c7:82:cc:49:
                    14:a8:58:7b:09:f0:9f:19:13:bf:a5:25:d6:ad:08:
                    2a:5f:77:6f:d8:ec:e0:81:c7:46:21:72:17:f0:33:
                    52:22:17:ed:3c:bb:02:1a:1d:2e:aa:33:80:70:da:
                    86:61:a3:80:09:78:01:bf:4d:7a:06:bc:e1:10:b9:
                    78:8b:1f:f7:9a:5f:95:50:77:5f:28:4f:d4:00:23:
                    22:24:64:54:fe:a3:53:25:12:ba:91:48:ce:87:b7:
                    6a:06:5a:9a:6f:4f:b8:a0:9b:b6:de:3d:36:26:dd:
                    2c:1d:36:a3:d2:17:57:d9:f9:17:0e:45:29:e6:98:
                    58:2e:3b:29:d4:7e:c2:45:d0:9e:97:be:87:67:6b:
                    c1:91:6d:6c:cf:e1:67:cf:ae:a6:7a:6c:35:4e:4d:
                    6d:b5:e3:4e:7c:f7:45:e0:23:62:e2:0f:30:e3:6f:
                    0d:89:d1:db:4e:ae:bd:91:e9:e9:b2:24:06:39:f9:
                    79:17:b3:2f:eb:df:06:cb:a4:74:d7:09:dc:44:42:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:74:00:97:88:59:F4:63:8E:6D:BD:9C:89:74:04:4C:57:E5:57:4A
            X509v3 Authority Key Identifier:
                keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/5CBE3872145C11F0BFD6B347C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:6d:dc:a1:84:7f:90:47:c4:a8:8d:0f:d1:58:04:ac:a8:
         b5:2f:16:d0:62:1e:6f:c7:11:77:2c:81:18:35:aa:66:b5:48:
         75:ac:3a:6b:3b:49:70:f4:03:d2:dc:c4:61:3e:47:12:4c:a7:
         b4:e4:5e:a5:3a:e8:0b:a9:3e:14:95:29:b5:e8:bd:a0:6a:4a:
         48:3f:e7:a7:ea:33:9d:bb:72:31:5d:eb:74:90:cc:91:c2:ee:
         fc:20:07:b1:de:42:8b:58:b5:95:5c:ea:d3:7a:11:23:b5:63:
         5f:b0:82:d9:7b:98:59:f3:a3:0e:f6:46:89:d7:0b:23:47:ad:
         87:c8:02:d8:e6:39:4b:fa:2f:37:e9:d4:ab:81:39:b3:6e:0a:
         d0:c3:5e:10:04:34:64:f5:34:b3:93:4c:73:14:31:3b:18:5e:
         25:dc:b8:79:98:40:97:0d:7f:20:aa:ee:74:f2:d0:f0:13:69:
         2b:bf:37:58:05:b6:69:2e:8f:5b:ff:e6:0a:1d:fd:c4:86:50:
         b1:c5:77:ae:9c:43:d0:05:b5:ba:f7:df:65:9c:ac:c8:93:9d:
         d8:83:46:2f:3d:bd:47:b6:b1:b8:3f:39:f5:46:c0:8f:97:5b:
         bc:6a:b9:3c:2e:32:3c:f1:ff:aa:33:cc:ad:8c:5a:c8:7e:b7:
         f8:4f:40:42
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF
NjVCN0YwRTkwHhcNMjUwOTI1MDM1MjMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQ0YmM4MS02OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqpdiqqc0Es3bdBVFY2gqat0L2IoLBslxiEu0KgozmmvhLv2mtSWQ1f7vfwL
3jWYaDNuWRxJ/ceCzEkUqFh7CfCfGRO/pSXWrQgqX3dv2OzggcdGIXIX8DNSIhft
PLsCGh0uqjOAcNqGYaOACXgBv016BrzhELl4ix/3ml+VUHdfKE/UACMiJGRU/qNT
JRK6kUjOh7dqBlqab0+4oJu23j02Jt0sHTaj0hdX2fkXDkUp5phYLjsp1H7CRdCe
l76HZ2vBkW1sz+Fnz66memw1Tk1tteNOfPdF4CNi4g8w428NidHbTq69kenpsiQG
Ofl5F7Mv698Gy6R01wncREKUKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAd0AJeI
WfRjjm29nIl0BExX5VdKMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2
MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzY1Q0IvNjk1NTE1RTAwNjI4MTFFRUE3MTRDMjYzQzRGOUFFMDIvNUNCRTM4NzIx
NDVDMTFGMEJGRDZCMzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnmz8wDQYJKoZIhvcNAQELBQADggEBAI61bdyhhH+QR8So
jQ/RWASsqLUvFtBiHm/HEXcsgRg1qma1SHWsOms7SXD0A9LcxGE+RxJMp7TkXqU6
6AupPhSVKbXovaBqSkg/56fqM527cjFd63SQzJHC7vwgB7HeQotYtZVc6tN6ESO1
Y1+wgtl7mFnzow72RonXCyNHrYfIAtjmOUv6Lzfp1KuBObNuCtDDXhAENGT1NLOT
THMUMTsYXiXcuHmYQJcNfyCq7nTy0PATaSu/N1gFtmkuj1v/5god/cSGULHFd66c
Q9AFtbr332WcrMiTndiDRi89vUe2sbg/OfVGwI+XW7xquTwuMjzx/6ozzK2MWsh+
t/hPQEI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:18 2025 by rpki-client