Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa
File:                     A8F4AE389D7E11EF91A24C73C4F9AE02.roa (raw, json)
Hash identifier:          cqlcdGiLqE3aY+b7c71D9qJhiS/wi/pJbFxJk9OTyQE=
Subject key identifier:   E0:67:98:27:95:5B:0D:8F:4A:B3:A8:08:0C:28:1B:67:3C:49:BE:C1
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       AE
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa
Signing time:             Mon 18 Aug 2025 03:14:11 +0000
ROA not before:           Mon 18 Aug 2025 03:14:11 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.103.44.0/23 maxlen: 23
                          103.103.46.0/23 maxlen: 23
                          2401:ef40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Aug 18 03:14:11 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68a29a83-93c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:10:ef:80:b9:e0:c5:3f:be:3c:23:e0:7b:
                    8e:01:7c:47:ef:81:6c:bd:0e:3d:d0:51:c8:fa:43:
                    10:08:17:c8:ef:56:9f:41:a8:a0:13:8d:13:28:d0:
                    3b:51:84:dd:fd:07:35:f0:d8:5d:53:91:0d:86:df:
                    f4:06:ad:d3:6e:04:cd:ff:ae:56:0c:b0:a2:8a:c0:
                    8e:61:80:4d:28:66:0a:7f:5e:fb:15:cc:ba:5c:cd:
                    d7:5c:43:ee:7e:1c:77:c3:19:b7:57:1f:0b:93:20:
                    2a:d3:a6:14:ef:4b:11:c9:a3:08:8f:8e:3e:a0:06:
                    90:86:3f:e9:84:98:0d:a6:a1:ea:02:c0:f3:29:13:
                    f3:ec:b2:d8:fc:61:2e:dc:d3:42:78:42:04:a6:5c:
                    cc:84:45:e5:0a:0e:50:07:e0:ad:a2:50:44:60:ac:
                    bf:00:39:3a:7f:a3:ef:0e:e3:0e:cd:0b:49:c2:16:
                    a0:52:67:1f:fc:2a:2c:40:f0:66:c7:40:75:ae:10:
                    6c:7e:f2:49:be:b6:d6:bc:61:78:46:b4:20:8f:3f:
                    a3:dd:05:c9:40:d8:02:ef:f6:9e:2d:2c:7c:93:59:
                    b4:79:f7:91:e4:48:d3:88:42:ba:1a:e3:d8:bb:19:
                    62:af:0d:cc:f3:05:88:c9:8f:cd:3c:28:07:74:1d:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:67:98:27:95:5B:0D:8F:4A:B3:A8:08:0C:28:1B:67:3C:49:BE:C1
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.44.0/22
                IPv6:
                  2401:ef40::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:4d:05:02:62:b5:fd:81:2d:dd:3e:bc:f7:d0:d2:20:3b:98:
         7b:d4:50:aa:6e:50:08:2e:5a:db:32:d7:74:b8:0f:9a:16:5e:
         5c:25:de:cd:86:73:9b:28:89:ab:e8:2b:13:5c:0e:27:77:f8:
         a1:d1:b5:a4:18:6d:6b:7a:c4:10:b2:0f:8e:e0:f0:b1:52:46:
         ce:8c:7d:81:f3:32:2c:85:95:10:e7:cc:39:a3:48:d9:b4:c0:
         b1:5c:c1:39:a2:8a:01:2e:3f:77:cf:9a:72:4e:72:14:54:f9:
         4f:6d:6e:eb:5d:93:cf:e0:10:d3:fc:7d:c0:de:8c:40:f6:01:
         78:12:fe:4e:de:e7:f3:fa:60:49:8a:c1:be:bb:4c:24:65:2b:
         b8:5b:7b:83:4d:42:54:75:79:30:8b:c8:e3:8d:b7:41:04:12:
         31:d0:71:69:f0:e1:e0:c9:ed:57:48:cc:9a:4c:f9:e3:33:4c:
         a4:32:b9:4c:1b:39:c6:db:22:2a:c9:5c:71:0a:23:2a:8c:41:
         64:d5:b7:87:cc:13:ce:81:d4:cb:81:77:f9:dc:bf:b0:11:77:
         18:1e:f7:e8:18:b2:fe:e2:c6:8c:c0:e5:d9:b2:d5:86:91:af:
         79:bd:44:15:ef:11:a7:63:21:8f:34:22:fe:0b:2a:67:48:49:
         e9:5d:13:61
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I3MzYxMTAvBgNVBAUTKDMwQkUxRUI5RDNBQzQ5RDBBRkVFMTM1M0MzRjlEMTE2
N0EwMDdCMTcwHhcNMjUwODE4MDMxNDExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGEyOWE4My05M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0aQQ74C54MU/vjwj4HuOAXxH74FsvQ490FHI+kMQCBfI71afQaigE40TKNA7
UYTd/Qc18NhdU5ENht/0Bq3TbgTN/65WDLCiisCOYYBNKGYKf177Fcy6XM3XXEPu
fhx3wxm3Vx8LkyAq06YU70sRyaMIj44+oAaQhj/phJgNpqHqAsDzKRPz7LLY/GEu
3NNCeEIEplzMhEXlCg5QB+CtolBEYKy/ADk6f6PvDuMOzQtJwhagUmcf/CosQPBm
x0B1rhBsfvJJvrbWvGF4RrQgjz+j3QXJQNgC7/aeLSx8k1m0efeR5EjTiEK6GuPY
uxlirw3M8wWIyY/NPCgHdB0hxwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOBnmCeV
Ww2PSrOoCAwoG2c8Sb7BMB8GA1UdIwQYMBaAFDC+HrnTrEnQr+4TU8P50RZ6AHsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjczNi9GMTMzRUYwQzg0
MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1NkQ3Y3aE5Ud19uUkZub0Fl
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0I3MzYvRjEzM0VGMEM4NDJEMTFFRjk5RTgzRDg0QzRGOUFFMDIvQThGNEFFMzg5
RDdFMTFFRjkxQTI0QzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJnZywwDwQCAAIwCQMHACQB70AAADANBgkqhkiG9w0BAQsF
AAOCAQEAWE0FAmK1/YEt3T6899DSIDuYe9RQqm5QCC5a2zLXdLgPmhZeXCXezYZz
myiJq+grE1wOJ3f4odG1pBhta3rEELIPjuDwsVJGzox9gfMyLIWVEOfMOaNI2bTA
sVzBOaKKAS4/d8+ack5yFFT5T21u612Tz+AQ0/x9wN6MQPYBeBL+Tt7n8/pgSYrB
vrtMJGUruFt7g01CVHV5MIvI4423QQQSMdBxafDh4MntV0jMmkz54zNMpDK5TBs5
xtsiKslccQojKoxBZNW3h8wTzoHUy4F3+dy/sBF3GB736Biy/uLGjMDl2bLVhpGv
eb1EFe8Rp2MhjzQi/gsqZ0hJ6V0TYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:51 2025 by rpki-client