Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C2356A948FE811E98B967A66C4F9AE02.roa
File:                     C2356A948FE811E98B967A66C4F9AE02.roa (raw, json)
Hash identifier:          k3PLqMJ24hbj9LTYOeTg1vBguIXi9N/SryWCjUrQYCY=
Subject key identifier:   A5:12:C3:F1:36:4A:27:0E:6A:40:59:C8:BF:77:3B:60:57:B1:EA:9F
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       1169
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C2356A948FE811E98B967A66C4F9AE02.roa
Signing time:             Wed 20 Aug 2025 17:57:30 +0000
ROA not before:           Wed 20 Aug 2025 17:57:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     209300
IP address blocks:        2404:f4c0:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4457 (0x1169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 20 17:57:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a60c8a-cfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:9a:b2:f5:3a:b2:54:7e:67:1d:72:24:60:
                    93:6b:0b:20:60:8a:26:18:6a:e6:5d:0e:f4:0d:3b:
                    e8:5e:04:46:bc:7f:6e:b1:ad:83:b3:6d:e7:0d:20:
                    ec:ff:a7:80:01:71:1f:99:a0:79:33:5f:6d:4b:d1:
                    65:91:d5:e4:91:3a:cc:07:ca:1a:bf:d0:60:59:0f:
                    19:6f:02:4c:16:bf:1b:00:7f:25:e7:4b:8f:ef:b9:
                    a4:d7:c9:58:ca:18:f7:92:c8:ab:e2:23:6a:7b:88:
                    e9:1d:5d:34:23:1a:6f:f2:b9:4d:75:51:4c:01:13:
                    14:61:ae:9e:f8:cc:07:d8:59:f6:92:f0:08:e7:c5:
                    26:3b:ad:3c:04:fa:01:27:0f:99:f1:40:cd:48:a5:
                    54:18:74:88:e9:d5:c7:e7:28:c0:eb:82:ca:09:b1:
                    9a:53:a2:be:52:3d:a8:74:62:e8:a5:7d:97:0a:7e:
                    0a:27:51:cb:08:36:2b:f7:ca:65:11:7f:56:f2:6c:
                    a7:28:c0:54:41:37:1f:b1:fd:b6:2b:3c:ea:2e:51:
                    ab:80:31:bb:61:8b:64:4f:76:7b:a9:c5:36:a6:00:
                    fa:86:4d:86:92:f7:c9:23:87:99:f3:37:7a:3f:64:
                    68:b7:5d:86:00:7f:e1:26:9a:b4:14:d0:34:3f:99:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:12:C3:F1:36:4A:27:0E:6A:40:59:C8:BF:77:3B:60:57:B1:EA:9F
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C2356A948FE811E98B967A66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:33:71:65:c9:f1:32:05:92:ce:93:3d:8a:1f:40:76:ba:46:
         fd:e8:dc:8b:32:95:5d:5b:31:d8:ad:a3:06:cc:40:ac:ee:2c:
         aa:87:5d:e0:b5:c8:b5:d4:08:43:98:38:be:d6:e8:5e:d6:98:
         7c:47:51:b5:88:18:06:d8:85:9d:45:12:7c:36:76:6a:e9:77:
         2b:52:4f:e1:84:40:72:be:69:2e:0a:c3:27:87:17:cb:11:73:
         9b:f2:83:31:c1:76:be:fe:42:3e:c2:3e:8b:63:1d:18:cf:a9:
         c7:09:73:a3:5b:bd:30:88:f7:f5:8a:b0:56:4e:a3:76:ac:6c:
         c2:b1:bb:aa:5e:bb:56:2a:fd:6b:31:e4:6f:66:9a:f7:c4:be:
         f7:df:bf:1d:36:4d:f0:de:af:3d:05:7b:91:08:7f:63:ff:fd:
         94:55:87:37:4a:8c:5e:2a:6e:90:ac:e8:cd:36:66:4f:59:d3:
         3d:18:ad:2c:7e:a3:47:d6:7d:af:b6:86:45:23:eb:40:7b:0a:
         ee:e8:48:b0:f3:4c:e9:1e:06:5c:ce:1c:c0:4e:17:b5:8f:eb:
         29:f2:db:6a:98:c1:57:fe:9a:ce:26:72:78:9b:ee:74:cd:2f:
         6a:28:1c:ec:0c:af:4b:5e:08:cf:35:11:28:a5:d6:6f:4a:bc:
         18:d7:36:22
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjUwODIwMTc1NzMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE2MGM4YS1jZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuAuasvU6slR+Zx1yJGCTawsgYIomGGrmXQ70DTvoXgRGvH9usa2Ds23nDSDs
/6eAAXEfmaB5M19tS9FlkdXkkTrMB8oav9BgWQ8ZbwJMFr8bAH8l50uP77mk18lY
yhj3ksir4iNqe4jpHV00Ixpv8rlNdVFMARMUYa6e+MwH2Fn2kvAI58UmO608BPoB
Jw+Z8UDNSKVUGHSI6dXH5yjA64LKCbGaU6K+Uj2odGLopX2XCn4KJ1HLCDYr98pl
EX9W8mynKMBUQTcfsf22KzzqLlGrgDG7YYtkT3Z7qcU2pgD6hk2GkvfJI4eZ8zd6
P2Rot12GAH/hJpq0FNA0P5nXdQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKUSw/E2
SicOakBZyL93O2BXseqfMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQzIzNTZBOTQ4
RkU4MTFFOThCOTY3QTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBPTA8AAwDQYJKoZIhvcNAQELBQADggEBAAYzcWXJ8TIF
ks6TPYofQHa6Rv3o3IsylV1bMditowbMQKzuLKqHXeC1yLXUCEOYOL7W6F7WmHxH
UbWIGAbYhZ1FEnw2dmrpdytST+GEQHK+aS4KwyeHF8sRc5vygzHBdr7+Qj7CPotj
HRjPqccJc6NbvTCI9/WKsFZOo3asbMKxu6peu1Yq/Wsx5G9mmvfEvvffvx02TfDe
rz0Fe5EIf2P//ZRVhzdKjF4qbpCs6M02Zk9Z0z0YrSx+o0fWfa+2hkUj60B7Cu7o
SLDzTOkeBlzOHMBOF7WP6yny22qYwVf+ms4mcnib7nTNL2ooHOwMr0teCM81ESil
1m9KvBjXNiI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:36 2025 by rpki-client