Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
File:                     37EA3E261ADC11EA8EB46F37C4F9AE02.roa (raw, json)
Hash identifier:          ELFkrkGvrGXpvAeGB34G/wdhCkAvgz4ejLB+gQtN8Ps=
Subject key identifier:   0D:30:A6:FD:E5:DE:C1:59:51:7D:A4:91:F6:60:F0:00:54:6D:69:22
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0BE5
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
Signing time:             Thu 26 Jun 2025 18:43:06 +0000
ROA not before:           Thu 26 Jun 2025 18:43:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131270
IP address blocks:        103.68.160.0/22 maxlen: 24
                          103.232.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 18:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3045 (0xbe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Jun 26 18:43:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685d94ba-7bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:c2:48:66:92:28:01:bb:7d:c0:1b:57:11:
                    d1:f7:71:87:e5:fb:d1:bb:48:69:8a:ac:02:69:7e:
                    3d:28:bb:ee:97:8b:9b:e7:28:41:d7:ab:e0:17:1b:
                    68:11:ee:92:d7:93:1f:8e:4c:b6:33:b7:18:4d:33:
                    97:ee:a6:5c:59:72:46:c7:02:95:3f:1e:fc:79:62:
                    3a:56:62:86:32:c7:59:b1:7e:30:06:c3:32:2f:8e:
                    3b:f1:8c:a4:a3:34:41:4d:3a:95:6f:f3:f4:1d:ba:
                    c1:5f:15:ce:69:95:54:ac:16:30:e5:c5:68:41:21:
                    11:8f:3e:da:97:51:67:b6:62:9b:b7:5d:4b:92:c3:
                    52:64:18:3d:48:0a:e3:1b:0c:13:82:87:aa:a7:9b:
                    8d:53:6a:7a:22:2e:23:43:f6:99:ed:38:8d:e1:5a:
                    8b:24:0a:01:c7:b4:05:6f:bb:7c:6f:e2:47:df:01:
                    b1:6d:6e:8b:88:40:40:b7:04:94:77:5d:06:46:5d:
                    ab:d9:53:a8:ec:ac:67:48:c1:46:e1:77:a7:ed:e5:
                    38:09:ac:d2:43:9c:12:24:dc:3a:f5:39:01:97:87:
                    6a:11:26:bf:9c:11:4d:eb:0c:66:f2:6e:b3:7c:93:
                    53:f5:95:77:bb:b3:13:28:1c:a8:08:80:6b:81:89:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:A6:FD:E5:DE:C1:59:51:7D:A4:91:F6:60:F0:00:54:6D:69:22
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/37EA3E261ADC11EA8EB46F37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.160.0/22
                  103.232.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:87:e5:bb:2d:30:56:a9:89:1c:f2:a3:4d:ac:df:f8:ad:
         8f:ca:69:de:4b:25:12:b1:45:60:0b:4e:cc:8f:2c:7a:27:3c:
         31:6d:37:ab:33:d6:28:b4:98:98:24:e4:ad:d4:c7:fa:2a:4c:
         60:a7:d6:c2:12:3d:29:e0:be:f6:6b:d9:f9:52:d1:53:67:76:
         a8:c8:5b:eb:d1:c9:92:74:cb:24:aa:38:80:0d:7e:fe:61:51:
         20:fd:3a:ee:c9:c5:12:7d:08:94:11:f0:19:63:a8:17:34:68:
         8b:e5:38:ce:af:7a:69:a0:90:06:79:02:73:6c:a0:c9:7c:66:
         6c:2e:78:58:9d:36:76:4d:25:ac:7f:29:01:3e:44:31:64:19:
         53:ba:7b:67:21:61:a1:41:93:da:a4:13:cb:de:7e:66:51:c5:
         e3:92:2b:56:f8:8a:79:c6:c5:32:b3:b5:49:46:58:af:a3:7c:
         ad:19:c6:0b:30:b2:db:9a:99:6f:3c:aa:10:1b:e7:cf:a6:da:
         96:d5:67:24:3f:67:bb:a1:29:0a:e0:da:f6:a6:8c:87:f5:5e:
         20:fa:99:17:51:93:f0:51:b4:d2:5b:03:96:09:8e:f9:70:50:
         12:83:a4:bf:cd:59:07:4b:2c:07:44:5b:e2:f1:91:29:e1:19:
         4f:c8:20:2b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix
NTU1RDJCRDQwHhcNMjUwNjI2MTg0MzA2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVkOTRiYS03YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvf7CSGaSKAG7fcAbVxHR93GH5fvRu0hpiqwCaX49KLvul4ub5yhB16vgFxto
Ee6S15Mfjky2M7cYTTOX7qZcWXJGxwKVPx78eWI6VmKGMsdZsX4wBsMyL4478Yyk
ozRBTTqVb/P0HbrBXxXOaZVUrBYw5cVoQSERjz7al1FntmKbt11LksNSZBg9SArj
GwwTgoeqp5uNU2p6Ii4jQ/aZ7TiN4VqLJAoBx7QFb7t8b+JH3wGxbW6LiEBAtwSU
d10GRl2r2VOo7KxnSMFG4Xen7eU4CazSQ5wSJNw69TkBl4dqESa/nBFN6wxm8m6z
fJNT9ZV3u7MTKByoCIBrgYkoKQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA0wpv3l
3sFZUX2kkfZg8ABUbWkiMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB
REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODIyQkYvMTAzOUJDNDAxQURCMTFFQUFBM0E4MjM1QzRGOUFFMDIvMzdFQTNFMjYx
QURDMTFFQThFQjQ2RjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnRKADBAJn6EwwDQYJKoZIhvcNAQELBQADggEBACjSh+W7
LTBWqYkc8qNNrN/4rY/Kad5LJRKxRWALTsyPLHonPDFtN6sz1ii0mJgk5K3Ux/oq
TGCn1sISPSngvvZr2flS0VNndqjIW+vRyZJ0yySqOIANfv5hUSD9Ou7JxRJ9CJQR
8BljqBc0aIvlOM6vemmgkAZ5AnNsoMl8ZmwueFidNnZNJax/KQE+RDFkGVO6e2ch
YaFBk9qkE8vefmZRxeOSK1b4innGxTKztUlGWK+jfK0ZxgswstuamW88qhAb58+m
2pbVZyQ/Z7uhKQrg2vamjIf1XiD6mRdRk/BRtNJbA5YJjvlwUBKDpL/NWQdLLAdE
W+LxkSnhGU/IICs=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:14:42 2025 by rpki-client