Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
File:                     46E49D1CE79811EEA89C5E56C4F9AE02.roa (raw, json)
Hash identifier:          inmnpyaDxDWlLYNelzuadkNEoddsaWxx/qXH6LYAyxA=
Subject key identifier:   65:98:E8:69:76:EF:9F:02:69:74:13:68:0A:B9:47:00:77:04:76:6F
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       01A6
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
Signing time:             Fri 03 Oct 2025 03:59:35 +0000
ROA not before:           Fri 03 Oct 2025 03:59:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135365
IP address blocks:        103.253.176.0/24 maxlen: 24
                          2401:25e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Oct  3 03:59:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68df4a27-7d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:c1:89:4d:6b:e2:a0:15:f4:81:9d:d9:14:
                    87:58:a4:2e:76:af:c8:10:92:05:45:fd:54:e0:d4:
                    9c:ed:42:ff:b9:e2:2b:62:1d:f0:0a:bc:93:74:bf:
                    ae:27:5d:c6:0b:83:9a:f0:25:8b:25:7b:d7:31:ce:
                    3c:a3:fc:7a:f8:10:0d:0c:05:8c:77:20:0b:92:70:
                    38:93:c6:ef:98:6b:bd:8e:bf:be:e5:78:4f:75:9d:
                    e9:a9:27:14:8b:0d:a0:77:92:87:40:09:aa:08:9a:
                    24:b8:78:a0:cf:cf:16:79:68:04:67:a4:be:57:02:
                    1c:2c:8a:3b:f2:d7:dc:50:c6:97:c2:e2:f9:6c:43:
                    7a:f6:43:17:bd:d7:a2:e0:19:76:0f:b2:44:bb:90:
                    c9:6b:b2:64:40:2e:4a:8d:6d:b9:d2:70:be:03:70:
                    ec:c5:7c:c1:db:8b:13:7b:97:96:52:5d:fe:f5:e3:
                    1f:83:44:fb:ec:45:12:8f:3a:dd:61:44:21:2e:48:
                    b2:41:a1:fe:fa:6f:ad:b8:f3:31:0d:73:15:e1:8e:
                    3d:b8:64:7b:bd:97:8c:a7:e4:ac:e5:67:a8:18:78:
                    4f:b0:d1:03:55:9b:b3:f4:30:a0:57:80:0d:8e:eb:
                    6f:bc:05:86:fe:e3:41:e1:da:f4:4e:ff:42:e1:3b:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:E8:69:76:EF:9F:02:69:74:13:68:0A:B9:47:00:77:04:76:6F
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.176.0/24
                IPv6:
                  2401:25e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:41:bc:86:de:eb:96:36:3f:35:96:58:27:6f:6a:6b:e9:ab:
         70:76:d9:17:f8:7a:55:3d:22:a9:91:c7:bd:04:84:c0:e7:73:
         90:5c:4d:21:8b:2f:bc:7e:4e:00:e5:7d:52:ff:82:f5:8c:28:
         87:a3:8a:cb:24:a0:f3:d9:94:3e:25:49:28:bc:b7:21:15:9a:
         9b:ae:d4:f7:16:90:3f:b4:4f:05:c1:44:19:13:3e:fe:3e:17:
         c6:d8:52:19:34:cb:63:8c:29:b2:75:41:f0:79:0b:75:a3:7b:
         cd:3f:6f:f0:73:ed:fb:e9:f9:e4:9d:41:b5:13:1d:d7:c4:65:
         d1:f4:27:e0:1f:19:0f:2f:4b:c2:85:c2:25:99:be:56:5b:92:
         42:b9:74:ae:bb:55:7d:7e:3f:e8:6b:81:0e:29:fb:38:53:86:
         aa:59:87:eb:ea:42:dd:8a:0b:42:32:36:7f:91:05:5e:f2:5a:
         82:33:8c:5a:90:30:ef:9a:2a:8a:d5:bd:e0:6c:55:15:8a:ee:
         74:b3:b0:65:cd:c8:e3:26:c9:e1:60:95:c4:fb:92:5e:8e:71:
         9b:32:13:f9:65:9d:43:ba:7f:d9:d2:e8:92:0c:aa:65:d6:5a:
         72:15:d8:5d:07:1f:44:1f:cc:6d:49:81:09:6b:8a:a0:82:26:
         f4:56:55:ad
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1
QjgyODNDOUQwHhcNMjUxMDAzMDM1OTM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmNGEyNy03ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhTBiU1r4qAV9IGd2RSHWKQudq/IEJIFRf1U4NSc7UL/ueIrYh3wCryTdL+u
J13GC4Oa8CWLJXvXMc48o/x6+BANDAWMdyALknA4k8bvmGu9jr++5XhPdZ3pqScU
iw2gd5KHQAmqCJokuHigz88WeWgEZ6S+VwIcLIo78tfcUMaXwuL5bEN69kMXvdei
4Bl2D7JEu5DJa7JkQC5KjW250nC+A3DsxXzB24sTe5eWUl3+9eMfg0T77EUSjzrd
YUQhLkiyQaH++m+tuPMxDXMV4Y49uGR7vZeMp+Ss5WeoGHhPsNEDVZuz9DCgV4AN
jutvvAWG/uNB4dr0Tv9C4TsSiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGWY6Gl2
758CaXQTaAq5RwB3BHZvMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC
N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyRjkvNEU2MDlBNzIzQjdEMTFFRTk2NTZGQzY0QzRGOUFFMDIvNDZFNDlEMUNF
Nzk4MTFFRUE4OUM1RTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABn/bAwDQQCAAIwBwMFACQBJeAwDQYJKoZIhvcNAQELBQAD
ggEBAEVBvIbe65Y2PzWWWCdvamvpq3B22Rf4elU9IqmRx70EhMDnc5BcTSGLL7x+
TgDlfVL/gvWMKIejisskoPPZlD4lSSi8tyEVmpuu1PcWkD+0TwXBRBkTPv4+F8bY
Uhk0y2OMKbJ1QfB5C3Wje80/b/Bz7fvp+eSdQbUTHdfEZdH0J+AfGQ8vS8KFwiWZ
vlZbkkK5dK67VX1+P+hrgQ4p+zhThqpZh+vqQt2KC0IyNn+RBV7yWoIzjFqQMO+a
KorVveBsVRWK7nSzsGXNyOMmyeFglcT7kl6OcZsyE/llnUO6f9nS6JIMqmXWWnIV
2F0HH0QfzG1JgQlriqCCJvRWVa0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:17:35 2025 by rpki-client