Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/B84D6D3AF81811EFACB5925BC4F9AE02.roa
File:                     B84D6D3AF81811EFACB5925BC4F9AE02.roa (raw, json)
Hash identifier:          iSgwGcm13o9Rt6IYRC8gB+G1pN+vluWHVfp7WXbTVyc=
Subject key identifier:   8D:00:8D:BF:A0:18:37:EA:4B:5A:76:A2:5E:26:82:D0:54:7D:FE:89
Certificate issuer:       /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Certificate serial:       011C
Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/B84D6D3AF81811EFACB5925BC4F9AE02.roa
Signing time:             Wed 15 Oct 2025 08:31:59 +0000
ROA not before:           Wed 15 Oct 2025 08:31:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        103.108.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
        Validity
            Not Before: Oct 15 08:31:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ef5bff-44b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:2a:b2:cc:90:66:44:ae:d7:56:8c:37:d8:
                    ac:ec:49:c2:93:ab:ef:3d:35:2f:c5:a0:eb:77:15:
                    c4:0c:8b:a0:93:9e:82:8f:61:0d:04:44:eb:fb:70:
                    be:07:f4:53:f4:8f:57:4c:6d:38:1a:80:7c:f0:e5:
                    cc:56:13:43:78:be:53:e2:6d:79:fd:c1:71:06:dd:
                    07:d2:a8:ea:ba:de:60:33:29:5e:6f:2a:37:5d:3e:
                    99:05:d5:a7:e7:6b:dd:f7:8b:14:f3:7e:ba:87:34:
                    75:73:06:31:16:16:95:37:8e:d7:97:f1:d0:e7:c7:
                    b8:12:3d:83:a7:de:8b:00:b9:ba:98:7a:7c:04:e5:
                    1e:42:6a:77:24:e3:cf:0b:9c:54:a2:eb:91:45:47:
                    17:33:81:2f:70:42:3a:ca:26:b4:52:84:65:6f:0a:
                    02:de:82:62:79:1c:64:49:99:67:85:d5:e6:57:d5:
                    bb:57:a1:b6:8d:f7:2a:fb:b6:9f:cd:d8:2d:0f:38:
                    91:0c:ee:ba:24:b4:32:be:7f:44:9f:ed:92:5f:1f:
                    cb:4f:19:82:4c:b8:88:12:af:32:80:a9:93:aa:31:
                    b7:3d:d9:18:5d:b8:f6:8c:02:65:f0:a3:9e:33:e2:
                    23:25:8e:e4:bb:92:b7:7e:66:5a:84:7f:24:0f:0c:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:00:8D:BF:A0:18:37:EA:4B:5A:76:A2:5E:26:82:D0:54:7D:FE:89
            X509v3 Authority Key Identifier:
                keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/B84D6D3AF81811EFACB5925BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:43:c8:96:97:b3:ff:3d:d9:7b:50:5a:95:9a:4a:a2:d1:
         6f:0c:b9:57:04:11:34:f6:63:39:30:35:e2:44:0b:3b:c0:16:
         0c:a3:3e:bc:bd:fc:41:6f:95:22:34:84:37:6f:f8:88:9f:5c:
         1f:6a:9a:f8:54:cd:d5:e1:c3:41:f8:2c:7c:ef:0e:5d:8b:d2:
         90:9e:1d:a8:6c:22:f5:a4:00:b9:31:9a:98:ca:6c:66:c5:fb:
         49:54:c3:08:2b:b3:e2:7b:85:0d:9f:12:72:b9:d2:f3:55:c4:
         2b:b4:f5:1e:a9:f8:29:60:08:3d:54:a5:c6:ab:03:03:56:59:
         13:3f:e9:f0:9e:e3:dd:55:f8:e1:5c:7a:0a:b2:0f:e4:d9:d2:
         b4:9f:cf:99:50:f8:e6:84:8b:b0:28:51:bd:d5:4d:96:af:eb:
         4b:58:f1:ff:52:6d:a7:26:30:1a:d4:f7:d4:5c:92:75:01:ff:
         9f:31:96:72:7f:ce:55:a9:4e:01:25:a4:93:02:89:e0:d7:a8:
         91:4e:2e:91:83:3d:35:d1:6b:ac:53:73:09:0c:4e:6e:66:77:
         30:e3:26:31:67:8b:5e:12:07:01:19:d3:55:bb:25:c2:fb:c9:
         00:85:61:bd:d2:6e:ca:ff:0b:6c:20:9c:31:80:ba:c2:5e:5b:
         fc:1e:0e:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw
RDBCMDMyNTYwHhcNMjUxMDE1MDgzMTU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGVmNWJmZi00NGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3lgqssyQZkSu11aMN9is7EnCk6vvPTUvxaDrdxXEDIugk56Cj2ENBETr+3C+
B/RT9I9XTG04GoB88OXMVhNDeL5T4m15/cFxBt0H0qjqut5gMylebyo3XT6ZBdWn
52vd94sU8366hzR1cwYxFhaVN47Xl/HQ58e4Ej2Dp96LALm6mHp8BOUeQmp3JOPP
C5xUouuRRUcXM4EvcEI6yia0UoRlbwoC3oJieRxkSZlnhdXmV9W7V6G2jfcq+7af
zdgtDziRDO66JLQyvn9En+2SXx/LTxmCTLiIEq8ygKmTqjG3PdkYXbj2jAJl8KOe
M+IjJY7ku5K3fmZahH8kDwyJiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI0Ajb+g
GDfqS1p2ol4mgtBUff6JMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx
NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU1NjAvNEMzRDZCQzAyMTZGMTFFRkFGNDVFQTJEQzRGOUFFMDIvQjg0RDZEM0FG
ODE4MTFFRkFDQjU5MjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnbK4wDQYJKoZIhvcNAQELBQADggEBADT0Q8iWl7P/Pdl7
UFqVmkqi0W8MuVcEETT2YzkwNeJECzvAFgyjPry9/EFvlSI0hDdv+IifXB9qmvhU
zdXhw0H4LHzvDl2L0pCeHahsIvWkALkxmpjKbGbF+0lUwwgrs+J7hQ2fEnK50vNV
xCu09R6p+ClgCD1UpcarAwNWWRM/6fCe491V+OFcegqyD+TZ0rSfz5lQ+OaEi7Ao
Ub3VTZav60tY8f9SbacmMBrU99RcknUB/58xlnJ/zlWpTgElpJMCieDXqJFOLpGD
PTXRa6xTcwkMTm5mdzDjJjFni14SBwEZ01W7JcL7yQCFYb3Sbsr/C2wgnDGAusJe
W/weDtA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:09 2025 by rpki-client