Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6D5461FE142F11EE94A8E86DC4F9AE02.roa
File:                     6D5461FE142F11EE94A8E86DC4F9AE02.roa (raw, json)
Hash identifier:          AG+pUA+1Ypuq/c2/EgjTKsKPvxS+ZFlKlHFVLyuQLUg=
Subject key identifier:   D0:E8:F0:A0:69:13:57:27:64:19:17:CE:93:4C:64:4C:7C:66:76:53
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D7C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6D5461FE142F11EE94A8E86DC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:55:09 +0000
ROA not before:           Thu 28 Aug 2025 14:55:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150824
IP address blocks:        103.198.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19836 (0x4d7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06dcd-11c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:ba:42:37:81:7a:b6:dc:15:5d:52:0f:a1:
                    37:3d:83:e8:77:75:a0:e5:77:7f:58:05:8c:74:1b:
                    0f:70:58:b8:46:cc:3a:a6:1e:1f:0b:fc:39:b0:65:
                    4b:e5:47:30:2f:0c:01:7c:00:53:07:6a:71:8c:15:
                    ce:b5:8a:6c:dd:5e:c5:af:bc:24:14:1e:a2:5c:02:
                    f1:9a:b1:00:f8:d7:c8:42:02:5b:f2:ef:97:55:44:
                    91:32:cb:4a:8c:cc:91:e3:d8:a6:1c:af:1a:dc:3e:
                    05:0b:0c:77:ff:25:8e:d7:7d:51:17:32:b0:d2:ab:
                    d4:d5:e5:6f:d6:57:90:37:57:4c:3d:8b:21:30:c8:
                    01:fe:0b:89:fd:6b:19:81:fe:e6:dd:0f:3c:e3:e4:
                    1a:91:d4:a9:f6:6d:5b:f0:36:9f:10:7c:08:67:aa:
                    7a:a2:c7:33:68:9c:fb:c4:8c:66:b6:99:8f:10:56:
                    c9:b1:af:39:95:aa:b1:d3:cf:73:83:57:b7:b5:24:
                    5e:a8:4b:a9:7a:1a:e8:95:07:02:99:46:1f:d3:91:
                    fc:50:d6:45:4c:8b:ad:3e:7e:35:cc:ef:3e:1b:91:
                    ea:fd:03:80:ec:53:e6:4e:7c:c0:d8:16:86:bf:5b:
                    e7:32:a5:68:d0:d0:f2:0c:f2:bf:10:41:eb:c2:b1:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:F0:A0:69:13:57:27:64:19:17:CE:93:4C:64:4C:7C:66:76:53
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6D5461FE142F11EE94A8E86DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:18:65:d7:23:77:6b:c1:03:e7:15:e3:c6:62:62:0b:b1:13:
         1e:b9:7a:30:e4:7b:bb:12:16:df:6e:9c:e7:9b:c5:22:78:c4:
         13:4b:14:76:87:a1:d8:ca:79:a9:fd:4f:0b:19:43:d5:2a:38:
         b7:e2:32:1c:8b:69:59:71:6d:c1:25:08:54:c4:9f:57:0f:f9:
         88:2c:86:f7:ed:6c:c9:1d:56:53:20:11:d5:55:28:2e:0e:d3:
         db:bb:d0:d4:ab:97:6a:04:dc:8d:63:2b:68:c9:c3:6c:66:a2:
         72:54:a9:2b:51:80:e9:14:19:f3:2e:55:1b:0f:32:54:37:db:
         be:ce:d6:ea:cf:ca:d4:06:a3:34:81:bf:0e:59:c0:be:9f:21:
         76:aa:29:6e:c0:b2:8b:c5:d8:cb:3f:f9:c6:3a:d8:a7:be:fa:
         9c:31:49:5c:4a:38:8d:cc:00:b2:7d:46:63:79:01:a0:40:5b:
         39:6f:82:07:f6:18:11:0c:64:03:60:40:71:f3:7d:db:e2:43:
         70:47:8d:a3:05:57:1f:c6:bf:85:a6:6b:61:55:6d:dc:c9:80:
         98:6d:3e:96:44:c7:92:49:ed:7a:d9:77:61:6c:0f:ad:66:c8:
         aa:e9:fd:c9:ad:4c:2a:b0:cf:4a:b9:e0:69:53:27:8b:59:2e:
         fa:40:8f:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmRjZC0xMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0O6QjeBerbcFV1SD6E3PYPod3Wg5Xd/WAWMdBsPcFi4Rsw6ph4fC/w5sGVL
5UcwLwwBfABTB2pxjBXOtYps3V7Fr7wkFB6iXALxmrEA+NfIQgJb8u+XVUSRMstK
jMyR49imHK8a3D4FCwx3/yWO131RFzKw0qvU1eVv1leQN1dMPYshMMgB/guJ/WsZ
gf7m3Q884+QakdSp9m1b8DafEHwIZ6p6osczaJz7xIxmtpmPEFbJsa85laqx089z
g1e3tSReqEupehrolQcCmUYf05H8UNZFTIutPn41zO8+G5Hq/QOA7FPmTnzA2BaG
v1vnMqVo0NDyDPK/EEHrwrGm2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNDo8KBp
E1cnZBkXzpNMZEx8ZnZTMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNkQ1NDYxRkUx
NDJGMTFFRTk0QThFODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnxtMwDQYJKoZIhvcNAQELBQADggEBAMIYZdcjd2vBA+cV
48ZiYguxEx65ejDke7sSFt9unOebxSJ4xBNLFHaHodjKean9TwsZQ9UqOLfiMhyL
aVlxbcElCFTEn1cP+YgshvftbMkdVlMgEdVVKC4O09u70NSrl2oE3I1jK2jJw2xm
onJUqStRgOkUGfMuVRsPMlQ3277O1urPytQGozSBvw5ZwL6fIXaqKW7AsovF2Ms/
+cY62Ke++pwxSVxKOI3MALJ9RmN5AaBAWzlvggf2GBEMZANgQHHzfdviQ3BHjaMF
Vx/Gv4Wma2FVbdzJgJhtPpZEx5JJ7XrZd2FsD61myKrp/cmtTCqwz0q54GlTJ4tZ
LvpAjw0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:50 2025 by rpki-client