Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/81A9FE80F67211EA8D340680C4F9AE02.roa
File:                     81A9FE80F67211EA8D340680C4F9AE02.roa (raw, json)
Hash identifier:          3UgzSwj4GCl66Tsn9a7QAzM4ZCmrLoxmPTWmPwwum3g=
Subject key identifier:   0D:54:B9:77:BC:75:D5:26:99:57:2C:40:5C:8F:73:82:36:23:EC:9E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D0C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/81A9FE80F67211EA8D340680C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:36 +0000
ROA not before:           Thu 28 Aug 2025 14:53:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135962
IP address blocks:        103.135.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19724 (0x4d0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d70-9d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:ce:09:09:55:da:80:66:26:4b:25:1f:6e:
                    50:0f:e8:da:46:bf:bc:46:ca:65:88:20:eb:b2:9e:
                    50:0e:c4:a0:2d:ae:8c:05:34:15:b4:29:60:79:e8:
                    b5:fa:53:93:cf:24:e1:8d:7c:b8:76:10:d5:0d:4c:
                    0a:c2:28:d2:b8:53:b7:c8:64:d4:f9:86:71:34:e9:
                    8e:9b:3e:2b:78:90:a3:4c:9a:92:4c:62:46:cc:0f:
                    d1:20:25:43:a0:cc:70:97:13:6c:48:e6:21:fa:f7:
                    fe:d3:9b:14:45:f5:d5:40:5f:44:6a:25:18:0c:64:
                    51:ef:1e:35:81:dc:72:47:82:47:03:83:05:c5:5c:
                    fe:f0:2c:7c:5d:f2:ec:2b:b8:0b:76:72:3a:ba:8f:
                    c5:17:fd:13:7e:69:25:6b:22:95:e9:14:b7:13:90:
                    85:69:7f:b0:d1:b3:ef:43:fd:33:d7:a8:ef:2b:27:
                    59:a8:5d:fd:3d:8b:9a:39:1d:be:8c:1c:d2:90:50:
                    8a:ef:73:f2:c0:6f:9c:1c:b9:a3:ee:95:48:61:72:
                    8f:1a:f8:b0:3d:e1:ee:ba:b1:12:4d:0c:6d:5e:26:
                    ef:b9:83:24:0b:69:d3:bc:6f:53:0a:c4:10:4e:58:
                    4f:52:4e:bc:b5:89:d8:1f:97:f7:8e:2d:f4:b7:f3:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:54:B9:77:BC:75:D5:26:99:57:2C:40:5C:8F:73:82:36:23:EC:9E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/81A9FE80F67211EA8D340680C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:70:60:d1:df:9a:6b:b4:cc:5a:fb:b4:c0:10:c6:77:17:72:
         f9:25:ba:8e:a8:f3:55:76:3b:44:6d:11:7b:5f:4b:51:82:9f:
         20:62:78:8e:69:39:49:a8:00:bc:cc:43:76:06:7f:52:c8:31:
         9e:d2:1a:1d:57:bd:93:81:a2:43:8b:eb:c1:0e:9c:97:59:e0:
         98:0b:e5:a1:ce:e7:66:37:c4:4a:3e:c3:af:ca:91:c5:29:dd:
         2c:9c:6e:5a:06:e2:c0:8a:0c:02:b7:ff:a0:fc:9c:8a:79:fb:
         e4:bc:35:a3:8d:25:b5:5e:0b:14:b7:23:45:c2:f8:6d:a8:6f:
         dd:d9:5e:cd:97:e4:c7:b7:f2:21:af:ed:61:18:4c:2c:cd:00:
         24:a7:f2:23:69:18:4a:6e:a6:da:fe:52:62:4b:19:d3:3b:71:
         08:e8:ff:a6:3e:c5:05:55:0d:04:1f:53:fd:45:9d:8b:67:55:
         8c:3a:0d:98:cb:13:0e:27:cd:98:84:64:02:05:e7:d3:b7:b2:
         2f:39:fe:7e:3d:c0:ee:01:d5:50:2b:cc:e2:b6:b0:ca:08:cf:
         35:9d:9d:11:cb:79:68:8e:be:e0:c3:e1:1b:92:d9:2f:1b:cc:
         e9:7a:c1:cd:45:34:a2:da:76:d0:9d:e5:19:8f:6f:44:51:4c:
         fb:93:0c:e5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmQ3MC05ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lTOCQlV2oBmJkslH25QD+jaRr+8RspliCDrsp5QDsSgLa6MBTQVtClgeei1
+lOTzyThjXy4dhDVDUwKwijSuFO3yGTU+YZxNOmOmz4reJCjTJqSTGJGzA/RICVD
oMxwlxNsSOYh+vf+05sURfXVQF9EaiUYDGRR7x41gdxyR4JHA4MFxVz+8Cx8XfLs
K7gLdnI6uo/FF/0TfmklayKV6RS3E5CFaX+w0bPvQ/0z16jvKydZqF39PYuaOR2+
jBzSkFCK73PywG+cHLmj7pVIYXKPGviwPeHuurESTQxtXibvuYMkC2nTvG9TCsQQ
TlhPUk68tYnYH5f3ji30t/MNvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA1UuXe8
ddUmmVcsQFyPc4I2I+yeMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODFBOUZFODBG
NjcyMTFFQThEMzQwNjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhxwwDQYJKoZIhvcNAQELBQADggEBAERwYNHfmmu0zFr7
tMAQxncXcvkluo6o81V2O0RtEXtfS1GCnyBieI5pOUmoALzMQ3YGf1LIMZ7SGh1X
vZOBokOL68EOnJdZ4JgL5aHO52Y3xEo+w6/KkcUp3SycbloG4sCKDAK3/6D8nIp5
++S8NaONJbVeCxS3I0XC+G2ob93ZXs2X5Me38iGv7WEYTCzNACSn8iNpGEpuptr+
UmJLGdM7cQjo/6Y+xQVVDQQfU/1FnYtnVYw6DZjLEw4nzZiEZAIF59O3si85/n49
wO4B1VArzOK2sMoIzzWdnRHLeWiOvuDD4RuS2S8bzOl6wc1FNKLadtCd5RmPb0RR
TPuTDOU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:26:28 2025 by rpki-client