Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/955199E07F6911F098ACD984C4F9AE02.roa
File:                     955199E07F6911F098ACD984C4F9AE02.roa (raw, json)
Hash identifier:          Amxq1QpLfzi6V5xsD1YljLzBnaHZI1KEP4svb3cmweM=
Subject key identifier:   79:64:1E:6E:15:EC:AC:E7:B1:12:EC:DB:DF:58:87:2F:A7:4D:6E:0F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4C6E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/955199E07F6911F098ACD984C4F9AE02.roa
Signing time:             Fri 22 Aug 2025 15:06:31 +0000
ROA not before:           Fri 22 Aug 2025 15:06:31 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135947
IP address blocks:        103.117.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19566 (0x4c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 22 15:06:31 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68a88776-7fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:1a:22:15:e4:c5:a2:6a:8c:f2:25:9d:93:
                    ad:96:78:db:57:45:64:41:fa:e9:7a:e2:ff:03:b3:
                    0d:7f:5d:35:d1:e3:da:9b:79:1e:84:ce:7b:57:f5:
                    15:e6:38:ab:66:ef:21:8d:2b:37:7f:85:d3:f3:56:
                    e1:75:fd:7a:d1:09:62:e2:d4:e3:82:c3:c3:eb:da:
                    0c:8d:a1:4a:83:7b:d5:49:6f:a4:bc:f1:87:18:01:
                    1e:e6:47:62:87:f1:62:76:98:df:dc:97:60:60:32:
                    9b:24:46:16:97:73:30:60:61:66:dc:06:a9:8f:a1:
                    d6:60:57:2f:ed:e7:de:16:05:7f:05:a5:47:20:ed:
                    44:e7:1d:e1:77:22:47:92:84:dd:1a:87:43:c2:10:
                    5f:5d:1e:65:7f:51:a7:d8:35:4c:6c:da:4c:c7:1d:
                    bd:43:4b:3a:66:3b:a8:f1:ce:a9:1f:a2:2e:e8:7b:
                    9c:5a:1c:fe:89:ed:79:19:68:98:99:cf:a1:33:58:
                    4d:30:26:d6:b2:3a:0f:a7:5e:89:56:c0:0e:20:4a:
                    f6:ec:ca:90:a1:a5:f0:13:52:cf:24:ce:b0:4d:3c:
                    46:b7:84:e4:fb:98:75:d7:47:90:15:d4:9c:5a:a5:
                    51:6b:ed:d4:55:77:ff:1b:fd:52:55:98:39:45:5c:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:1E:6E:15:EC:AC:E7:B1:12:EC:DB:DF:58:87:2F:A7:4D:6E:0F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/955199E07F6911F098ACD984C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:e8:ea:4b:a3:4e:8f:48:28:7f:0f:e0:43:34:b6:9b:3d:
         2a:97:a8:7e:65:c7:a4:18:6e:d6:f5:34:7d:ac:62:c7:6c:b8:
         fc:20:1d:af:87:4e:2f:a0:25:8f:14:d5:30:05:80:f8:dc:40:
         47:e0:1c:2b:2d:50:0b:42:88:5e:10:c4:28:bf:64:53:68:41:
         ef:9c:38:8f:b0:74:33:a0:23:1f:02:ef:6f:07:93:9f:83:f7:
         aa:9c:6e:62:0f:ee:ef:7b:57:95:40:21:db:b3:48:ab:1d:c4:
         3e:18:32:c6:38:3a:f1:0c:f3:2b:97:96:d0:95:a3:d6:01:d2:
         22:c3:13:50:a6:e2:c7:4b:73:09:cb:33:8c:be:5d:23:d5:f7:
         73:34:f0:20:b0:b5:61:a8:84:6f:fa:85:c9:3e:5b:3a:f0:51:
         94:59:3b:d7:78:6b:d6:47:13:a9:0c:4b:13:fc:c2:67:4c:95:
         35:0c:a1:8a:ab:7a:63:42:08:34:1e:d2:b9:9f:a0:90:d5:af:
         40:30:a0:d2:26:7f:f3:87:3e:dc:6f:01:1b:ba:9f:9a:a1:8f:
         33:55:cc:1f:e9:d7:86:06:ae:b9:b1:5f:04:e3:f6:55:43:99:
         1f:08:53:a3:d8:20:84:94:04:2f:6d:3e:41:1f:96:47:07:25:
         0c:80:84:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODIyMTUwNjMxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE4ODc3Ni03ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfcaIhXkxaJqjPIlnZOtlnjbV0VkQfrpeuL/A7MNf1010ePam3kehM57V/UV
5jirZu8hjSs3f4XT81bhdf160Qli4tTjgsPD69oMjaFKg3vVSW+kvPGHGAEe5kdi
h/Fidpjf3JdgYDKbJEYWl3MwYGFm3Aapj6HWYFcv7efeFgV/BaVHIO1E5x3hdyJH
koTdGodDwhBfXR5lf1Gn2DVMbNpMxx29Q0s6Zjuo8c6pH6Iu6HucWhz+ie15GWiY
mc+hM1hNMCbWsjoPp16JVsAOIEr27MqQoaXwE1LPJM6wTTxGt4Tk+5h110eQFdSc
WqVRa+3UVXf/G/1SVZg5RVywlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHlkHm4V
7KznsRLs299Yhy+nTW4PMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTU1MTk5RTA3
RjY5MTFGMDk4QUNEOTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJndfAwDQYJKoZIhvcNAQELBQADggEBAKBz6OpLo06PSCh/
D+BDNLabPSqXqH5lx6QYbtb1NH2sYsdsuPwgHa+HTi+gJY8U1TAFgPjcQEfgHCst
UAtCiF4QxCi/ZFNoQe+cOI+wdDOgIx8C728Hk5+D96qcbmIP7u97V5VAIduzSKsd
xD4YMsY4OvEM8yuXltCVo9YB0iLDE1Cm4sdLcwnLM4y+XSPV93M08CCwtWGohG/6
hck+WzrwUZRZO9d4a9ZHE6kMSxP8wmdMlTUMoYqremNCCDQe0rmfoJDVr0AwoNIm
f/OHPtxvARu6n5qhjzNVzB/p14YGrrmxXwTj9lVDmR8IU6PYIISUBC9tPkEflkcH
JQyAhCE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:02:22 2025 by rpki-client