Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
File:                     01BA52A28CF411EFAE6F7F10C4F9AE02.roa (raw, json)
Hash identifier:          Z/zZPYkWKXvraJfJSL/aeXz0Ni43Av6pEICr2Ba1ixA=
Subject key identifier:   3B:52:6B:4A:2A:5E:D1:C3:A7:39:82:D1:37:4D:AA:4D:18:F0:94:C4
Certificate issuer:       /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial:       BB
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 07:05:29 +0000
ROA not before:           Wed 01 Oct 2025 07:05:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141153
IP address blocks:        103.75.236.0/24 maxlen: 24
                          2001:df1:c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
                          rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
        Validity
            Not Before: Oct  1 07:05:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68dcd2b9-24e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:71:bd:5e:b5:9e:1a:6c:de:23:c1:60:33:
                    b8:94:df:eb:16:33:dc:68:d2:17:5f:67:3a:d1:a2:
                    38:3f:b7:e7:02:30:c6:53:de:2e:d8:f6:f1:da:77:
                    f0:ef:87:25:e2:e9:40:49:b9:1d:4c:87:16:73:e0:
                    7a:24:25:d6:aa:1c:d5:fc:20:ae:da:3e:8e:df:48:
                    be:42:1e:8a:1b:d0:56:a5:5d:24:d0:51:e9:2e:1a:
                    eb:96:0f:57:49:9e:61:32:17:fe:c2:30:8d:db:cb:
                    ae:bb:7a:05:15:b2:ba:fd:3c:4b:e4:e6:5d:85:b1:
                    fe:5b:3e:97:6a:5d:cc:5e:83:fe:93:fe:8b:ff:3c:
                    a0:4f:d0:d4:6a:21:3c:11:c3:5a:5b:dd:77:3c:d5:
                    12:d8:d4:5b:f9:90:56:45:87:7d:23:e2:42:2a:83:
                    97:fa:9d:88:83:f0:cd:57:e2:31:ed:e8:28:6b:aa:
                    29:99:38:2f:fe:dc:49:9c:89:8f:bd:8b:24:bc:3a:
                    f7:e8:12:f0:23:6b:0c:34:db:4f:1f:a3:1c:93:a7:
                    41:3c:d1:7f:75:e7:f9:22:48:58:fa:00:cf:cf:48:
                    e4:81:36:e5:2b:1c:b9:f6:f1:a4:31:6e:4b:ff:53:
                    ac:a6:c7:5f:a0:db:96:8c:47:21:c7:44:46:f6:46:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:6B:4A:2A:5E:D1:C3:A7:39:82:D1:37:4D:AA:4D:18:F0:94:C4
            X509v3 Authority Key Identifier:
                keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/01BA52A28CF411EFAE6F7F10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.236.0/24
                IPv6:
                  2001:df1:c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:c6:69:50:7b:31:64:7e:7e:ce:d5:4d:e1:8a:7c:84:d4:
         f7:d0:f8:9b:89:38:35:bc:60:99:2f:8d:32:3c:f5:d2:cd:34:
         3e:43:39:59:a1:38:e4:a7:07:a6:9c:44:d4:3b:43:c5:36:c0:
         a3:21:7e:4c:c5:9c:f6:ae:ce:24:63:8a:02:41:bc:07:fe:06:
         13:c5:8f:b0:7c:c4:74:d5:df:a7:bb:7f:f6:89:3d:54:f4:ad:
         45:2c:84:25:87:e7:23:1d:57:67:e7:9d:ac:71:d1:5d:bf:02:
         6c:ee:12:ac:d6:30:09:1d:32:17:0b:89:6d:49:e6:04:ab:e1:
         e3:85:ac:c7:90:0c:77:17:1e:10:b7:1a:95:25:3d:98:fe:a9:
         95:83:02:8f:3c:ef:39:32:0b:9a:89:58:71:57:b1:8a:89:4d:
         dc:d0:85:b5:2e:f8:d0:cd:6d:69:cb:eb:47:b4:ce:77:12:ab:
         e1:b9:7b:5d:f4:3a:a5:0c:da:f9:c9:e3:61:ff:8a:01:de:d9:
         13:6e:a1:af:92:70:5b:76:87:a5:7d:71:6d:08:62:83:3c:4c:
         c5:22:88:ab:e7:1a:04:c4:d7:11:76:4c:32:e5:53:7c:c3:ae:
         80:e4:ea:3b:de:52:8a:49:38:98:c1:40:9a:6a:08:ce:1a:7e:
         09:a8:5f:93
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFEQUYxMTAvBgNVBAUTKDY4QzJCNTg4RDE2ODVBNTg3NDJEOEEyRTE4ODg2NURC
MzExMDNDRjcwHhcNMjUxMDAxMDcwNTI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRjZDJiOS0yNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGlxvV61nhps3iPBYDO4lN/rFjPcaNIXX2c60aI4P7fnAjDGU94u2Pbx2nfw
74cl4ulASbkdTIcWc+B6JCXWqhzV/CCu2j6O30i+Qh6KG9BWpV0k0FHpLhrrlg9X
SZ5hMhf+wjCN28uuu3oFFbK6/TxL5OZdhbH+Wz6Xal3MXoP+k/6L/zygT9DUaiE8
EcNaW913PNUS2NRb+ZBWRYd9I+JCKoOX+p2Ig/DNV+Ix7egoa6opmTgv/txJnImP
vYskvDr36BLwI2sMNNtPH6Mck6dBPNF/def5IkhY+gDPz0jkgTblKxy59vGkMW5L
/1OspsdfoNuWjEchx0RG9kaYbQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDtSa0oq
XtHDpzmC0TdNqk0Y8JTEMB8GA1UdIwQYMBaAFGjCtYjRaFpYdC2KLhiIZdsxEDz3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQURBRi84NzE1OUM5NjhD
RjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1dsaDBMWW91R0lobDJ6RVFQ
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FNSzFpTkZvV2xoMExZb3VHSWhsMnpFUVBQYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFEQUYvODcxNTlDOTY4Q0YzMTFFRjlGM0VBNDBGQzRGOUFFMDIvMDFCQTUyQTI4
Q0Y0MTFFRkFFNkY3RjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnS+wwDwQCAAIwCQMHACABDfEMgDANBgkqhkiG9w0BAQsF
AAOCAQEAi/LGaVB7MWR+fs7VTeGKfITU99D4m4k4NbxgmS+NMjz10s00PkM5WaE4
5KcHppxE1DtDxTbAoyF+TMWc9q7OJGOKAkG8B/4GE8WPsHzEdNXfp7t/9ok9VPSt
RSyEJYfnIx1XZ+edrHHRXb8CbO4SrNYwCR0yFwuJbUnmBKvh44Wsx5AMdxceELca
lSU9mP6plYMCjzzvOTILmolYcVexiolN3NCFtS740M1tacvrR7TOdxKr4bl7XfQ6
pQza+cnjYf+KAd7ZE26hr5JwW3aHpX1xbQhigzxMxSKIq+caBMTXEXZMMuVTfMOu
gOTqO95Sikk4mMFAmmoIzhp+Cahfkw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:13 2025 by rpki-client