Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/310AEC7A5B7C11EDAAFAB831C4F9AE02.roa
File:                     310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (raw, json)
Hash identifier:          y3OZF+3yS21va8DTETIk41Nb13Feo85xufsVmJd2vzw=
Subject key identifier:   17:18:FB:D7:83:DD:6D:B9:C2:EC:4C:28:3C:8F:F7:83:38:BC:43:3D
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       0247
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/310AEC7A5B7C11EDAAFAB831C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 02:29:10 +0000
ROA not before:           Wed 01 Oct 2025 02:29:10 +0000
ROA not after:            Fri 30 Jan 2026 00:00:00 +0000
asID:                     45867
IP address blocks:        203.17.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Oct  1 02:29:10 2025 GMT
            Not After : Jan 30 00:00:00 2026 GMT
        Subject: CN=68dc91f6-40a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:1d:05:4e:02:f1:e6:f4:a7:49:3f:08:39:
                    26:20:7d:7a:b7:a7:51:59:6e:52:fb:07:a8:59:7a:
                    0c:76:ba:b3:6e:8f:5a:b9:6e:2a:5f:95:a4:c9:e8:
                    d6:2f:a5:a0:7d:8d:21:0a:86:f4:1c:3b:39:94:10:
                    92:4b:79:6f:0e:17:db:00:38:a3:c8:54:d0:1d:09:
                    fb:60:36:ff:57:66:4e:8f:5d:dc:b5:07:5c:b3:40:
                    c6:1a:db:72:54:17:42:7e:c4:6f:30:d4:42:3c:43:
                    23:3f:72:7b:91:c8:5f:30:50:9c:fb:2f:07:7a:2e:
                    a3:16:2a:ac:66:72:71:26:3e:30:09:a3:0c:7c:68:
                    2f:44:16:5e:79:44:49:8c:de:8f:a3:55:e9:b7:bc:
                    6c:81:31:eb:d2:1a:52:88:ba:34:54:be:56:d5:3e:
                    81:5c:bc:8c:bd:27:51:ba:15:31:f5:99:38:27:4e:
                    9f:0f:c0:5d:c3:fe:98:2e:91:a3:cf:32:11:89:ca:
                    58:b0:c5:53:92:76:d0:c2:cb:41:a6:37:5a:54:0d:
                    13:de:ec:30:55:d3:af:d8:37:94:5d:ca:35:1e:38:
                    f7:97:cc:13:3b:21:ca:57:59:cd:80:ef:de:cd:ea:
                    bd:ca:d4:fc:d0:97:72:41:3b:0d:94:8d:3d:75:4e:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:FB:D7:83:DD:6D:B9:C2:EC:4C:28:3C:8F:F7:83:38:BC:43:3D
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/310AEC7A5B7C11EDAAFAB831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:33:32:d8:7c:e1:d0:d2:7b:cd:d1:6a:5f:ba:b2:29:1a:82:
         ac:29:2d:2e:9a:73:a3:5a:0e:66:c6:4c:89:3f:92:05:42:00:
         05:20:19:f1:1d:0b:a9:de:1e:ff:25:63:0d:bc:4f:03:94:2c:
         63:b3:50:de:38:b8:7b:12:ae:aa:de:7f:0d:4b:d3:1f:1f:22:
         63:0e:f9:88:90:62:24:fb:07:42:45:72:f0:9a:5d:32:eb:15:
         8d:c1:e2:df:85:72:0b:41:15:5b:34:34:58:ec:ef:21:b3:f2:
         3d:7f:0c:b5:a9:1f:4e:58:ad:01:41:2d:fa:ab:a4:9e:aa:81:
         43:63:4b:a0:c7:75:8c:e6:73:3c:24:90:34:d3:a7:4e:c2:19:
         5f:0e:83:ef:da:72:bb:8d:35:90:74:2f:8f:6c:f2:37:bf:87:
         02:43:03:f5:81:c3:52:be:86:e9:60:94:c7:73:9d:1c:1e:cd:
         29:64:2d:75:60:7c:27:cd:db:84:02:d4:b9:2a:41:96:f5:94:
         c6:85:06:42:4e:67:4c:07:15:a5:9a:71:bf:22:ce:06:ed:e8:
         85:13:41:aa:82:ed:6e:21:35:1c:74:f1:70:83:36:ff:3f:ae:
         d6:c1:0e:5e:c9:81:72:e6:61:a7:e4:dd:4a:59:78:a1:d3:d4:
         5f:85:f9:32
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2
MEI2NkI4MDAwHhcNMjUxMDAxMDIyOTEwWhcNMjYwMTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRjOTFmNi00MGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzu8dBU4C8eb0p0k/CDkmIH16t6dRWW5S+weoWXoMdrqzbo9auW4qX5WkyejW
L6WgfY0hCob0HDs5lBCSS3lvDhfbADijyFTQHQn7YDb/V2ZOj13ctQdcs0DGGtty
VBdCfsRvMNRCPEMjP3J7kchfMFCc+y8Hei6jFiqsZnJxJj4wCaMMfGgvRBZeeURJ
jN6Po1Xpt7xsgTHr0hpSiLo0VL5W1T6BXLyMvSdRuhUx9Zk4J06fD8Bdw/6YLpGj
zzIRicpYsMVTknbQwstBpjdaVA0T3uwwVdOv2DeUXco1Hjj3l8wTOyHKV1nNgO/e
zeq9ytT80JdyQTsNlI09dU64GwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBcY+9eD
3W25wuxMKDyP94M4vEM9MB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5
MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QURCOTgvRTJEQTg1MTg0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMzEwQUVDN0E1
QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLEbkwDQYJKoZIhvcNAQELBQADggEBAKgzMth84dDSe83R
al+6sikagqwpLS6ac6NaDmbGTIk/kgVCAAUgGfEdC6neHv8lYw28TwOULGOzUN44
uHsSrqrefw1L0x8fImMO+YiQYiT7B0JFcvCaXTLrFY3B4t+FcgtBFVs0NFjs7yGz
8j1/DLWpH05YrQFBLfqrpJ6qgUNjS6DHdYzmczwkkDTTp07CGV8Og+/acruNNZB0
L49s8je/hwJDA/WBw1K+hulglMdznRwezSlkLXVgfCfN24QC1LkqQZb1lMaFBkJO
Z0wHFaWacb8izgbt6IUTQaqC7W4hNRx08XCDNv8/rtbBDl7JgXLmYafk3UpZeKHT
1F+F+TI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:26:20 2025 by rpki-client