Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa
File:                     CD095756AF1211EAA486D140C4F9AE02.roa (raw, json)
Hash identifier:          nvWxmCSAUBjo1M2/wF1sYZaCvwMpa6MX82x33FgigCc=
Subject key identifier:   31:E1:28:B1:E4:06:7E:4B:1F:63:40:9A:33:44:10:1E:CA:9F:E5:01
Certificate issuer:       /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial:       0918
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa
Signing time:             Sat 16 Aug 2025 20:31:09 +0000
ROA not before:           Sat 16 Aug 2025 20:31:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139194
IP address blocks:        103.139.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
        Validity
            Not Before: Aug 16 20:31:09 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68a0ea8d-dbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:66:9d:8a:48:98:55:1a:72:05:67:36:f1:
                    62:1b:c0:25:c7:4c:eb:70:1e:2a:b2:35:a5:8f:d2:
                    f2:9a:ee:f1:28:f7:58:a6:b6:2f:7a:81:07:a9:4a:
                    f1:b2:ff:d5:d6:7c:32:3d:99:15:88:7a:dd:aa:ff:
                    f3:2b:73:69:5b:2d:a7:5f:c9:e7:1b:2e:bd:6b:5d:
                    c7:f1:e6:ec:4b:8c:f6:ee:26:27:9c:8e:be:6c:98:
                    f1:e5:70:d6:be:43:3b:fd:c3:e5:6d:ac:e0:f4:56:
                    5f:7e:d5:04:93:e0:2b:00:92:5b:2e:8a:a9:2f:69:
                    94:b5:5f:98:8f:7f:56:10:e2:7a:ba:80:ef:81:dd:
                    54:0d:2b:d3:08:01:97:34:ea:9b:43:37:db:8e:c4:
                    be:09:d8:9e:31:5b:5b:d7:02:2c:62:03:61:21:9b:
                    87:6e:ba:64:4f:1a:52:82:07:84:4b:a3:6f:60:42:
                    57:48:ed:99:07:b2:28:37:19:c2:ab:cf:1e:19:01:
                    95:43:fa:ea:83:11:23:a5:9f:f7:0c:c9:b6:f9:40:
                    f9:82:5b:d8:08:bb:d9:91:8c:09:45:bd:1c:bf:a9:
                    fd:2e:d4:23:13:47:28:6f:00:15:b6:b1:b4:93:a4:
                    91:b7:a4:d7:53:52:a7:32:a1:b0:53:6c:44:2c:b7:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E1:28:B1:E4:06:7E:4B:1F:63:40:9A:33:44:10:1E:CA:9F:E5:01
            X509v3 Authority Key Identifier:
                keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e5:62:cd:77:64:5a:ae:13:e9:81:88:4d:80:94:d7:12:a5:
         a6:a4:39:74:01:4f:cb:4d:ae:4a:24:74:64:5b:d0:69:2e:8c:
         f8:da:34:59:28:f2:d1:34:e8:db:94:36:2f:4a:3d:f7:72:c3:
         79:bf:97:82:d8:10:a3:eb:1a:bd:fb:ac:4e:38:7d:78:89:9d:
         09:12:89:6f:42:61:b8:b2:5e:a3:0c:ff:f0:55:fd:c3:d0:26:
         f9:b2:7b:4e:4e:91:be:c1:7e:3d:0c:32:f7:1d:db:ef:ba:f0:
         3c:b5:f0:11:6e:82:64:0f:15:5c:a9:ab:37:da:d1:f2:b5:d2:
         30:b8:70:71:ee:ca:be:84:4e:82:72:a2:f9:d1:62:dd:ed:69:
         cc:bb:3a:d7:5a:63:d4:43:77:74:71:45:ab:ea:f8:25:14:b7:
         0c:fa:a9:72:84:c2:79:30:b1:98:47:a1:76:e9:53:da:be:5c:
         f4:ee:a2:33:fe:3b:73:7d:ad:24:03:87:c2:47:24:85:66:8f:
         7f:d3:61:85:48:31:21:e9:7c:b7:8a:a9:0b:a2:c3:38:a9:54:
         f4:ce:fc:26:f0:22:b1:a1:44:ee:a1:bc:8b:5c:9c:5e:35:f2:
         34:97:62:90:42:48:77:39:00:0c:ed:4e:4b:75:12:80:64:53:
         91:c7:23:57
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVFMjYxMTAvBgNVBAUTKDUwRkE4RThENEUyOTk3RkY1REU2MDhEQTc4Q0FDNjU0
Q0NEMTY5QjYwHhcNMjUwODE2MjAzMTA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGEwZWE4ZC1kYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjRmnYpImFUacgVnNvFiG8Alx0zrcB4qsjWlj9Lymu7xKPdYprYveoEHqUrx
sv/V1nwyPZkViHrdqv/zK3NpWy2nX8nnGy69a13H8ebsS4z27iYnnI6+bJjx5XDW
vkM7/cPlbazg9FZfftUEk+ArAJJbLoqpL2mUtV+Yj39WEOJ6uoDvgd1UDSvTCAGX
NOqbQzfbjsS+CdieMVtb1wIsYgNhIZuHbrpkTxpSggeES6NvYEJXSO2ZB7IoNxnC
q88eGQGVQ/rqgxEjpZ/3DMm2+UD5glvYCLvZkYwJRb0cv6n9LtQjE0cobwAVtrG0
k6SRt6TXU1KnMqGwU2xELLcMdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDHhKLHk
Bn5LH2NAmjNEEB7Kn+UBMB8GA1UdIwQYMBaAFFD6jo1OKZf/XeYI2njKxlTM0Wm2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyNi9BN0MxNjEwQ0FG
MTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxfOWQ1Z2phZU1yR1ZNelJh
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQcU9qVTRwbF85ZDVnamFlTXJHVk16UmFiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUVFMjYvQTdDMTYxMENBRjEwMTFFQUJGNjFEMzNBQzRGOUFFMDIvQ0QwOTU3NTZB
RjEyMTFFQUE0ODZEMTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABni5cwDQYJKoZIhvcNAQELBQADggEBAKrlYs13ZFquE+mB
iE2AlNcSpaakOXQBT8tNrkokdGRb0GkujPjaNFko8tE06NuUNi9KPfdyw3m/l4LY
EKPrGr37rE44fXiJnQkSiW9CYbiyXqMM//BV/cPQJvmye05Okb7Bfj0MMvcd2++6
8Dy18BFugmQPFVypqzfa0fK10jC4cHHuyr6EToJyovnRYt3tacy7OtdaY9RDd3Rx
Ravq+CUUtwz6qXKEwnkwsZhHoXbpU9q+XPTuojP+O3N9rSQDh8JHJIVmj3/TYYVI
MSHpfLeKqQuiwzipVPTO/CbwIrGhRO6hvItcnF418jSXYpBCSHc5AAztTkt1EoBk
U5HHI1c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:36 2025 by rpki-client