Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/F6BB410AA34E11F0B508F67EC4F9AE02.roa
File:                     F6BB410AA34E11F0B508F67EC4F9AE02.roa (raw, json)
Hash identifier:          8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=
Subject key identifier:   77:E9:E6:EC:5B:DF:41:CB:EF:89:1F:BD:BB:E7:7E:97:21:8A:6B:09
Certificate issuer:       /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial:       0130
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/F6BB410AA34E11F0B508F67EC4F9AE02.roa
Signing time:             Tue 07 Oct 2025 07:26:39 +0000
ROA not before:           Tue 07 Oct 2025 07:26:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153634
IP address blocks:        202.50.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
                          rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
        Validity
            Not Before: Oct  7 07:26:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68e4c0af-811c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:58:c4:1f:f1:b1:a5:82:dd:6f:bd:ae:75:
                    4b:62:c6:dc:be:de:ac:22:07:b9:34:6d:34:bf:5a:
                    d8:c2:cc:c1:2a:de:79:00:a8:c3:28:4d:31:8e:ca:
                    9a:06:59:cc:ec:96:c4:f9:04:b5:2a:b2:b2:cf:8a:
                    26:64:52:08:94:ef:72:8f:4f:a1:c0:b2:93:9b:97:
                    1f:74:c7:45:a8:8f:41:99:98:16:7c:ec:41:89:d9:
                    8f:05:32:b4:ce:de:95:08:91:4d:66:f7:b5:81:24:
                    34:54:56:c5:c7:cd:6f:49:73:2a:89:e3:84:a7:04:
                    f2:b0:1d:07:27:31:71:ae:21:52:93:0c:ad:7e:dc:
                    30:e4:e5:12:06:2c:5c:7c:ee:0b:2f:ed:8b:3b:b5:
                    a1:46:8a:c1:54:51:fb:c0:05:aa:41:e9:22:5b:dd:
                    9c:94:d0:06:63:f4:8e:55:cf:44:54:8a:4e:0e:99:
                    e5:e4:95:11:60:38:fc:20:a0:51:c3:69:d5:cc:62:
                    1a:d1:0d:01:9a:c8:20:37:df:17:5c:5b:07:ec:73:
                    3f:98:c1:a9:db:68:cf:ed:6c:c1:9e:21:56:2d:c8:
                    c4:20:ca:4c:cf:02:71:b6:7e:a0:8f:19:2c:7e:e6:
                    9d:0d:60:d9:80:96:2c:89:fb:f3:b4:b9:80:9b:ac:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:E6:EC:5B:DF:41:CB:EF:89:1F:BD:BB:E7:7E:97:21:8A:6B:09
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/F6BB410AA34E11F0B508F67EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:0c:e5:cf:d4:3a:7a:1d:a6:76:f6:0c:04:4f:30:c0:ee:22:
         e0:c4:88:3d:d6:40:d5:a4:ac:c1:2f:87:b2:d0:38:46:a1:39:
         d7:24:82:77:8f:47:ee:8a:ab:53:38:fe:d6:c5:74:9c:0f:df:
         b6:50:3a:cc:42:73:b3:1e:e9:7f:94:ba:ea:00:33:4c:e6:0b:
         66:76:9d:0a:d7:a6:7a:ee:5e:ba:46:85:7e:ab:0b:03:50:4c:
         eb:bc:74:04:fa:49:05:a0:46:67:c4:5a:3a:04:e3:70:f9:ea:
         f4:ae:ac:3b:d8:48:2b:73:dc:f3:f0:d0:1c:ce:cf:8f:f7:a3:
         6f:9b:88:59:0a:29:0b:24:31:43:73:8d:0d:5e:b0:84:56:07:
         8b:4f:1f:87:a1:ad:5a:e9:8b:49:56:d0:45:34:85:22:c2:39:
         d2:fe:77:a5:d5:1b:fe:95:36:34:0f:ae:44:4c:4e:80:6c:40:
         0f:48:5f:14:ed:34:bb:b2:97:36:0c:e4:fc:fa:ab:de:ad:71:
         4f:e0:3e:54:86:ea:20:4a:00:d1:48:e4:49:f0:0c:32:3a:13:
         28:55:52:6c:d7:58:02:cd:13:1b:e1:b5:d9:9e:e3:04:cd:05:
         35:6b:5f:19:ee:58:c3:94:66:21:6c:05:0f:4a:d1:9e:a0:54:
         a3:af:40:e3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND
NkJEQkQzMjIwHhcNMjUxMDA3MDcyNjM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU0YzBhZi04MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2BYxB/xsaWC3W+9rnVLYsbcvt6sIge5NG00v1rYwszBKt55AKjDKE0xjsqa
BlnM7JbE+QS1KrKyz4omZFIIlO9yj0+hwLKTm5cfdMdFqI9BmZgWfOxBidmPBTK0
zt6VCJFNZve1gSQ0VFbFx81vSXMqieOEpwTysB0HJzFxriFSkwytftww5OUSBixc
fO4LL+2LO7WhRorBVFH7wAWqQekiW92clNAGY/SOVc9EVIpODpnl5JURYDj8IKBR
w2nVzGIa0Q0BmsggN98XXFsH7HM/mMGp22jP7WzBniFWLcjEIMpMzwJxtn6gjxks
fuadDWDZgJYsifvztLmAm6zsxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHfp5uxb
30HL74kfvbvnfpchimsJMB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2
QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjgwQzIvRkU0OEFCRjQwNkIyMTFFRkJDRTAzNDVDQzRGOUFFMDIvRjZCQjQxMEFB
MzRFMTFGMEI1MDhGNjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKMnEwDQYJKoZIhvcNAQELBQADggEBAKwM5c/UOnodpnb2
DARPMMDuIuDEiD3WQNWkrMEvh7LQOEahOdckgnePR+6Kq1M4/tbFdJwP37ZQOsxC
c7Me6X+UuuoAM0zmC2Z2nQrXpnruXrpGhX6rCwNQTOu8dAT6SQWgRmfEWjoE43D5
6vSurDvYSCtz3PPw0BzOz4/3o2+biFkKKQskMUNzjQ1esIRWB4tPH4ehrVrpi0lW
0EU0hSLCOdL+d6XVG/6VNjQPrkRMToBsQA9IXxTtNLuylzYM5Pz6q96tcU/gPlSG
6iBKANFI5EnwDDI6EyhVUmzXWALNExvhtdme4wTNBTVrXxnuWMOUZiFsBQ9K0Z6g
VKOvQOM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:34:43 2025 by rpki-client