Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
File:                     D056896E592A11E889035A70C4F9AE02.roa (raw, json)
Hash identifier:          aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=
Subject key identifier:   30:FD:05:AA:3C:CC:CA:16:42:81:22:B4:E6:8F:5F:C8:3D:9C:3A:C9
Certificate issuer:       /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial:       14D9
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
Signing time:             Tue 10 Jun 2025 17:17:49 +0000
ROA not before:           Tue 10 Jun 2025 17:17:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137567
IP address blocks:        103.113.184.0/22 maxlen: 24
                          2402:c040::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
                          rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5337 (0x14d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
        Validity
            Not Before: Jun 10 17:17:49 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=684868bd-b7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:bf:cb:15:d5:09:ea:0e:90:32:24:89:4c:
                    5c:fa:29:92:d5:bf:81:7d:2a:16:7f:1c:5d:73:77:
                    36:e7:21:b8:c1:67:2f:56:14:3d:c2:68:47:07:e2:
                    73:2c:d6:c2:16:21:7d:09:e7:ac:0b:c5:dc:42:0c:
                    62:4c:25:66:e1:2e:f1:30:35:5e:02:23:a8:30:5d:
                    e8:b9:2f:10:a3:0f:4b:f5:60:a6:01:6c:5b:01:9f:
                    ff:49:7a:23:9f:ce:a7:c9:c6:9a:31:67:da:f2:68:
                    63:ec:33:96:bd:f0:e4:5d:69:d9:3d:c7:03:ad:9d:
                    9c:1c:17:db:09:de:5d:49:40:52:3f:64:d3:55:d7:
                    0f:95:e4:5f:3c:98:72:91:13:d7:48:25:dc:74:90:
                    a5:a8:45:2a:20:0f:d7:87:bc:d2:7d:56:72:4d:8c:
                    db:37:9c:73:5c:7d:95:c8:0f:a0:b4:6f:5e:61:50:
                    79:e0:bd:cb:71:92:08:ec:1e:e9:a1:23:e1:49:81:
                    26:3d:00:fe:b8:eb:e6:14:e4:e6:05:f6:70:b3:cf:
                    5c:9c:a8:f4:3d:9f:c7:f2:53:7e:d1:17:cc:02:ac:
                    5c:d6:d2:c6:13:b8:bc:85:37:51:8e:c6:d5:80:56:
                    50:42:9f:13:91:12:fa:e2:99:13:11:05:ec:e0:6d:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FD:05:AA:3C:CC:CA:16:42:81:22:B4:E6:8F:5F:C8:3D:9C:3A:C9
            X509v3 Authority Key Identifier:
                keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/D056896E592A11E889035A70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.184.0/22
                IPv6:
                  2402:c040::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:7f:7a:c8:e9:62:f3:af:de:64:db:e7:b6:69:3b:57:79:
         a7:4e:fb:97:16:c8:3a:07:3b:65:a7:b0:b7:da:8e:eb:ed:a3:
         54:ac:f7:7f:62:1a:ac:71:03:30:98:89:d3:36:fa:3d:0b:fe:
         23:96:19:1a:2d:b4:1f:fa:0b:84:3c:fc:35:82:4e:68:81:3a:
         0a:8c:58:e8:1a:fb:86:f9:ec:42:35:3c:8d:3b:9b:e3:8b:1f:
         c6:5f:a6:62:84:6d:4f:95:05:3d:4a:d7:6e:9b:cf:54:50:66:
         d4:f3:41:68:30:25:a9:ea:f7:6f:bf:b9:82:28:db:2d:b0:1b:
         02:36:0b:5d:ab:0e:f9:8a:cf:75:b9:d8:82:ec:2a:0a:f3:c6:
         a5:b6:af:bc:f1:76:fb:ee:7d:c3:5d:45:2f:b5:09:cd:ac:a4:
         e7:cf:a3:c4:2d:6a:e8:4a:48:5d:c4:f3:5a:f1:22:25:ef:30:
         4c:50:6f:da:fc:2b:6b:76:16:03:6c:1d:45:e1:98:f5:63:de:
         04:0b:be:ee:91:d9:95:83:8a:dc:01:fe:ea:a7:d6:ae:67:2a:
         39:f8:08:96:9c:11:29:3b:de:35:76:cb:f5:77:38:bf:b8:7c:
         d9:da:3c:7a:92:04:4a:bd:ad:2e:ab:99:ee:93:72:21:7e:85:
         49:d7:4f:8e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD
MTk3NzA2MDIwHhcNMjUwNjEwMTcxNzQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQ4NjhiZC1iN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosG/yxXVCeoOkDIkiUxc+imS1b+BfSoWfxxdc3c25yG4wWcvVhQ9wmhHB+Jz
LNbCFiF9CeesC8XcQgxiTCVm4S7xMDVeAiOoMF3ouS8Qow9L9WCmAWxbAZ//SXoj
n86nycaaMWfa8mhj7DOWvfDkXWnZPccDrZ2cHBfbCd5dSUBSP2TTVdcPleRfPJhy
kRPXSCXcdJClqEUqIA/Xh7zSfVZyTYzbN5xzXH2VyA+gtG9eYVB54L3LcZII7B7p
oSPhSYEmPQD+uOvmFOTmBfZws89cnKj0PZ/H8lN+0RfMAqxc1tLGE7i8hTdRjsbV
gFZQQp8TkRL64pkTEQXs4G0w/QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDD9Bao8
zMoWQoEitOaPX8g9nDrJMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5
MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC
Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzNFRjYvQUM0REFCQzY1OTI4MTFFODhFNUI0NDZCQzRGOUFFMDIvRDA1Njg5NkU1
OTJBMTFFODg5MDM1QTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJncbgwDQQCAAIwBwMFACQCwEAwDQYJKoZIhvcNAQELBQAD
ggEBACzFf3rI6WLzr95k2+e2aTtXeadO+5cWyDoHO2WnsLfajuvto1Ss939iGqxx
AzCYidM2+j0L/iOWGRottB/6C4Q8/DWCTmiBOgqMWOga+4b57EI1PI07m+OLH8Zf
pmKEbU+VBT1K126bz1RQZtTzQWgwJanq92+/uYIo2y2wGwI2C12rDvmKz3W52ILs
KgrzxqW2r7zxdvvufcNdRS+1Cc2spOfPo8QtauhKSF3E81rxIiXvMExQb9r8K2t2
FgNsHUXhmPVj3gQLvu6R2ZWDitwB/uqn1q5nKjn4CJacESk73jV2y/V3OL+4fNna
PHqSBEq9rS6rme6TciF+hUnXT44=
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:31:52 2025 by rpki-client