Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
File:                     B6DA2BD8E33F11EB9832A354C4F9AE02.roa (raw, json)
Hash identifier:          u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=
Subject key identifier:   0C:66:78:D8:F0:71:AC:46:18:47:FB:6D:D6:1A:48:CC:6C:44:62:DB
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       1467
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 17:25:20 +0000
ROA not before:           Wed 02 Jul 2025 17:25:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137443
IP address blocks:        103.117.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5223 (0x1467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Jul  2 17:25:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68656b7f-a5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:fd:f7:fc:e8:2c:b0:4a:e5:8c:2a:54:4d:
                    83:df:46:68:80:7b:94:5c:13:5b:a1:61:7a:18:30:
                    be:d9:d4:42:0e:d1:7f:f4:46:f6:2e:2b:25:aa:01:
                    8d:37:26:33:06:3f:af:32:83:c9:25:a6:85:4d:41:
                    f5:3e:38:7e:86:f2:6d:0c:2b:07:b9:1b:b1:7f:5d:
                    03:ff:60:8d:4d:f4:0b:73:ae:04:44:58:ce:23:45:
                    ab:8e:52:0a:80:0f:93:e4:f5:08:8a:52:24:e6:fc:
                    47:eb:b3:20:ee:04:14:93:50:cd:0f:1a:43:04:55:
                    9f:39:71:cc:39:01:74:4f:8d:17:d4:be:c7:3e:67:
                    30:de:3b:91:aa:c1:6e:b5:c4:1e:e2:9f:5f:34:38:
                    f2:8a:62:31:75:89:10:07:7e:ad:f8:9f:ff:a5:92:
                    56:8e:0a:8e:e9:12:af:00:f9:8c:00:d3:94:d6:f2:
                    a6:e0:f6:41:a8:30:aa:00:8e:1c:e1:19:0c:80:3c:
                    d7:c0:92:26:66:38:0f:d5:f9:d4:91:a5:17:fc:81:
                    57:d8:ed:d6:ea:a5:5c:5f:30:35:5e:c5:2a:db:b1:
                    9b:f6:a3:18:fe:58:47:01:c8:25:d1:8c:43:43:ae:
                    8a:b4:a2:2c:ce:b3:8e:4e:20:fc:a9:07:55:86:67:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:78:D8:F0:71:AC:46:18:47:FB:6D:D6:1A:48:CC:6C:44:62:DB
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:45:19:d0:56:30:a6:ce:dc:e8:2f:f7:bf:57:54:54:af:8e:
         14:6f:ee:77:5e:6d:b1:dd:1c:5d:e6:f2:3b:01:40:60:89:d0:
         29:27:63:60:b3:69:b7:bc:3a:02:1f:98:6d:63:84:7e:01:a0:
         28:01:ad:a7:ea:26:06:bd:10:cc:64:97:5d:d2:d4:89:4c:3a:
         07:25:7c:47:30:22:b5:e3:19:6d:39:9f:71:f4:23:82:ba:c6:
         1b:81:11:96:74:1d:6f:d5:97:e8:22:6d:1a:ea:df:15:e9:3a:
         5f:67:dd:37:45:65:58:c3:2c:b2:21:29:bd:3b:f6:6b:9b:ab:
         8f:fd:11:b3:a7:ec:20:4d:7c:92:75:e2:f8:80:ea:8b:04:64:
         43:06:39:16:33:d1:16:01:87:a0:05:bc:fc:18:e3:1f:8f:50:
         5e:da:02:02:2d:15:9e:fa:d6:72:12:88:b9:25:bc:4c:ba:e6:
         b1:82:58:0c:36:15:59:9d:01:72:a1:d3:21:57:ac:5c:28:22:
         27:01:96:0c:a6:f2:a9:93:a2:15:f7:93:5d:02:d3:95:61:92:
         23:4b:67:bc:fb:9a:b8:e9:ef:b9:f4:47:85:66:dd:62:f3:ce:
         c1:cb:75:b3:74:09:ca:7f:49:03:5a:e0:18:79:74:09:05:63:
         7a:69:20:df
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz
NzJDN0UyOTIwHhcNMjUwNzAyMTcyNTIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY1NmI3Zi1hNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAr99/zoLLBK5YwqVE2D30ZogHuUXBNboWF6GDC+2dRCDtF/9Eb2LislqgGN
NyYzBj+vMoPJJaaFTUH1Pjh+hvJtDCsHuRuxf10D/2CNTfQLc64ERFjOI0WrjlIK
gA+T5PUIilIk5vxH67Mg7gQUk1DNDxpDBFWfOXHMOQF0T40X1L7HPmcw3juRqsFu
tcQe4p9fNDjyimIxdYkQB36t+J//pZJWjgqO6RKvAPmMANOU1vKm4PZBqDCqAI4c
4RkMgDzXwJImZjgP1fnUkaUX/IFX2O3W6qVcXzA1XsUq27Gb9qMY/lhHAcgl0YxD
Q66KtKIszrOOTiD8qQdVhmdQpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAxmeNjw
caxGGEf7bdYaSMxsRGLbMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4
M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU2RkIvRTlGNTEwNDY3ODNBMTFFODkwN0Q1MjFBQzRGOUFFMDIvQjZEQTJCRDhF
MzNGMTFFQjk4MzJBMzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJndWQwDQYJKoZIhvcNAQELBQADggEBAElFGdBWMKbO3Ogv
979XVFSvjhRv7ndebbHdHF3m8jsBQGCJ0CknY2Czabe8OgIfmG1jhH4BoCgBrafq
Jga9EMxkl13S1IlMOgclfEcwIrXjGW05n3H0I4K6xhuBEZZ0HW/Vl+gibRrq3xXp
Ol9n3TdFZVjDLLIhKb079mubq4/9EbOn7CBNfJJ14viA6osEZEMGORYz0RYBh6AF
vPwY4x+PUF7aAgItFZ761nISiLklvEy65rGCWAw2FVmdAXKh0yFXrFwoIicBlgym
8qmTohX3k10C05VhkiNLZ7z7mrjp77n0R4Vm3WLzzsHLdbN0Ccp/SQNa4Bh5dAkF
Y3ppIN8=
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:43:54 2025 by rpki-client