Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/13713EBA7CF011F0A1556D56C4F9AE02.roa
File:                     13713EBA7CF011F0A1556D56C4F9AE02.roa (raw, json)
Hash identifier:          T9ZQW9KI45+yftMg3AeOLdDC7qadlsWAl60UTn6wQQc=
Subject key identifier:   E2:55:44:76:C4:77:98:0C:41:9C:22:D7:AE:12:2C:EF:BE:3C:E2:90
Certificate issuer:       /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial:       0175
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/13713EBA7CF011F0A1556D56C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 11:31:41 +0000
ROA not before:           Tue 19 Aug 2025 11:31:41 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     154109
IP address blocks:        103.218.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
        Validity
            Not Before: Aug 19 11:31:41 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68a4609d-5648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:9c:3e:81:6a:c4:4f:c6:f4:39:44:12:a7:
                    f6:71:48:24:90:fa:58:63:be:19:a5:63:80:18:21:
                    e8:47:ef:27:b2:6c:90:98:b9:13:10:95:45:79:a6:
                    2e:5d:52:a3:08:cf:72:57:01:fb:4e:0d:35:0d:55:
                    3a:f6:cd:5e:cf:03:02:b9:b5:c0:92:da:39:c7:c1:
                    71:74:47:ae:45:38:ad:20:f4:c2:06:3d:e4:5e:89:
                    60:6c:9f:1f:13:d0:06:45:44:bc:84:12:64:72:97:
                    10:42:df:24:eb:c9:7f:d5:b1:94:5f:a8:bf:7d:c7:
                    60:c3:b9:9f:88:d6:17:94:a3:5f:46:b1:b1:7c:a9:
                    27:6b:74:fc:50:d1:9a:be:95:df:99:85:5c:e7:e1:
                    eb:d3:42:0c:a6:3e:11:69:5e:df:48:4a:45:67:8e:
                    1b:e2:0d:83:21:4f:0e:5b:41:fe:f3:52:83:e1:c7:
                    89:d3:5b:26:86:48:1b:27:38:e8:cc:f2:e4:c4:0e:
                    1e:ad:9c:3b:fc:13:d1:a8:5f:62:cf:fe:79:6e:c3:
                    cb:ad:28:cc:34:49:31:81:a2:6e:45:dc:e8:d8:e9:
                    72:5f:cd:e9:5f:a7:f2:30:c7:21:b2:d3:5e:2a:d6:
                    f2:ad:30:5f:f8:35:5b:5e:31:4c:1b:c5:21:c5:f9:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:55:44:76:C4:77:98:0C:41:9C:22:D7:AE:12:2C:EF:BE:3C:E2:90
            X509v3 Authority Key Identifier:
                keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/13713EBA7CF011F0A1556D56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:ed:43:b1:12:e9:c2:57:d6:62:df:b2:71:44:d9:e0:47:c1:
         fa:7f:85:30:23:84:c3:b5:2e:bb:91:ea:af:03:d1:45:e9:88:
         37:f9:be:17:7e:ed:ae:bc:12:5e:ae:32:51:a8:ee:30:bc:93:
         71:aa:d3:7a:62:3d:10:cb:2c:64:6c:38:39:5a:6c:05:a9:ed:
         c9:13:bf:78:cc:11:72:99:d7:05:19:0f:f3:9b:3a:00:c7:32:
         9a:e1:b3:8a:a0:ec:4b:ac:7f:68:0b:b7:8e:ba:a2:f5:35:c8:
         1e:3a:a3:a2:f1:c0:c0:86:30:b8:1b:98:87:b8:e3:d8:2f:26:
         cd:76:3c:e4:ef:1a:b0:d0:d2:be:3e:fe:77:c4:24:23:11:14:
         96:e2:47:1b:02:81:c5:50:e1:f4:3b:0c:47:c8:b1:90:e2:c2:
         85:c7:1a:3c:4b:b7:22:e5:38:af:87:cb:3d:64:b9:ae:67:4d:
         6d:e2:01:f8:be:c1:3e:88:f4:e3:62:03:b4:c2:de:89:d5:f5:
         8b:c9:c1:24:1b:df:9d:1b:ff:95:cb:34:9c:17:18:3d:36:f4:
         4d:a1:1d:b0:2c:a3:bf:9e:0c:ce:28:27:4f:1d:9d:46:2a:4c:
         b0:33:8f:a8:3c:c1:2f:79:01:4a:30:2c:e1:13:29:ac:66:cf:
         97:8f:8b:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2
QzU0NEQ2RDMwHhcNMjUwODE5MTEzMTQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE0NjA5ZC01NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwecPoFqxE/G9DlEEqf2cUgkkPpYY74ZpWOAGCHoR+8nsmyQmLkTEJVFeaYu
XVKjCM9yVwH7Tg01DVU69s1ezwMCubXAkto5x8FxdEeuRTitIPTCBj3kXolgbJ8f
E9AGRUS8hBJkcpcQQt8k68l/1bGUX6i/fcdgw7mfiNYXlKNfRrGxfKkna3T8UNGa
vpXfmYVc5+Hr00IMpj4RaV7fSEpFZ44b4g2DIU8OW0H+81KD4ceJ01smhkgbJzjo
zPLkxA4erZw7/BPRqF9iz/55bsPLrSjMNEkxgaJuRdzo2OlyX83pX6fyMMchstNe
KtbyrTBf+DVbXjFMG8UhxfmPxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOJVRHbE
d5gMQZwi164SLO++POKQMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy
QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0JFNEUvREIwM0Y2NUE1MkM5MTFFRTkwMzI4RjE0QzRGOUFFMDIvMTM3MTNFQkE3
Q0YwMTFGMEExNTU2RDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn2okwDQYJKoZIhvcNAQELBQADggEBALftQ7ES6cJX1mLf
snFE2eBHwfp/hTAjhMO1LruR6q8D0UXpiDf5vhd+7a68El6uMlGo7jC8k3Gq03pi
PRDLLGRsODlabAWp7ckTv3jMEXKZ1wUZD/ObOgDHMprhs4qg7Eusf2gLt466ovU1
yB46o6LxwMCGMLgbmIe449gvJs12POTvGrDQ0r4+/nfEJCMRFJbiRxsCgcVQ4fQ7
DEfIsZDiwoXHGjxLtyLlOK+Hyz1kua5nTW3iAfi+wT6I9ONiA7TC3onV9YvJwSQb
350b/5XLNJwXGD029E2hHbAso7+eDM4oJ08dnUYqTLAzj6g8wS95AUowLOETKaxm
z5ePiy8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:00:24 2025 by rpki-client