Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
File:                     F77C1438964111EDAAB8E74AC4F9AE02.roa (raw, json)
Hash identifier:          +ky0h0oGrZVCR4A5CboiQnDyV8XIz9Expq1wyF8Uy80=
Subject key identifier:   E3:D7:1C:96:FD:7B:0C:DA:20:E8:29:BE:77:B5:F2:91:53:97:73:E0
Certificate issuer:       /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
Certificate serial:       01CF
Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 03:39:17 +0000
ROA not before:           Tue 01 Jul 2025 03:39:17 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     149777
IP address blocks:        103.186.50.0/23 maxlen: 23
                          103.186.50.0/24 maxlen: 24
                          103.186.51.0/24 maxlen: 24
                          2400:6e20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
        Validity
            Not Before: Jul  1 03:39:17 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=68635864-74a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:15:40:51:3c:c6:25:ca:d6:0e:04:21:f9:
                    0f:42:39:33:37:8e:1f:84:55:7b:1f:26:63:e7:06:
                    e6:49:37:1e:ec:65:b7:41:87:fd:6d:cb:fc:4c:69:
                    6b:6c:20:e1:ab:9e:96:f7:09:ea:a9:a8:22:43:32:
                    b3:18:32:f9:c7:6f:68:21:0c:80:8e:94:c0:18:d1:
                    73:c3:0f:19:fa:71:ad:2d:80:c6:2d:da:08:84:a4:
                    46:d3:63:3d:27:40:79:e6:bc:b4:b5:48:42:3b:9f:
                    ae:54:23:22:22:11:a6:92:cb:04:a0:2d:3d:e0:96:
                    1d:31:51:5b:56:fa:1d:03:8a:8d:e4:67:99:e1:bf:
                    70:26:82:27:90:ef:61:33:c5:72:cb:bc:ce:52:69:
                    ce:91:02:dd:62:2a:f6:fd:62:92:51:a1:d1:fd:87:
                    55:72:ec:49:bf:eb:ce:44:68:a8:ce:7c:19:24:c9:
                    93:4e:f9:52:94:09:6f:ff:c1:85:1e:70:35:dc:cf:
                    25:a9:84:08:be:fa:4d:3a:13:33:42:1c:d4:04:2c:
                    8f:6e:21:f1:95:03:55:c4:1d:36:75:09:c3:be:b9:
                    02:54:23:64:1e:75:9b:88:5d:a0:f9:f3:83:6f:43:
                    63:ba:5b:11:4e:5b:b1:06:ba:64:cb:a0:09:f4:b3:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:1C:96:FD:7B:0C:DA:20:E8:29:BE:77:B5:F2:91:53:97:73:E0
            X509v3 Authority Key Identifier:
                keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.50.0/23
                IPv6:
                  2400:6e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:4d:e2:e2:e8:35:fc:88:33:be:aa:80:aa:aa:66:cb:44:1a:
         82:5d:12:31:0b:41:a3:11:37:09:0f:59:8c:26:09:05:c8:93:
         ca:94:7c:cf:3d:d3:3f:b4:fb:54:e7:0c:7f:b3:32:bf:ce:c2:
         a2:87:7e:5c:35:ca:ec:48:18:6f:41:df:90:b6:2c:f4:5b:b0:
         5b:0d:95:d9:9b:51:19:4d:8e:b6:7c:85:3e:d7:ce:72:84:0b:
         25:26:ea:a3:ba:84:19:e4:db:17:ec:3b:a7:04:9b:77:db:3b:
         a7:0f:57:98:70:59:14:8b:67:f5:37:14:d3:0e:86:e0:62:d5:
         32:af:a7:a4:8d:a7:57:a7:2d:da:6a:4a:f8:44:ad:47:4b:f4:
         3b:1f:d4:18:3f:e1:9b:70:95:ed:e2:eb:c7:88:a8:42:96:85:
         91:80:20:ed:37:04:61:f4:f5:59:48:52:04:f6:8a:89:7e:7e:
         19:d6:5f:ed:d8:82:2c:b2:b9:41:b4:2b:be:d8:69:09:f3:79:
         8e:27:3c:3e:bf:9e:94:4e:13:9d:b7:60:19:eb:48:bb:a7:68:
         6c:6d:87:f2:c5:95:72:1e:33:f6:68:2d:63:c8:db:e4:b6:05:
         51:11:7e:1d:06:57:0f:8b:1e:fd:b5:6f:a8:27:f7:fb:a1:41:
         99:45:58:e6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG
ODRCNDExOTYwHhcNMjUwNzAxMDMzOTE3WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODYzNTg2NC03NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqMVQFE8xiXK1g4EIfkPQjkzN44fhFV7HyZj5wbmSTce7GW3QYf9bcv8TGlr
bCDhq56W9wnqqagiQzKzGDL5x29oIQyAjpTAGNFzww8Z+nGtLYDGLdoIhKRG02M9
J0B55ry0tUhCO5+uVCMiIhGmkssEoC094JYdMVFbVvodA4qN5GeZ4b9wJoInkO9h
M8Vyy7zOUmnOkQLdYir2/WKSUaHR/YdVcuxJv+vORGioznwZJMmTTvlSlAlv/8GF
HnA13M8lqYQIvvpNOhMzQhzUBCyPbiHxlQNVxB02dQnDvrkCVCNkHnWbiF2g+fOD
b0NjulsRTluxBrpky6AJ9LO0SwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOPXHJb9
ewzaIOgpvne18pFTl3PgMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2
M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NDREQvRjNCQkU3NkU5NjNEMTFFREJFM0ZEMDFBQzRGOUFFMDIvRjc3QzE0Mzg5
NjQxMTFFREFBQjhFNzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnujIwDQQCAAIwBwMFACQAbiAwDQYJKoZIhvcNAQELBQAD
ggEBABVN4uLoNfyIM76qgKqqZstEGoJdEjELQaMRNwkPWYwmCQXIk8qUfM890z+0
+1TnDH+zMr/OwqKHflw1yuxIGG9B35C2LPRbsFsNldmbURlNjrZ8hT7XznKECyUm
6qO6hBnk2xfsO6cEm3fbO6cPV5hwWRSLZ/U3FNMOhuBi1TKvp6SNp1enLdpqSvhE
rUdL9Dsf1Bg/4Ztwle3i68eIqEKWhZGAIO03BGH09VlIUgT2iol+fhnWX+3Ygiyy
uUG0K77YaQnzeY4nPD6/npROE523YBnrSLunaGxth/LFlXIeM/ZoLWPI2+S2BVER
fh0GVw+LHv21b6gn9/uhQZlFWOY=
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:22:53 2025 by rpki-client