Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
File:                     A6ACA298858911E88026B416C4F9AE02.roa (raw, json)
Hash identifier:          KhZ44smvv0XMa3hY/4cdC4BTlTI2qU0P4EUvi2XPNs8=
Subject key identifier:   E8:AE:05:A1:A1:4D:8E:80:B7:33:79:AA:B3:7B:65:13:A6:6D:4C:B1
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       190A
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
Signing time:             Wed 10 Sep 2025 16:55:22 +0000
ROA not before:           Wed 10 Sep 2025 16:55:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     3223
IP address blocks:        103.118.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6410 (0x190a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Sep 10 16:55:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c1ad79-3332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:40:fe:e6:d4:16:72:ce:9a:ea:52:98:4e:
                    34:e3:35:c7:27:4b:e4:e0:13:9e:81:65:08:f2:76:
                    8e:4d:64:8e:d4:a7:39:9a:4b:9e:68:8e:a9:9c:05:
                    3a:f6:f5:81:84:3b:db:02:72:bd:fc:45:5e:3e:dd:
                    57:c0:cc:dc:8c:d1:d9:25:36:bf:9e:e3:ad:00:ed:
                    a6:69:2f:b1:b8:8e:ca:f9:f6:ac:97:17:d2:b1:74:
                    d3:aa:2c:4c:d0:97:46:df:95:33:24:4d:b6:27:37:
                    86:0d:b1:93:ee:a1:fa:06:31:9b:f9:a8:58:63:13:
                    be:32:f2:2c:3e:da:15:b6:d1:d6:f1:14:32:12:fb:
                    53:77:e5:21:ce:ae:aa:8a:3f:b8:ec:91:f7:79:39:
                    97:b0:34:14:42:4d:4f:80:5c:c8:ba:e7:ec:10:f4:
                    17:e5:b6:ae:c6:18:3b:2c:73:ba:76:20:16:f8:7f:
                    92:36:98:fc:39:71:e4:4f:ef:8e:08:90:be:1b:aa:
                    23:b3:db:f7:55:41:d7:f6:e0:3d:0f:e9:3b:00:a1:
                    dd:e1:dd:8d:02:99:2f:28:53:10:55:52:7d:64:d2:
                    0a:c7:df:d9:3b:df:d3:3c:7a:eb:97:59:5f:47:b2:
                    cf:5b:d8:38:5d:71:7d:b2:07:e6:e7:6d:ee:1b:5f:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:05:A1:A1:4D:8E:80:B7:33:79:AA:B3:7B:65:13:A6:6D:4C:B1
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:26:f1:51:1a:7a:4f:b0:26:54:89:d0:bb:6a:4b:ba:13:
         81:c1:9d:f6:04:cd:d1:30:75:5f:68:f5:5d:0a:76:56:24:1f:
         d9:67:2e:20:33:09:15:df:63:43:86:a8:91:e4:93:74:dd:bf:
         52:56:56:36:e6:e6:e0:2c:ca:13:30:44:cd:11:c0:e4:28:66:
         28:d0:6f:ef:e2:7a:66:5c:a8:98:7f:e1:88:e3:59:0c:31:4b:
         2e:16:9f:27:77:69:ad:6b:8b:89:1d:ff:87:fd:1b:70:4f:5f:
         c1:12:f6:8d:45:1d:fc:63:19:a7:90:62:13:4d:65:37:b4:81:
         31:54:f5:e5:dd:45:f0:1c:e8:bd:70:3e:5b:dd:a2:d1:84:06:
         18:62:e4:ef:7a:1b:20:27:dd:6c:cd:79:c9:32:6b:7b:69:fd:
         24:07:a0:d5:1e:23:f7:f8:72:24:56:a0:16:bb:d0:7c:1d:e4:
         cb:e7:a3:88:d8:b7:bb:b6:ce:50:dd:eb:d3:4f:5f:4f:15:2b:
         7b:c2:75:fa:eb:4d:9e:b8:13:a2:d2:4c:23:e2:31:73:20:ff:
         95:84:e5:6a:d1:22:38:40:d2:65:74:ed:a1:7e:56:68:38:49:
         1d:c6:09:bc:77:60:5a:72:cf:cc:5a:c3:8f:3e:90:d8:45:02:
         de:05:43:63
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG
OEFCQUQxQjAwHhcNMjUwOTEwMTY1NTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGMxYWQ3OS0zMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMlA/ubUFnLOmupSmE404zXHJ0vk4BOegWUI8naOTWSO1Kc5mkueaI6pnAU6
9vWBhDvbAnK9/EVePt1XwMzcjNHZJTa/nuOtAO2maS+xuI7K+faslxfSsXTTqixM
0JdG35UzJE22JzeGDbGT7qH6BjGb+ahYYxO+MvIsPtoVttHW8RQyEvtTd+Uhzq6q
ij+47JH3eTmXsDQUQk1PgFzIuufsEPQX5bauxhg7LHO6diAW+H+SNpj8OXHkT++O
CJC+G6ojs9v3VUHX9uA9D+k7AKHd4d2NApkvKFMQVVJ9ZNIKx9/ZO9/TPHrrl1lf
R7LPW9g4XXF9sgfm523uG19wUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOiuBaGh
TY6AtzN5qrN7ZROmbUyxMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2
REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RFQjMvNUQ3MzVENDY5NkRFMTFFN0JBN0QyQTc3QzRGOUFFMDIvQTZBQ0EyOTg4
NTg5MTFFODgwMjZCNDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABndlAwDQYJKoZIhvcNAQELBQADggEBAHt2JvFRGnpPsCZU
idC7aku6E4HBnfYEzdEwdV9o9V0KdlYkH9lnLiAzCRXfY0OGqJHkk3Tdv1JWVjbm
5uAsyhMwRM0RwOQoZijQb+/iemZcqJh/4YjjWQwxSy4Wnyd3aa1ri4kd/4f9G3BP
X8ES9o1FHfxjGaeQYhNNZTe0gTFU9eXdRfAc6L1wPlvdotGEBhhi5O96GyAn3WzN
eckya3tp/SQHoNUeI/f4ciRWoBa70Hwd5Mvno4jYt7u2zlDd69NPX08VK3vCdfrr
TZ64E6LSTCPiMXMg/5WE5WrRIjhA0mV07aF+Vmg4SR3GCbx3YFpyz8xaw48+kNhF
At4FQ2M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:58 2025 by rpki-client