Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
File:                     61DBE422A88B11EFAF507987C4F9AE02.roa (raw, json)
Hash identifier:          5JjQBJx2Pjnhm+6Kg83lIxJriPqmmDrWvmhqbV4seEo=
Subject key identifier:   48:40:4F:91:3A:44:BE:54:B9:4E:BF:37:64:CC:B8:D2:AA:9E:04:18
Certificate issuer:       /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial:       01E1
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
Signing time:             Fri 03 Oct 2025 02:58:55 +0000
ROA not before:           Fri 03 Oct 2025 02:58:55 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     24316
IP address blocks:        203.30.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
        Validity
            Not Before: Oct  3 02:58:55 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68df3bef-eae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:cb:a9:af:63:09:47:f4:07:dd:0b:05:5c:
                    ad:d0:49:01:7d:d2:82:04:f3:3e:73:bd:d3:93:25:
                    5c:10:71:61:c1:90:a9:3b:45:0b:5c:ee:4c:1b:fe:
                    de:dd:68:70:5d:d0:1e:c1:1d:d6:4d:a6:65:1e:a9:
                    6e:3b:35:82:1f:97:44:d9:f5:85:f0:8d:1a:76:35:
                    68:6a:e0:56:a3:26:82:f9:65:a4:c8:49:20:3a:57:
                    2e:23:8c:ce:30:1c:22:f7:67:f0:01:f9:b2:a2:e5:
                    7b:3c:d2:2d:b3:2e:51:e7:ec:5d:70:f3:d3:52:1c:
                    0d:61:3b:88:0f:ac:41:4a:10:43:9d:25:a9:17:91:
                    c1:13:ae:eb:89:b2:18:2e:99:f2:fe:76:68:37:06:
                    c8:b3:19:40:5b:cc:10:41:81:59:d8:5c:33:a8:b4:
                    32:23:88:40:40:b4:65:8d:8e:f6:54:7e:4e:d5:e1:
                    47:ea:ca:2a:ef:5c:bf:86:87:81:8c:5b:4e:e1:4d:
                    61:c5:71:d9:27:8d:24:87:81:6c:39:8d:24:da:d0:
                    49:7d:a1:ad:41:46:47:7a:ce:82:cc:89:1f:dc:8b:
                    ad:7f:38:8d:3d:ce:20:93:7d:6f:53:6b:c2:41:81:
                    10:d6:c3:f6:a1:09:5e:7a:c7:5f:44:49:cf:f6:07:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:4F:91:3A:44:BE:54:B9:4E:BF:37:64:CC:B8:D2:AA:9E:04:18
            X509v3 Authority Key Identifier:
                keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:cd:4b:1a:6f:4c:6e:20:fa:b3:c9:3d:6c:65:dd:f8:6e:
         ff:cf:80:23:8e:c0:00:f0:ed:5d:b6:11:06:91:f4:3b:a0:9d:
         02:76:e6:3a:b2:6d:f1:c4:fe:cf:d5:26:e8:21:c2:44:b2:40:
         b1:67:71:81:76:01:8a:23:07:d2:43:55:58:e1:df:c0:f4:b6:
         6b:4b:31:86:b2:c9:20:38:f0:73:78:c4:e1:ca:71:df:2c:3b:
         8e:31:b2:c4:b0:09:df:bf:89:68:48:19:89:4a:87:01:43:9d:
         e6:5c:07:db:be:b4:68:dd:66:5a:3c:b5:6d:4a:e6:ea:0d:97:
         e6:35:64:25:23:64:af:b0:a9:92:8b:a3:14:57:9c:cd:01:a5:
         db:3c:90:1e:4f:49:5e:f8:48:76:20:22:50:0b:ab:6b:f5:d4:
         81:f7:57:d6:f7:cd:c8:6d:54:79:82:c6:0b:0d:df:94:48:e2:
         77:c2:61:3d:53:10:20:d4:12:2c:66:ed:59:ae:3e:7c:16:2a:
         2b:43:01:1d:79:d3:d7:6b:fa:1e:d0:5c:3b:e9:26:77:ad:05:
         eb:68:8b:6b:e8:11:2a:ea:2e:11:3a:23:10:17:4d:39:04:98:
         62:a6:26:8d:9e:e3:85:06:da:a9:f0:b7:4b:06:02:03:20:9b:
         39:87:17:2e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE
NTEzRDdDMDkwHhcNMjUxMDAzMDI1ODU1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmM2JlZi1lYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLTLqa9jCUf0B90LBVyt0EkBfdKCBPM+c73TkyVcEHFhwZCpO0ULXO5MG/7e
3WhwXdAewR3WTaZlHqluOzWCH5dE2fWF8I0adjVoauBWoyaC+WWkyEkgOlcuI4zO
MBwi92fwAfmyouV7PNItsy5R5+xdcPPTUhwNYTuID6xBShBDnSWpF5HBE67ribIY
Lpny/nZoNwbIsxlAW8wQQYFZ2FwzqLQyI4hAQLRljY72VH5O1eFH6soq71y/hoeB
jFtO4U1hxXHZJ40kh4FsOY0k2tBJfaGtQUZHes6CzIkf3IutfziNPc4gk31vU2vC
QYEQ1sP2oQleesdfREnP9gdrNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEhAT5E6
RL5UuU6/N2TMuNKqngQYMB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND
NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDRBMTYvQkFFN0VGRkVDQzUzMTFFRDgxRjRDNTE1QzRGOUFFMDIvNjFEQkU0MjJB
ODhCMTFFRkFGNTA3OTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALLHmQwDQYJKoZIhvcNAQELBQADggEBAEjKzUsab0xuIPqz
yT1sZd34bv/PgCOOwADw7V22EQaR9DugnQJ25jqybfHE/s/VJughwkSyQLFncYF2
AYojB9JDVVjh38D0tmtLMYayySA48HN4xOHKcd8sO44xssSwCd+/iWhIGYlKhwFD
neZcB9u+tGjdZlo8tW1K5uoNl+Y1ZCUjZK+wqZKLoxRXnM0Bpds8kB5PSV74SHYg
IlALq2v11IH3V9b3zchtVHmCxgsN35RI4nfCYT1TECDUEixm7VmuPnwWKitDAR15
09dr+h7QXDvpJnetBetoi2voESrqLhE6IxAXTTkEmGKmJo2e44UG2qnwt0sGAgMg
mzmHFy4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:26 2025 by rpki-client