Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa
File:                     46779D40040411EC867E3B86C4F9AE02.roa (raw, json)
Hash identifier:          LbOQmd2LKFuOiIpNYml8AeoIMf/jjQOQ+G477lPfKw0=
Subject key identifier:   81:42:4D:28:56:EF:2B:2E:B1:1A:F6:C8:A7:BA:0B:01:9A:E3:CD:F3
Certificate issuer:       /CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE
Certificate serial:       055E
Authority key identifier: 57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa
Signing time:             Sun 28 Sep 2025 23:56:47 +0000
ROA not before:           Sun 28 Sep 2025 23:56:47 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135597
IP address blocks:        103.171.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8D21, serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE
        Validity
            Not Before: Sep 28 23:56:47 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d9cb3f-6b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:9a:2c:19:83:84:2a:f5:a4:f3:2c:3f:45:
                    86:ac:3c:2e:cb:3b:83:20:ec:a7:2e:ac:30:01:ad:
                    f5:61:f3:5e:b3:80:2b:e6:fd:7c:89:12:98:37:c4:
                    55:9f:b5:f6:18:e1:72:5d:ab:eb:e7:53:d3:69:e0:
                    44:7e:29:3d:61:39:14:b4:2a:fc:e9:48:18:34:c1:
                    68:3b:c4:ca:bc:22:6d:cb:13:10:15:b2:17:59:a9:
                    d4:7e:ce:9f:a5:25:b1:2b:ed:e6:8b:a0:7a:a1:73:
                    39:73:63:95:34:37:e8:65:41:f8:fc:7e:91:0e:a6:
                    2f:d3:aa:26:42:9f:15:a5:21:0b:3f:77:fc:ea:96:
                    f0:e5:6b:2e:e1:91:25:9f:18:e4:e1:4c:96:52:f0:
                    41:3d:df:4a:9a:76:06:e0:f7:f9:42:d9:66:2f:42:
                    54:e9:17:49:82:af:68:8c:73:20:f5:79:e9:3a:2c:
                    9b:38:97:4b:f0:1f:e7:9f:32:3e:81:b2:71:28:ae:
                    44:1c:40:27:73:16:04:6c:e9:a3:f1:08:6f:a8:88:
                    f8:5b:de:e7:08:54:6f:e6:ab:6c:11:e1:0e:cf:dd:
                    cf:b3:b4:72:17:c2:8f:20:28:14:ff:65:44:b5:58:
                    fa:86:47:7a:29:b7:a0:a0:19:ed:6e:78:b4:be:c8:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:42:4D:28:56:EF:2B:2E:B1:1A:F6:C8:A7:BA:0B:01:9A:E3:CD:F3
            X509v3 Authority Key Identifier:
                keyid:57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:5f:1d:5b:04:53:66:57:30:f1:7b:66:26:38:43:f4:e4:
         61:d1:da:e3:eb:90:43:46:11:3d:6a:3e:f6:a4:fd:ac:06:5d:
         91:de:9b:8e:49:77:16:5a:7f:c2:25:46:cc:af:c5:55:70:dc:
         d3:e9:4c:d9:36:41:bd:72:09:22:d4:c2:43:39:09:89:84:a1:
         ce:d5:93:ad:43:42:fb:85:8c:1f:de:aa:dd:d9:5f:ec:89:46:
         d5:1e:29:f7:e7:8b:4e:20:f6:a4:19:eb:aa:84:69:66:74:6c:
         84:0d:5f:3c:1d:eb:ab:18:df:46:a5:f6:18:0b:bc:39:d3:f8:
         82:69:99:60:77:9f:4d:d4:d0:43:ce:08:d1:55:c1:bf:bf:4e:
         cc:94:ec:50:56:e6:19:25:79:2b:a7:4d:b9:18:c3:9c:d1:39:
         6b:b0:8c:3c:71:03:fa:17:58:81:d2:90:f0:9b:0d:33:12:05:
         6e:f4:ee:a3:58:ac:9f:7d:93:e2:f8:87:f4:f2:b6:a5:88:b0:
         ca:e1:ac:58:ac:3b:0a:d1:66:39:88:cb:2f:f6:43:da:0b:bd:
         21:70:0f:00:76:4c:25:ba:a6:cd:fd:ea:b8:21:ba:9d:43:5b:
         f5:0a:b3:6d:ba:5e:03:6e:5d:e5:99:63:07:87:a4:fd:d9:76:
         6c:bc:c5:75
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhEMjExMTAvBgNVBAUTKDU3ODE3RDJCRUMxRkVGRkZFNDEyRDlGMzM0REY0MDQy
ODY1M0JDQUUwHhcNMjUwOTI4MjM1NjQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQ5Y2IzZi02YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylKaLBmDhCr1pPMsP0WGrDwuyzuDIOynLqwwAa31YfNes4Ar5v18iRKYN8RV
n7X2GOFyXavr51PTaeBEfik9YTkUtCr86UgYNMFoO8TKvCJtyxMQFbIXWanUfs6f
pSWxK+3mi6B6oXM5c2OVNDfoZUH4/H6RDqYv06omQp8VpSELP3f86pbw5Wsu4ZEl
nxjk4UyWUvBBPd9KmnYG4Pf5QtlmL0JU6RdJgq9ojHMg9XnpOiybOJdL8B/nnzI+
gbJxKK5EHEAncxYEbOmj8QhvqIj4W97nCFRv5qtsEeEOz93Ps7RyF8KPICgU/2VE
tVj6hkd6KbegoBntbni0vshYYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIFCTShW
7ysusRr2yKe6CwGa483zMB8GA1UdIwQYMBaAFFeBfSvsH+//5BLZ8zTfQEKGU7yu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEQyMS80NTBFQzVCRTAz
RkExMUVDOERERTA4ODJDNEY5QUUwMi9WNEY5Sy13ZjdfX2tFdG56Tk45QVFvWlR2
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y0RjlLLXdmN19fa0V0bnpOTjlBUW9aVHZLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDhEMjEvNDUwRUM1QkUwM0ZBMTFFQzhEREUwODgyQzRGOUFFMDIvNDY3NzlENDAw
NDA0MTFFQzg2N0UzQjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnq/owDQYJKoZIhvcNAQELBQADggEBAGdvXx1bBFNmVzDx
e2YmOEP05GHR2uPrkENGET1qPvak/awGXZHem45JdxZaf8IlRsyvxVVw3NPpTNk2
Qb1yCSLUwkM5CYmEoc7Vk61DQvuFjB/eqt3ZX+yJRtUeKffni04g9qQZ66qEaWZ0
bIQNXzwd66sY30al9hgLvDnT+IJpmWB3n03U0EPOCNFVwb+/TsyU7FBW5hkleSun
TbkYw5zROWuwjDxxA/oXWIHSkPCbDTMSBW707qNYrJ99k+L4h/TytqWIsMrhrFis
OwrRZjmIyy/2Q9oLvSFwDwB2TCW6ps396rghup1DW/UKs226XgNuXeWZYweHpP3Z
dmy8xXU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:17:48 2025 by rpki-client