Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/A3E5DB46A8B911F09B776445C4F9AE02.roa
File:                     A3E5DB46A8B911F09B776445C4F9AE02.roa (raw, json)
Hash identifier:          qOtnCDQlpjOtnx/hK0mhrlg08ljwiyNWi/uM19rlLro=
Subject key identifier:   2E:DA:5D:F1:97:14:81:6E:F0:90:01:09:E2:C3:28:51:69:55:F7:A2
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       0558
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/A3E5DB46A8B911F09B776445C4F9AE02.roa
Signing time:             Tue 14 Oct 2025 04:52:52 +0000
ROA not before:           Tue 14 Oct 2025 04:52:52 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.204.21.0/24 maxlen: 24
                          103.204.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Oct 14 04:52:52 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68edd724-c9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:78:d4:0c:d5:ba:04:fc:6b:17:fd:a0:01:
                    09:32:36:d1:85:06:37:73:42:a8:a0:e7:1c:65:74:
                    85:b5:32:1d:bf:0f:e5:c5:3c:f4:89:94:4d:9f:f6:
                    2a:e4:94:7a:ec:b0:cf:45:a4:38:4a:3c:7d:c1:18:
                    92:57:43:69:8c:05:03:88:75:13:d9:5f:97:f6:ba:
                    26:a2:52:a2:af:fc:6b:d8:eb:0b:94:22:bd:15:7d:
                    a8:d7:71:82:6d:19:38:88:84:44:00:75:ba:0d:16:
                    46:e5:47:ff:1a:61:5f:be:c1:a0:5b:17:89:27:c2:
                    7e:f1:7e:7f:36:68:d3:0b:e5:a9:65:11:e2:d2:ca:
                    98:07:f8:53:c7:8e:38:a2:9d:cb:59:b8:0b:98:95:
                    61:2b:58:19:45:2a:76:aa:29:a1:5c:b1:1e:1a:26:
                    66:d7:bb:84:0d:2f:a1:8b:c9:64:05:18:cc:e3:5e:
                    71:6b:f6:bf:eb:88:3b:21:44:72:b2:f3:ca:57:a2:
                    ea:54:a7:32:d5:df:f8:04:5e:55:ed:0b:43:4b:9d:
                    c0:eb:96:0c:5a:af:ed:c3:44:bc:af:d5:8f:56:fa:
                    9a:88:04:60:03:fa:6e:25:27:73:13:c4:48:a0:7d:
                    d7:b6:8d:05:92:a0:23:67:f9:b3:e4:2f:ab:c3:06:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:5D:F1:97:14:81:6E:F0:90:01:09:E2:C3:28:51:69:55:F7:A2
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/A3E5DB46A8B911F09B776445C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.21.0-103.204.22.255

    Signature Algorithm: sha256WithRSAEncryption
         14:64:bb:37:b1:ad:d6:9d:e0:91:73:63:80:98:19:84:af:d7:
         66:e1:80:87:ed:c8:77:df:4d:b7:32:b7:83:79:d8:80:e1:73:
         98:41:fc:e3:1e:fc:15:c0:be:aa:d5:4f:4e:de:11:8d:c7:10:
         c7:6c:9e:c2:f6:4f:bd:40:c8:50:ee:a8:52:7e:f2:b4:dd:fe:
         e3:3a:1e:fa:d1:fe:0f:6c:84:30:93:1c:61:f2:6e:29:61:70:
         2c:17:8b:5b:a1:36:cf:ca:cf:32:18:38:58:7b:36:13:9d:b8:
         62:fb:d6:49:de:27:f7:84:95:22:ea:27:98:a2:d3:68:15:3e:
         a1:67:0a:58:55:bf:02:29:a3:94:ec:c7:04:2f:e6:10:2e:87:
         41:7e:89:df:ae:f0:97:19:47:fa:08:d5:d4:c6:f3:cc:30:c2:
         f8:ee:61:58:e9:79:37:1e:04:26:2a:60:4c:dd:f4:2c:60:26:
         d9:19:92:0a:c7:45:a6:c9:20:aa:c7:7f:61:f3:e0:4a:64:5f:
         12:9e:88:e3:78:ae:fd:5f:d4:32:f3:54:46:70:a8:5e:97:e3:
         a6:8a:1d:ff:42:53:eb:c5:f3:8e:90:88:8d:bd:f2:3b:3b:92:
         1b:89:dd:a9:06:c4:7e:7e:53:c4:e5:f6:bc:43:df:14:84:8c:
         a5:d6:48:ab
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjUxMDE0MDQ1MjUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGVkZDcyNC1jOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDR41AzVugT8axf9oAEJMjbRhQY3c0KooOccZXSFtTIdvw/lxTz0iZRNn/Yq
5JR67LDPRaQ4Sjx9wRiSV0NpjAUDiHUT2V+X9romolKir/xr2OsLlCK9FX2o13GC
bRk4iIREAHW6DRZG5Uf/GmFfvsGgWxeJJ8J+8X5/NmjTC+WpZRHi0sqYB/hTx444
op3LWbgLmJVhK1gZRSp2qimhXLEeGiZm17uEDS+hi8lkBRjM415xa/a/64g7IURy
svPKV6LqVKcy1d/4BF5V7QtDS53A65YMWq/tw0S8r9WPVvqaiARgA/puJSdzE8RI
oH3Xto0FkqAjZ/mz5C+rwwbIAQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFC7aXfGX
FIFu8JABCeLDKFFpVfeiMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvQTNFNURCNDZB
OEI5MTFGMDlCNzc2NDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAGfMFQMEAGfMFjANBgkqhkiG9w0BAQsFAAOCAQEAFGS7
N7Gt1p3gkXNjgJgZhK/XZuGAh+3Id99NtzK3g3nYgOFzmEH84x78FcC+qtVPTt4R
jccQx2yewvZPvUDIUO6oUn7ytN3+4zoe+tH+D2yEMJMcYfJuKWFwLBeLW6E2z8rP
Mhg4WHs2E524YvvWSd4n94SVIuonmKLTaBU+oWcKWFW/AimjlOzHBC/mEC6HQX6J
367wlxlH+gjV1MbzzDDC+O5hWOl5Nx4EJipgTN30LGAm2RmSCsdFpskgqsd/YfPg
SmRfEp6I43iu/V/UMvNURnCoXpfjpood/0JT68XzjpCIjb3yOzuSG4ndqQbEfn5T
xOX2vEPfFISMpdZIqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:42 2025 by rpki-client