Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/E985185E773D11F0B023A932C4F9AE02.roa
File:                     E985185E773D11F0B023A932C4F9AE02.roa (raw, json)
Hash identifier:          mISRfVX+s35IuBCQPh+4h139jbl1K2kLytqStI4mDZA=
Subject key identifier:   AB:DE:B0:87:77:49:21:2A:0B:5C:E3:DC:91:D3:6A:EF:6D:E5:A1:7B
Certificate issuer:       /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial:       047E
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/E985185E773D11F0B023A932C4F9AE02.roa
Signing time:             Tue 12 Aug 2025 05:33:45 +0000
ROA not before:           Tue 12 Aug 2025 05:33:45 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     141398
IP address blocks:        103.177.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
        Validity
            Not Before: Aug 12 05:33:45 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=689ad238-806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:6c:e6:c7:2e:28:ea:e7:7f:af:f2:e0:c6:
                    de:b0:7b:b0:5c:fa:15:2a:67:bd:5c:54:68:65:3a:
                    4d:0a:e5:0c:0c:0a:e9:af:81:d0:3b:3f:13:e8:57:
                    6f:5f:52:3a:33:5c:23:ca:22:fd:b7:be:6f:b4:b1:
                    f1:75:b2:25:5a:64:de:84:26:8f:40:27:e2:b6:3f:
                    dd:24:06:e6:66:10:56:20:9c:2c:2b:a8:7d:0c:1b:
                    70:bc:0d:b5:a2:40:a6:a1:f8:f6:de:8f:35:a2:bf:
                    5e:6f:fc:30:87:2b:4c:61:fa:18:cc:cf:e4:61:cb:
                    a6:84:6a:fb:39:25:06:56:a0:54:46:10:de:a4:21:
                    03:52:1e:96:9f:84:e4:f8:e1:2a:d5:bb:db:cf:69:
                    2b:dc:3a:d2:64:91:96:41:4f:03:3d:1c:af:19:e1:
                    d5:c7:9c:01:dc:71:ec:97:8d:41:63:1f:56:c6:97:
                    1a:da:f3:18:2f:04:41:fb:9c:eb:53:2d:ad:ba:99:
                    8c:62:21:ca:48:78:33:f7:66:e5:c2:c1:fd:3f:15:
                    c4:b5:29:5e:29:5e:ad:50:80:20:3b:91:12:8c:bb:
                    48:fa:f5:8a:8b:c4:e2:84:06:33:e2:27:cb:77:c4:
                    8a:51:8a:bd:45:3c:e8:cd:f8:ce:95:b1:3b:aa:81:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DE:B0:87:77:49:21:2A:0B:5C:E3:DC:91:D3:6A:EF:6D:E5:A1:7B
            X509v3 Authority Key Identifier:
                keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/E985185E773D11F0B023A932C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:bb:a9:2f:d6:bd:b1:21:89:d9:b0:cf:7a:24:66:1b:2d:00:
         f5:21:09:a4:fd:ac:da:0e:79:78:c8:b9:3e:46:f3:3c:47:b6:
         c9:88:17:3c:9f:e1:a4:1f:62:a2:1b:e9:99:33:a5:fe:af:6b:
         3b:5f:3d:4b:23:4f:f9:ea:da:21:52:55:80:cd:d5:34:5d:99:
         fe:a4:eb:b8:ae:6b:c2:f8:81:5d:61:e7:da:e6:74:74:01:b9:
         1e:cc:17:a2:a5:e2:49:6d:69:04:37:f5:72:d3:99:e8:e4:83:
         ba:98:fd:40:8e:7a:cc:cc:03:cd:84:13:c9:c5:11:31:f7:37:
         3f:e2:2a:d9:ab:8a:3a:b1:56:67:1d:f3:65:f5:e7:15:c0:6b:
         5e:e1:0f:35:0d:90:21:a4:6d:5d:79:de:54:e8:44:63:17:c7:
         fb:8f:65:ad:7e:33:fb:04:70:db:16:9d:09:52:ab:15:51:c8:
         61:da:b9:c7:49:11:2c:de:77:fe:0f:13:bc:d0:fd:20:57:64:
         3e:2d:d1:5a:51:81:f9:e0:dc:8a:47:79:12:bf:e1:1f:f1:fd:
         69:1b:d6:16:18:e7:99:bb:de:d9:c5:e1:39:6d:c7:f6:c2:dd:
         7a:83:a4:63:f1:42:ec:a1:f0:44:3a:5d:05:98:18:4e:9c:c2:
         fe:f3:8c:6f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0
QjEyOTFEMjgwHhcNMjUwODEyMDUzMzQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODlhZDIzOC04MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIJs5scuKOrnf6/y4MbesHuwXPoVKme9XFRoZTpNCuUMDArpr4HQOz8T6Fdv
X1I6M1wjyiL9t75vtLHxdbIlWmTehCaPQCfitj/dJAbmZhBWIJwsK6h9DBtwvA21
okCmofj23o81or9eb/wwhytMYfoYzM/kYcumhGr7OSUGVqBURhDepCEDUh6Wn4Tk
+OEq1bvbz2kr3DrSZJGWQU8DPRyvGeHVx5wB3HHsl41BYx9Wxpca2vMYLwRB+5zr
Uy2tupmMYiHKSHgz92blwsH9PxXEtSleKV6tUIAgO5ESjLtI+vWKi8TihAYz4ifL
d8SKUYq9RTzozfjOlbE7qoFd7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKvesId3
SSEqC1zj3JHTau9t5aF7MB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0
NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTkzMTAvRDFCMUQzNDQ1NDYzMTFFQ0E4RkE0OTZBQzRGOUFFMDIvRTk4NTE4NUU3
NzNEMTFGMEIwMjNBOTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsXswDQYJKoZIhvcNAQELBQADggEBAMm7qS/WvbEhidmw
z3okZhstAPUhCaT9rNoOeXjIuT5G8zxHtsmIFzyf4aQfYqIb6Zkzpf6vaztfPUsj
T/nq2iFSVYDN1TRdmf6k67iua8L4gV1h59rmdHQBuR7MF6Kl4kltaQQ39XLTmejk
g7qY/UCOeszMA82EE8nFETH3Nz/iKtmrijqxVmcd82X15xXAa17hDzUNkCGkbV15
3lToRGMXx/uPZa1+M/sEcNsWnQlSqxVRyGHaucdJESzed/4PE7zQ/SBXZD4t0VpR
gfng3IpHeRK/4R/x/Wkb1hYY55m73tnF4Tltx/bC3XqDpGPxQuyh8EQ6XQWYGE6c
wv7zjG8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:46:39 2025 by rpki-client