Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/A6C9DA80974111F08BFA4E71C4F9AE02.roa
File:                     A6C9DA80974111F08BFA4E71C4F9AE02.roa (raw, json)
Hash identifier:          MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=
Subject key identifier:   99:4B:5D:BE:76:D5:85:E7:54:A4:80:D7:CF:9A:E1:6A:E6:81:D2:15
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       0A2B
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/A6C9DA80974111F08BFA4E71C4F9AE02.roa
Signing time:             Sun 21 Sep 2025 23:21:07 +0000
ROA not before:           Sun 21 Sep 2025 23:21:07 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        103.54.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603 (0xa2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: Sep 21 23:21:07 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68d08863-77c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:80:27:e0:f0:10:03:cd:88:a5:fc:60:e7:83:
                    de:fd:ee:35:68:8c:b7:83:ca:3a:dd:af:74:78:94:
                    3e:b9:c6:31:e6:32:ab:9f:fb:22:c9:cb:bb:3a:e4:
                    7d:6a:b2:b3:0d:a0:de:63:3d:a7:bf:c1:6b:dd:b1:
                    9a:54:9f:f6:4d:b1:31:fd:10:28:2c:fd:57:50:b1:
                    20:b8:28:74:2f:96:5b:10:f4:5f:89:ae:35:d3:83:
                    fa:a3:5f:56:ad:56:c0:f6:65:96:bb:60:34:ae:83:
                    26:45:c3:c0:46:86:34:e6:82:31:aa:c4:9b:bb:05:
                    5e:a3:71:19:98:33:58:b4:28:dd:57:57:1c:4c:42:
                    5e:3b:5f:bc:17:51:59:b5:9e:36:f3:5d:3e:0c:c6:
                    fe:33:d4:23:87:df:ce:51:9d:24:e6:1c:95:77:b9:
                    2b:db:d1:d5:4c:ed:15:e7:5e:f9:f4:0e:db:6f:84:
                    5f:2d:fb:ee:b6:53:a0:64:85:24:8f:ae:76:48:27:
                    d4:83:59:c9:a6:ca:e0:d7:d7:f5:73:99:3d:99:f9:
                    07:92:28:ce:e5:dd:bf:1e:c9:16:6f:88:c6:63:33:
                    83:a8:07:22:3f:4d:2a:5e:9f:a7:ad:99:4b:63:9c:
                    e4:27:3b:b4:23:b5:6d:d4:ed:56:23:15:9b:46:cf:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4B:5D:BE:76:D5:85:E7:54:A4:80:D7:CF:9A:E1:6A:E6:81:D2:15
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/A6C9DA80974111F08BFA4E71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:39:d1:bb:7e:a8:0a:8d:fa:83:9a:52:c8:d1:43:8a:bf:
         97:fc:c3:c6:b8:41:91:32:2d:aa:01:27:83:21:1b:b5:91:5e:
         cf:96:3b:3c:da:28:d9:7b:f4:27:35:fc:96:42:68:52:de:b3:
         ed:62:54:27:b7:1d:bd:73:45:16:4f:bd:6d:d3:9e:7f:80:a8:
         ef:a2:81:bb:67:18:d5:ba:f9:27:56:dd:69:98:ad:a0:d7:3f:
         7e:55:a8:bc:7f:63:d0:e5:97:22:25:59:54:e2:58:b4:b8:ae:
         b4:55:86:6f:42:6a:bd:de:03:ee:85:f1:ac:cc:5e:1a:52:4d:
         3d:49:83:3f:b7:45:8a:e9:18:40:d3:f3:b9:90:94:7b:18:aa:
         ed:73:9c:6a:1d:43:27:f3:b7:40:ee:e4:d7:e2:b0:54:fc:1f:
         7f:ff:6a:c2:48:4b:33:3c:75:6d:d2:45:f1:fe:52:21:0c:fd:
         49:fc:50:e2:25:28:cc:ce:14:37:4a:00:c0:39:a2:1a:54:c3:
         4e:aa:09:c1:41:4c:3c:05:64:bb:ae:de:f8:68:11:86:eb:68:
         8f:1a:99:d4:9c:f9:11:fc:df:96:23:31:75:00:74:b1:ac:9f:
         c3:07:c6:1d:d0:4b:f0:db:58:6c:f9:91:f3:71:1f:a6:fc:11:
         ea:28:c8:9b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE
NDJBREI5QUIwHhcNMjUwOTIxMjMyMTA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQwODg2My03N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+YAn4PAQA82Ipfxg54Pe/e41aIy3g8o63a90eJQ+ucYx5jKrn/siycu7OuR9
arKzDaDeYz2nv8Fr3bGaVJ/2TbEx/RAoLP1XULEguCh0L5ZbEPRfia4104P6o19W
rVbA9mWWu2A0roMmRcPARoY05oIxqsSbuwVeo3EZmDNYtCjdV1ccTEJeO1+8F1FZ
tZ42810+DMb+M9Qjh9/OUZ0k5hyVd7kr29HVTO0V51759A7bb4RfLfvutlOgZIUk
j652SCfUg1nJpsrg19f1c5k9mfkHkijO5d2/HskWb4jGYzODqAciP00qXp+nrZlL
Y5zkJzu0I7Vt1O1WIxWbRs9JvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJlLXb52
1YXnVKSA18+a4WrmgdIVMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE
RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjRGRTYvQkIwOTU4MkM3REQ0MTFFQTk0QkVBRjc5QzRGOUFFMDIvQTZDOURBODA5
NzQxMTFGMDhCRkE0RTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNm8wDQYJKoZIhvcNAQELBQADggEBACfXOdG7fqgKjfqD
mlLI0UOKv5f8w8a4QZEyLaoBJ4MhG7WRXs+WOzzaKNl79Cc1/JZCaFLes+1iVCe3
Hb1zRRZPvW3Tnn+AqO+igbtnGNW6+SdW3WmYraDXP35VqLx/Y9DllyIlWVTiWLS4
rrRVhm9Car3eA+6F8azMXhpSTT1Jgz+3RYrpGEDT87mQlHsYqu1znGodQyfzt0Du
5NfisFT8H3//asJISzM8dW3SRfH+UiEM/Un8UOIlKMzOFDdKAMA5ohpUw06qCcFB
TDwFZLuu3vhoEYbraI8amdSc+RH835YjMXUAdLGsn8MHxh3QS/DbWGz5kfNxH6b8
EeooyJs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:34:34 2025 by rpki-client