Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
File:                     2C4CD10078C011EE90D36F13C4F9AE02.roa (raw, json)
Hash identifier:          OCKBcCjdkySUCtOriC+2k74TemAnMuuorEBugP8GmLw=
Subject key identifier:   10:08:84:F2:6F:B1:B6:47:78:C1:FF:82:1C:05:6E:1C:72:66:CB:B1
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       013B
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
Signing time:             Sat 05 Jul 2025 07:22:29 +0000
ROA not before:           Sat 05 Jul 2025 07:22:29 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     151967
IP address blocks:        103.65.138.0/23 maxlen: 24
                          2001:df3:8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Jul  5 07:22:29 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6868d2b5-a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:53:54:c0:d4:f7:54:f7:c9:e5:c2:93:9b:
                    a1:1f:8f:aa:38:2d:88:2d:da:95:02:d2:ea:50:d3:
                    4a:05:80:0a:f9:22:4c:4f:84:d4:8a:33:62:94:42:
                    e9:a1:8e:7f:09:6f:19:6f:e2:80:8c:0a:b7:79:ea:
                    1b:fb:72:71:a7:2a:86:7d:d9:8e:0f:6e:f7:97:6a:
                    c7:67:56:33:3c:56:4a:22:ff:ae:60:86:da:b0:28:
                    73:30:bb:bb:01:e7:05:e0:1a:8f:7d:13:e7:88:50:
                    fc:55:d4:ef:a0:96:bf:50:88:5d:6d:a8:34:b8:f1:
                    3a:78:d8:a4:d2:48:2c:13:bd:b4:64:bf:8d:d6:6d:
                    39:c0:b8:9c:20:71:10:f5:39:90:51:1f:53:20:42:
                    01:44:5f:c8:04:aa:63:fd:b8:38:3c:24:92:ca:2a:
                    40:d3:7a:6d:c3:c1:60:20:fc:3a:01:88:86:4b:d7:
                    31:78:2a:02:5e:ff:8d:45:80:4d:e3:8b:94:e4:17:
                    89:d6:c5:cc:de:99:f5:29:53:91:2e:2c:2d:19:bc:
                    c8:93:3e:b1:c0:21:b5:6a:e8:cc:0d:ff:81:9c:00:
                    49:6d:73:6e:ac:0e:1b:37:e4:2c:6f:2b:a9:b7:63:
                    4b:29:4f:be:e0:d4:3b:24:67:31:ea:98:cc:33:cc:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:84:F2:6F:B1:B6:47:78:C1:FF:82:1C:05:6E:1C:72:66:CB:B1
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.138.0/23
                IPv6:
                  2001:df3:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:90:03:3a:c5:ab:e8:66:48:f0:79:66:97:09:b0:fa:f1:
         72:e3:7a:c9:93:65:4b:3e:a6:f3:f7:fb:7e:88:83:3a:d5:82:
         bf:e9:b8:bf:d0:47:6c:ad:cd:b5:9f:08:de:e8:c5:3a:c3:7b:
         21:38:dc:cd:41:b4:61:48:38:25:6e:35:e8:ca:c0:c1:29:a1:
         96:a3:c8:1e:7d:9c:8a:e6:1c:19:4e:16:d9:da:00:af:a0:04:
         c4:1e:a7:8f:13:a1:8f:3a:e4:85:82:e5:19:1d:aa:1f:60:cf:
         ae:bb:56:4f:aa:aa:02:df:f1:b9:e5:cf:30:60:ee:63:d0:36:
         0e:2d:c9:a3:08:e3:4a:44:6d:b3:03:50:e4:4f:89:6b:d4:cf:
         f1:52:c8:10:a6:ee:1f:e3:66:03:95:2c:a4:cc:fe:03:92:6c:
         2e:3c:ea:35:57:52:2c:0c:4a:fc:2a:c7:1d:b9:c2:b0:df:01:
         7f:03:d8:4f:0e:9a:d0:f6:68:22:b3:5d:ff:ce:d4:f2:ce:bf:
         6c:7b:89:bb:04:fa:4d:6b:9d:b1:0a:40:6b:f2:0a:e3:d9:40:
         9a:60:6e:97:a2:80:f0:0f:db:27:19:cc:d0:52:34:81:e3:63:
         1e:e7:fe:be:55:c4:1d:88:8b:4d:f8:7f:e3:cb:b5:2c:65:ca:
         49:b1:d3:69
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC
MzMwRkREOUQwHhcNMjUwNzA1MDcyMjI5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY4ZDJiNS1hMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyZTVMDU91T3yeXCk5uhH4+qOC2ILdqVAtLqUNNKBYAK+SJMT4TUijNilELp
oY5/CW8Zb+KAjAq3eeob+3JxpyqGfdmOD273l2rHZ1YzPFZKIv+uYIbasChzMLu7
AecF4BqPfRPniFD8VdTvoJa/UIhdbag0uPE6eNik0kgsE720ZL+N1m05wLicIHEQ
9TmQUR9TIEIBRF/IBKpj/bg4PCSSyipA03ptw8FgIPw6AYiGS9cxeCoCXv+NRYBN
44uU5BeJ1sXM3pn1KVORLiwtGbzIkz6xwCG1aujMDf+BnABJbXNurA4bN+Qsbyup
t2NLKU++4NQ7JGcx6pjMM8zz2QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBAIhPJv
sbZHeMH/ghwFbhxyZsuxMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4
QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTI1RDIvNkRGNjAyRDA3OEJGMTFFRTkzRkZCNzY0QzRGOUFFMDIvMkM0Q0QxMDA3
OEMwMTFFRTkwRDM2RjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnQYowDwQCAAIwCQMHACABDfMIwDANBgkqhkiG9w0BAQsF
AAOCAQEAWvKQAzrFq+hmSPB5ZpcJsPrxcuN6yZNlSz6m8/f7foiDOtWCv+m4v9BH
bK3NtZ8I3ujFOsN7ITjczUG0YUg4JW416MrAwSmhlqPIHn2ciuYcGU4W2doAr6AE
xB6njxOhjzrkhYLlGR2qH2DPrrtWT6qqAt/xueXPMGDuY9A2Di3JowjjSkRtswNQ
5E+Ja9TP8VLIEKbuH+NmA5UspMz+A5JsLjzqNVdSLAxK/CrHHbnCsN8BfwPYTw6a
0PZoIrNd/87U8s6/bHuJuwT6TWudsQpAa/IK49lAmmBul6KA8A/bJxnM0FI0geNj
Huf+vlXEHYiLTfh/48u1LGXKSbHTaQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 06:38:12 2025 by rpki-client