Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/94A6144A68C711EE8C53A031C4F9AE02.roa
File:                     94A6144A68C711EE8C53A031C4F9AE02.roa (raw, json)
Hash identifier:          +fTInFBTWg679k5VOcYrApdvSBqjIbZRDI3BvDZYAvE=
Subject key identifier:   2E:0A:3D:CE:35:A1:7F:9F:40:24:C9:DC:74:F0:BA:38:6D:60:D7:E0
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       0173
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/94A6144A68C711EE8C53A031C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 04:52:14 +0000
ROA not before:           Wed 03 Sep 2025 04:52:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.38.221.0/24 maxlen: 24
                          210.79.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 04:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Sep  3 04:52:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b7c97e-4e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f3:f0:3c:31:70:de:f3:65:01:fb:70:dd:3c:
                    9d:98:8b:63:30:aa:99:f2:4c:73:01:5a:f8:05:4c:
                    46:0d:72:98:6b:35:21:be:b0:5a:6a:6c:4e:99:65:
                    a1:7f:4c:2e:46:72:8f:55:6c:2c:e1:dd:77:60:3d:
                    67:6d:40:df:78:24:7c:1c:0a:96:0b:b6:ba:25:81:
                    97:a7:53:66:50:26:57:63:14:77:73:af:bb:88:df:
                    c1:15:e9:82:f1:0b:95:11:35:2b:74:64:3a:e3:13:
                    50:b4:b8:d2:e5:7a:ca:83:dd:94:01:ef:70:05:63:
                    57:a8:46:34:41:e4:c1:f3:56:d5:76:9a:00:39:8f:
                    49:48:d6:43:52:9d:c8:9d:5c:f3:51:ae:7e:8d:9f:
                    46:7a:72:50:f8:98:e7:4d:04:e7:c8:64:7e:f4:cc:
                    6f:08:e2:fa:bc:01:2f:7d:9f:b7:5b:29:88:f5:b4:
                    bb:e3:ea:b0:4c:a3:fb:27:d9:75:d9:ac:70:05:b7:
                    9b:39:5b:c7:8e:0e:05:a4:79:5f:b5:ff:8b:af:d0:
                    35:52:71:0a:6b:16:7e:ac:97:07:67:5c:d3:47:1d:
                    3f:4e:f8:e3:fd:47:89:a6:2b:83:d3:35:97:9a:84:
                    0a:f5:66:25:ea:1a:a5:93:a4:d8:20:e0:e9:e7:e6:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0A:3D:CE:35:A1:7F:9F:40:24:C9:DC:74:F0:BA:38:6D:60:D7:E0
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/94A6144A68C711EE8C53A031C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.221.0/24
                  210.79.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:99:4f:14:03:e1:2b:25:52:03:2d:a5:a1:c8:91:65:8f:0b:
         13:f2:dc:0d:3c:16:9c:0d:87:a1:a7:be:40:2a:55:cd:9c:0e:
         a7:92:db:89:01:be:4a:6d:37:da:59:1d:ac:ca:4c:00:a1:9c:
         e8:75:1c:af:96:5f:e9:84:d5:d7:f7:5a:33:5e:95:eb:34:fc:
         6f:0d:96:9f:8d:4f:91:db:a5:35:8b:ff:ab:db:54:ab:d4:a3:
         35:9e:eb:d8:76:b8:7c:f0:a8:6f:75:c9:fc:4c:a6:b9:eb:d6:
         ef:38:0f:bd:ba:8f:a2:5e:20:8e:c8:16:9e:d2:d7:ff:47:09:
         6f:57:65:00:e0:c5:ae:e1:fa:84:2f:58:91:2e:6f:a4:4b:34:
         4b:98:8b:b6:51:cc:ba:da:d7:da:2b:a6:3d:13:e3:08:42:be:
         19:30:bb:39:dd:82:50:c4:68:38:c6:a0:82:f5:2c:87:86:b2:
         86:e5:70:bb:fe:4b:10:2f:64:2f:f2:0e:90:88:09:19:fc:34:
         d2:d9:e1:33:c4:22:a0:e7:bd:a0:b3:f0:90:91:12:dd:b8:e9:
         80:cb:b1:2e:f8:1a:08:2d:25:0c:6e:a5:8b:e3:20:4b:c2:66:
         52:9f:62:54:ad:62:fd:93:2c:44:76:7d:a6:63:43:db:a2:63:
         cc:6d:16:70
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0
NTAwOEVDMzkwHhcNMjUwOTAzMDQ1MjE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3Yzk3ZS00ZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/PwPDFw3vNlAftw3TydmItjMKqZ8kxzAVr4BUxGDXKYazUhvrBaamxOmWWh
f0wuRnKPVWws4d13YD1nbUDfeCR8HAqWC7a6JYGXp1NmUCZXYxR3c6+7iN/BFemC
8QuVETUrdGQ64xNQtLjS5XrKg92UAe9wBWNXqEY0QeTB81bVdpoAOY9JSNZDUp3I
nVzzUa5+jZ9GenJQ+JjnTQTnyGR+9MxvCOL6vAEvfZ+3WymI9bS74+qwTKP7J9l1
2axwBbebOVvHjg4FpHlftf+Lr9A1UnEKaxZ+rJcHZ1zTRx0/Tvjj/UeJpiuD0zWX
moQK9WYl6hqlk6TYIODp5+a46QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC4KPc41
oX+fQCTJ3HTwujhtYNfgMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4
QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVEOTMvQTM2QzY4RjQ2OEM2MTFFRTk1OTY0RjdDQzRGOUFFMDIvOTRBNjE0NEE2
OEM3MTFFRThDNTNBMDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnJt0DBADST6wwDQYJKoZIhvcNAQELBQADggEBACOZTxQD
4SslUgMtpaHIkWWPCxPy3A08FpwNh6GnvkAqVc2cDqeS24kBvkptN9pZHazKTACh
nOh1HK+WX+mE1df3WjNeles0/G8Nlp+NT5HbpTWL/6vbVKvUozWe69h2uHzwqG91
yfxMprnr1u84D726j6JeII7IFp7S1/9HCW9XZQDgxa7h+oQvWJEub6RLNEuYi7ZR
zLra19orpj0T4whCvhkwuzndglDEaDjGoIL1LIeGsoblcLv+SxAvZC/yDpCICRn8
NNLZ4TPEIqDnvaCz8JCREt246YDLsS74GggtJQxupYvjIEvCZlKfYlStYv2TLER2
faZjQ9uiY8xtFnA=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:14 2025 by rpki-client