Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/9507206A63A111F092E32646C4F9AE02.roa
File:                     9507206A63A111F092E32646C4F9AE02.roa (raw, json)
Hash identifier:          M0FoVt5RwJimEJ3yM4LIg2YOQNmwyICgIMilWYDArBs=
Subject key identifier:   25:6E:61:EB:96:E3:0E:12:B6:8B:E8:87:C2:97:AA:1B:63:C3:21:41
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0755
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/9507206A63A111F092E32646C4F9AE02.roa
Signing time:             Fri 18 Jul 2025 06:36:49 +0000
ROA not before:           Fri 18 Jul 2025 06:36:49 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150750
IP address blocks:        103.151.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Jul 18 06:36:49 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6879eb81-7c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:5f:1d:a2:52:27:88:74:26:1d:7b:37:a4:
                    f2:6a:b6:2d:a5:77:52:94:b0:00:96:08:5a:9c:84:
                    9e:be:04:e4:27:a4:5f:85:2d:a6:0e:66:ce:7c:0c:
                    49:84:7e:df:ba:99:97:cf:37:12:44:f5:0c:e7:ed:
                    5e:eb:ac:40:f2:f2:bb:6d:dd:8b:73:f6:69:42:fa:
                    bc:d0:3d:1b:d1:1c:e6:bb:a2:4b:d2:28:05:65:f7:
                    f3:cf:5d:07:8a:0f:68:bb:40:86:1a:ce:5d:08:28:
                    61:97:af:ad:64:40:c7:77:fd:6c:61:e4:d2:12:ec:
                    c9:3a:6a:be:2e:9f:2d:b1:98:30:86:b8:cd:de:82:
                    94:5d:a5:94:db:f9:89:66:0f:51:ca:bc:62:ad:b0:
                    eb:8a:5d:c5:b1:4f:11:ba:2d:d0:9f:f2:1b:d3:0f:
                    1f:fe:61:64:2b:09:55:18:f7:54:e4:6c:b6:76:c3:
                    f1:da:b2:4e:46:d5:d0:a4:a9:03:4a:60:50:7e:1e:
                    9f:a8:9d:4e:d6:98:f1:96:f8:fe:3e:5f:85:71:a7:
                    e1:d8:3e:5b:da:b9:54:47:1f:d6:2f:52:83:5d:b4:
                    78:4c:c8:17:f4:3a:1e:2c:6f:c2:4c:b6:7b:11:22:
                    0b:a0:4b:eb:09:0e:73:d0:bd:9c:40:d3:aa:d6:07:
                    0c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6E:61:EB:96:E3:0E:12:B6:8B:E8:87:C2:97:AA:1B:63:C3:21:41
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/9507206A63A111F092E32646C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:4e:41:3d:89:09:b5:8e:92:68:4a:f7:ba:16:81:38:e9:
         45:0c:fa:eb:90:44:e9:ea:c1:d8:6f:06:2a:ba:2f:27:25:bb:
         4e:20:74:eb:0f:6b:7f:de:77:f7:fd:c5:c9:70:17:ed:1e:69:
         6a:56:8a:88:c4:59:bc:31:fa:c6:c4:33:2b:2b:c6:28:a8:73:
         5a:93:34:d6:8c:81:3f:16:5a:ba:10:9e:9b:b8:4f:8c:b6:31:
         a4:a5:43:10:b1:55:56:92:0c:11:30:22:06:b2:c7:32:17:3a:
         51:3a:aa:70:a1:fc:1f:f1:03:f3:cb:76:95:05:aa:fc:03:14:
         2f:d7:28:db:50:79:df:d0:fb:9a:1c:15:ac:fe:a5:b9:ca:a2:
         5b:aa:ed:73:27:e3:29:73:9f:92:3b:58:90:f6:07:86:8f:c2:
         62:df:47:8d:23:90:e9:19:1b:ef:01:d7:55:c3:cf:b2:a1:c1:
         7e:27:a8:93:a8:fd:75:5a:4d:c7:11:f4:ac:a1:a1:36:fb:2b:
         ab:22:ed:44:3a:cb:22:8f:6b:2c:a5:7f:f6:01:f9:d2:56:25:
         11:da:b7:04:57:87:d8:08:8b:2f:d2:d4:81:18:5e:91:4d:a3:
         16:ad:08:f7:2b:5b:06:16:a3:14:04:c1:34:6f:ab:4a:57:06:
         14:1e:b5:cc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD
MkExQjA2OUQwHhcNMjUwNzE4MDYzNjQ5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc5ZWI4MS03YzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0fRfHaJSJ4h0Jh17N6TyarYtpXdSlLAAlghanISevgTkJ6RfhS2mDmbOfAxJ
hH7fupmXzzcSRPUM5+1e66xA8vK7bd2Lc/ZpQvq80D0b0Rzmu6JL0igFZffzz10H
ig9ou0CGGs5dCChhl6+tZEDHd/1sYeTSEuzJOmq+Lp8tsZgwhrjN3oKUXaWU2/mJ
Zg9RyrxirbDril3FsU8Rui3Qn/Ib0w8f/mFkKwlVGPdU5Gy2dsPx2rJORtXQpKkD
SmBQfh6fqJ1O1pjxlvj+Pl+Fcafh2D5b2rlURx/WL1KDXbR4TMgX9DoeLG/CTLZ7
ESILoEvrCQ5z0L2cQNOq1gcMcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCVuYeuW
4w4Stovoh8KXqhtjwyFBMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx
NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC
cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY1NEMvNTFBOUVBQ0M0MTYwMTFFQjkwODc0NDUwQzRGOUFFMDIvOTUwNzIwNkE2
M0ExMTFGMDkyRTMyNjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnl+wwDQYJKoZIhvcNAQELBQADggEBAIhcTkE9iQm1jpJo
Sve6FoE46UUM+uuQROnqwdhvBiq6Lyclu04gdOsPa3/ed/f9xclwF+0eaWpWiojE
Wbwx+sbEMysrxiioc1qTNNaMgT8WWroQnpu4T4y2MaSlQxCxVVaSDBEwIgayxzIX
OlE6qnCh/B/xA/PLdpUFqvwDFC/XKNtQed/Q+5ocFaz+pbnKoluq7XMn4ylzn5I7
WJD2B4aPwmLfR40jkOkZG+8B11XDz7KhwX4nqJOo/XVaTccR9KyhoTb7K6si7UQ6
yyKPayylf/YB+dJWJRHatwRXh9gIiy/S1IEYXpFNoxatCPcrWwYWoxQEwTRvq0pX
BhQetcw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:04 2025 by rpki-client