Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
File:                     810DCA288C6511EF813EB90EC4F9AE02.roa (raw, json)
Hash identifier:          9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=
Subject key identifier:   D0:3B:E0:A5:D1:9B:5E:2F:E2:D3:F8:6D:B5:B6:46:C0:A7:DD:45:A3
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       02B7
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
Signing time:             Wed 09 Jul 2025 02:38:31 +0000
ROA not before:           Wed 09 Jul 2025 02:38:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        45.117.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Jul  9 02:38:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686dd627-50c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:00:dd:f7:12:a8:c1:34:bf:88:dc:90:66:
                    e5:85:36:f0:ba:a8:e0:d3:6b:4a:b9:e9:d0:5b:0d:
                    3e:65:bb:a9:fb:2c:08:2f:23:bd:44:fa:91:27:93:
                    73:b5:2d:56:f9:89:51:41:9c:9c:cd:44:d9:e8:a7:
                    49:df:4b:23:4a:71:ab:18:83:ed:80:1a:a2:9f:5d:
                    a1:78:fa:a9:68:7f:5b:af:e9:af:fd:0d:e9:82:9a:
                    64:07:47:dd:37:5e:2a:91:c9:01:c2:39:ec:cc:0b:
                    ce:b5:24:a5:70:8e:bb:96:97:0c:a2:2a:7f:8f:a2:
                    3f:b0:60:66:5d:db:e4:f6:1e:74:da:6e:3d:f7:53:
                    e5:18:43:e3:6b:0e:c6:eb:57:ee:09:85:5c:9c:64:
                    3e:af:c8:5c:74:3f:37:0f:3d:cc:7d:f7:81:c5:8f:
                    5c:5d:83:91:d9:70:5a:7b:fb:13:93:2a:5a:a5:6e:
                    ee:23:08:56:6b:3c:96:39:4d:60:1e:8a:6d:6c:7d:
                    08:8e:59:b9:b8:ea:e2:04:39:b1:1d:84:af:5b:89:
                    01:70:f7:95:7a:be:aa:d2:04:d4:aa:8f:d5:96:07:
                    ee:27:14:fa:13:18:09:e9:78:e7:d5:88:64:5f:84:
                    9a:df:89:5d:df:d8:36:03:4e:cb:24:dd:c1:2b:4b:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:E0:A5:D1:9B:5E:2F:E2:D3:F8:6D:B5:B6:46:C0:A7:DD:45:A3
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:b9:1d:26:ce:7f:a0:b5:ef:ab:82:6d:53:cf:7c:e1:db:
         3f:83:42:84:1b:9e:0c:d0:b4:21:04:13:a6:02:d2:96:c2:14:
         2d:e0:ff:40:b9:bd:42:67:e1:3c:16:ff:63:4c:32:df:a8:c5:
         f5:25:f6:ac:d4:6a:71:9c:e6:b1:6f:45:7f:5c:ac:4d:6d:87:
         b5:a5:f6:42:35:e1:40:c0:33:e4:54:14:53:08:28:59:47:cd:
         7e:b8:1c:a4:f8:1a:8c:83:68:86:1e:32:02:24:52:e9:ef:20:
         a8:67:8a:69:07:e5:dc:5d:62:5b:03:6f:17:62:b5:79:f4:05:
         3a:a0:6c:dc:3a:7d:d1:1f:c7:4d:17:07:00:6a:59:d5:69:7c:
         85:92:c4:2d:23:c5:40:9a:90:a0:25:c8:e6:99:12:ca:c4:6d:
         97:f1:0a:5c:67:56:73:c1:fe:33:aa:36:b0:1a:ac:36:d9:07:
         ce:e5:e5:ab:f5:7c:89:08:bb:50:3e:06:11:1a:7d:d3:c4:dd:
         a5:45:63:42:29:41:ff:ea:dd:9f:d2:85:92:8f:f1:40:92:64:
         55:af:10:25:31:4f:29:55:66:bc:6b:3d:e6:d3:03:95:7b:84:
         9d:94:8f:e2:c5:85:41:af:d2:7e:88:7e:24:40:b1:06:98:a1:
         1e:31:a9:92
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB
QTIyNUIwRUUwHhcNMjUwNzA5MDIzODMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODZkZDYyNy01MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0J4A3fcSqME0v4jckGblhTbwuqjg02tKuenQWw0+Zbup+ywILyO9RPqRJ5Nz
tS1W+YlRQZyczUTZ6KdJ30sjSnGrGIPtgBqin12hePqpaH9br+mv/Q3pgppkB0fd
N14qkckBwjnszAvOtSSlcI67lpcMoip/j6I/sGBmXdvk9h502m4991PlGEPjaw7G
61fuCYVcnGQ+r8hcdD83Dz3MffeBxY9cXYOR2XBae/sTkypapW7uIwhWazyWOU1g
HoptbH0Ijlm5uOriBDmxHYSvW4kBcPeVer6q0gTUqo/VlgfuJxT6ExgJ6Xjn1Yhk
X4Sa34ld39g2A07LJN3BK0twWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNA74KXR
m14v4tP4bbW2RsCn3UWjMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4
QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzZCQjIvNUQ0Q0MyRjYwOEM4MTFFRDk0NEYyNTY2QzRGOUFFMDIvODEwRENBMjg4
QzY1MTFFRjgxM0VCOTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtdT0wDQYJKoZIhvcNAQELBQADggEBAHyMuR0mzn+gte+r
gm1Tz3zh2z+DQoQbngzQtCEEE6YC0pbCFC3g/0C5vUJn4TwW/2NMMt+oxfUl9qzU
anGc5rFvRX9crE1th7Wl9kI14UDAM+RUFFMIKFlHzX64HKT4GoyDaIYeMgIkUunv
IKhnimkH5dxdYlsDbxditXn0BTqgbNw6fdEfx00XBwBqWdVpfIWSxC0jxUCakKAl
yOaZEsrEbZfxClxnVnPB/jOqNrAarDbZB87l5av1fIkIu1A+BhEafdPE3aVFY0Ip
Qf/q3Z/ShZKP8UCSZFWvECUxTylVZrxrPebTA5V7hJ2Uj+LFhUGv0n6IfiRAsQaY
oR4xqZI=
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:44:08 2025 by rpki-client