Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
File:                     9F88C3542ADF11F0B3006D40C4F9AE02.roa (raw, json)
Hash identifier:          HfH3bnjSArZqBmb++sIR3SfMhcyn2TdNR3uddhdO4C4=
Subject key identifier:   71:47:D8:62:4B:3D:24:D9:97:59:76:5B:A3:8E:53:24:58:32:A2:79
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       03AF
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
Signing time:             Sat 19 Jul 2025 01:37:12 +0000
ROA not before:           Sat 19 Jul 2025 01:37:12 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151983
IP address blocks:        103.172.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Jul 19 01:37:12 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=687af6c8-3a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:70:a2:18:59:6b:3e:18:af:b1:66:43:0c:
                    5d:ad:ba:c3:78:a2:cd:40:56:f6:c9:c5:63:54:11:
                    52:27:ef:b9:d1:df:dc:1f:52:24:5b:fb:27:ee:74:
                    fe:99:29:86:67:3e:d6:29:e5:11:27:de:76:12:d0:
                    ad:5d:37:9d:2e:26:ec:98:b7:53:3a:ef:8d:c4:99:
                    6b:01:59:14:eb:8a:f8:11:1f:13:82:6c:ea:7c:07:
                    02:95:44:35:e7:df:08:da:cc:4a:64:e5:61:8d:5a:
                    b6:2a:6a:83:88:d4:86:f8:56:e0:d1:94:b3:a7:f3:
                    72:8f:a4:24:5e:3a:5e:55:ba:43:d8:42:8d:ba:45:
                    89:a2:41:e2:22:93:18:ed:58:a4:07:b9:9d:c6:07:
                    cc:56:51:76:89:50:b4:0a:e8:9e:44:e1:dd:09:9f:
                    ec:23:3d:1c:40:3e:93:2b:d5:46:b5:61:f8:e1:17:
                    c9:1f:cd:87:7e:9a:71:fd:40:2e:68:ac:91:f9:a3:
                    f2:73:12:cf:fa:d3:72:a6:07:88:b9:e7:05:5e:ab:
                    66:a6:11:33:1e:7b:55:7b:73:f4:9a:2e:a5:e4:23:
                    13:da:27:4f:ab:3d:00:3d:d4:11:60:0f:f2:cb:b1:
                    51:e9:5b:02:95:c4:0c:d2:91:04:22:ab:ed:9a:7c:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:47:D8:62:4B:3D:24:D9:97:59:76:5B:A3:8E:53:24:58:32:A2:79
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:07:6f:f4:28:01:63:26:5a:72:7b:c4:f7:25:aa:c8:60:02:
         f5:54:cd:c8:cc:12:6e:3d:ff:c3:53:20:9e:34:47:a2:41:70:
         b7:2d:f4:b6:68:0c:70:25:05:ee:c0:9d:ea:d9:0d:50:13:58:
         c8:f0:b9:77:c7:5b:82:36:26:51:e3:02:95:38:75:ea:88:d3:
         1d:fe:ae:f9:be:c8:34:70:c6:c6:23:4c:d0:13:06:c9:39:79:
         67:b0:f2:67:8b:33:c2:c7:77:1e:d1:4d:1c:7e:fe:f7:9c:75:
         df:ed:70:3c:80:82:d5:9f:a7:d3:43:bd:6c:b8:d2:55:ed:9d:
         34:27:e1:03:d8:de:46:76:93:08:bc:5f:a6:66:f6:2c:c8:28:
         02:f9:25:b3:30:25:44:0d:3f:8e:ff:2a:07:06:f9:d3:2e:1b:
         6b:c5:84:8f:27:e2:54:56:44:95:16:58:a5:8b:18:be:3a:28:
         5e:e7:cb:fd:e9:c0:76:c5:0c:00:06:22:fe:8f:4b:e8:0a:68:
         18:56:05:b4:40:a1:ad:a7:c1:b0:84:8d:a8:66:6b:68:8c:5f:
         c3:32:2e:ce:00:b4:af:3d:45:55:5d:8c:c5:c0:b5:57:eb:03:
         96:7d:59:fa:a2:ff:d0:5d:db:43:8d:d5:83:ae:dd:06:eb:d2:
         14:3d:f4:ec
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3
QUJGOTdERTMwHhcNMjUwNzE5MDEzNzEyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODdhZjZjOC0zYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn4RwohhZaz4Yr7FmQwxdrbrDeKLNQFb2ycVjVBFSJ++50d/cH1IkW/sn7nT+
mSmGZz7WKeURJ952EtCtXTedLibsmLdTOu+NxJlrAVkU64r4ER8TgmzqfAcClUQ1
598I2sxKZOVhjVq2KmqDiNSG+Fbg0ZSzp/Nyj6QkXjpeVbpD2EKNukWJokHiIpMY
7VikB7mdxgfMVlF2iVC0CuieROHdCZ/sIz0cQD6TK9VGtWH44RfJH82Hfppx/UAu
aKyR+aPycxLP+tNypgeIuecFXqtmphEzHntVe3P0mi6l5CMT2idPqz0APdQRYA/y
y7FR6VsClcQM0pEEIqvtmnzL+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHFH2GJL
PSTZl1l2W6OOUyRYMqJ5MB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx
N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDc3NzEvNTVGMkYwRkVCMTdEMTFFQ0I5NzM2MjQxQzRGOUFFMDIvOUY4OEMzNTQy
QURGMTFGMEIzMDA2RDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrKcwDQYJKoZIhvcNAQELBQADggEBAIIHb/QoAWMmWnJ7
xPclqshgAvVUzcjMEm49/8NTIJ40R6JBcLct9LZoDHAlBe7AnerZDVATWMjwuXfH
W4I2JlHjApU4deqI0x3+rvm+yDRwxsYjTNATBsk5eWew8meLM8LHdx7RTRx+/vec
dd/tcDyAgtWfp9NDvWy40lXtnTQn4QPY3kZ2kwi8X6Zm9izIKAL5JbMwJUQNP47/
KgcG+dMuG2vFhI8n4lRWRJUWWKWLGL46KF7ny/3pwHbFDAAGIv6PS+gKaBhWBbRA
oa2nwbCEjahma2iMX8MyLs4AtK89RVVdjMXAtVfrA5Z9Wfqi/9Bd20ON1YOu3Qbr
0hQ99Ow=
-----END CERTIFICATE-----
Generated at Sun Jul 20 10:48:37 2025 by rpki-client