Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
File:                     2B6E7D32FC5311ECBCE27247C4F9AE02.roa (raw, json)
Hash identifier:          YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=
Subject key identifier:   B3:05:E5:21:23:E8:B1:7C:0D:48:13:88:9E:72:62:FD:B6:FB:AC:AE
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       060D
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 23:35:01 +0000
ROA not before:           Thu 10 Jul 2025 23:35:01 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38136
IP address blocks:        103.167.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jul 10 23:35:01 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68704e25-5966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:43:0c:67:57:5a:c9:cb:3f:c3:26:70:6b:
                    8e:ec:21:b0:06:eb:72:f9:ea:c8:0b:20:f2:b2:55:
                    1b:e6:ed:af:0d:3a:7f:d1:a1:57:d2:a5:02:27:03:
                    db:b7:d0:2a:c5:d6:56:10:68:2d:55:26:aa:53:bb:
                    15:0c:17:f8:23:fa:36:7e:41:68:50:ff:e8:48:89:
                    b5:d1:81:d6:3d:e2:3d:08:28:ba:36:44:c9:e3:75:
                    7d:44:f2:7b:01:07:c3:e5:d0:3e:38:80:5d:c9:b6:
                    29:70:47:77:70:77:09:46:54:0c:f3:8f:9e:65:11:
                    ae:69:d7:22:d2:cb:14:a0:25:60:ac:cf:70:25:cf:
                    a4:da:eb:ef:44:7a:55:b9:89:3b:1c:f4:66:89:21:
                    1d:a1:40:8c:ca:8d:b9:c1:9f:4b:f0:b5:38:6b:bf:
                    96:00:dc:78:f2:21:88:5b:33:6b:32:2e:c7:6e:b9:
                    ba:23:51:50:70:db:e8:81:25:fa:58:26:7b:12:66:
                    d1:20:fb:ab:f6:55:78:4c:2f:3d:52:ca:a5:2b:79:
                    ba:09:25:37:ee:4b:f3:e5:28:97:40:d9:cf:c1:cd:
                    90:0b:87:09:2e:e0:63:b9:3d:b7:fa:1b:0f:aa:fe:
                    6a:85:c3:84:ae:c5:e0:3f:26:a7:06:f6:25:bb:fc:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:05:E5:21:23:E8:B1:7C:0D:48:13:88:9E:72:62:FD:B6:FB:AC:AE
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:d3:59:72:69:dd:d2:67:0e:91:75:28:09:8a:2f:43:8b:
         54:94:ee:71:2e:c6:c4:cc:22:6d:87:1d:3c:8c:f9:43:cf:10:
         ed:b7:7d:7a:97:c3:ad:ca:33:af:bb:53:67:20:a9:41:45:6c:
         ce:c1:d5:71:12:03:6b:2b:d5:ce:e1:b3:63:7d:79:d0:ed:e0:
         7e:ff:23:55:d2:68:70:bc:11:5e:97:31:55:50:9f:17:1d:3d:
         2c:05:0b:f3:f7:5d:19:01:0a:cd:53:2f:62:21:d6:d9:91:94:
         2b:c4:15:41:24:c9:42:04:99:3a:1c:bb:a3:1c:bd:a6:bb:24:
         ca:5c:b7:53:20:f9:92:50:ae:ee:9e:53:04:9a:1b:32:e7:2e:
         59:42:2c:4c:e2:aa:46:45:9a:44:a6:3d:ff:09:3b:5d:2c:2b:
         7d:d3:dd:b8:66:6a:06:e5:b5:a4:f3:9e:07:4b:a3:5f:02:45:
         98:12:e4:b4:06:02:5c:6a:08:0f:70:74:b6:cf:24:2f:80:28:
         e3:c5:ee:22:5d:2f:32:56:db:e2:8e:d0:81:5a:6d:46:fc:d2:
         cf:e2:04:00:d8:53:6d:2b:67:00:2b:69:7a:91:ac:df:42:3e:
         33:19:99:32:ca:b4:2d:c1:9f:c4:dc:a6:55:14:48:74:ed:fd:
         28:6d:62:2a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMTYxMTAvBgNVBAUTKDcwMjk0NjA1QjAxN0NCNzk2Q0FEODg0MkY1RUZCQTNG
NDQ4NzA3RjUwHhcNMjUwNzEwMjMzNTAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODcwNGUyNS01OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7FDDGdXWsnLP8MmcGuO7CGwButy+erICyDyslUb5u2vDTp/0aFX0qUCJwPb
t9AqxdZWEGgtVSaqU7sVDBf4I/o2fkFoUP/oSIm10YHWPeI9CCi6NkTJ43V9RPJ7
AQfD5dA+OIBdybYpcEd3cHcJRlQM84+eZRGuadci0ssUoCVgrM9wJc+k2uvvRHpV
uYk7HPRmiSEdoUCMyo25wZ9L8LU4a7+WANx48iGIWzNrMi7Hbrm6I1FQcNvogSX6
WCZ7EmbRIPur9lV4TC89UsqlK3m6CSU37kvz5SiXQNnPwc2QC4cJLuBjuT23+hsP
qv5qhcOErsXgPyanBvYlu/y3FQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLMF5SEj
6LF8DUgTiJ5yYv22+6yuMB8GA1UdIwQYMBaAFHApRgWwF8t5bK2IQvXvuj9Ehwf1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMxNi84RjBDNkIwMEJF
NjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkzbHNyWWhDOWUtNlAwU0hC
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NDbEdCYkFYeTNsc3JZaEM5ZS02UDBTSEJfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTFDMTYvOEYwQzZCMDBCRTYxMTFFQkFFRjM1QTYxQzRGOUFFMDIvMkI2RTdEMzJG
QzUzMTFFQ0JDRTI3MjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnp4YwDQYJKoZIhvcNAQELBQADggEBAEL801lyad3SZw6R
dSgJii9Di1SU7nEuxsTMIm2HHTyM+UPPEO23fXqXw63KM6+7U2cgqUFFbM7B1XES
A2sr1c7hs2N9edDt4H7/I1XSaHC8EV6XMVVQnxcdPSwFC/P3XRkBCs1TL2Ih1tmR
lCvEFUEkyUIEmTocu6Mcvaa7JMpct1Mg+ZJQru6eUwSaGzLnLllCLEziqkZFmkSm
Pf8JO10sK33T3bhmagbltaTzngdLo18CRZgS5LQGAlxqCA9wdLbPJC+AKOPF7iJd
LzJW2+KO0IFabUb80s/iBADYU20rZwAraXqRrN9CPjMZmTLKtC3Bn8TcplUUSHTt
/ShtYio=
-----END CERTIFICATE-----
Generated at Sun Jul 20 09:43:29 2025 by rpki-client