Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/B9AC3CD4B0F011E5A08A224DC4F9AE02.roa
File:                     B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier:          H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=
Subject key identifier:   95:57:20:26:30:6D:21:E9:71:C5:E3:E5:58:B6:06:72:C1:23:74:2A
Certificate issuer:       /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial:       2797
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/B9AC3CD4B0F011E5A08A224DC4F9AE02.roa
Signing time:             Tue 08 Jul 2025 15:52:44 +0000
ROA not before:           Tue 08 Jul 2025 15:52:44 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132842
IP address blocks:        103.11.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 15:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10135 (0x2797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
        Validity
            Not Before: Jul  8 15:52:44 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686d3ecc-af30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:ed:38:30:87:3f:71:55:b8:32:21:de:9c:
                    76:68:7c:27:cc:5a:35:33:d4:13:62:19:95:17:5e:
                    70:96:87:65:bf:c1:6f:46:d2:08:13:36:75:dd:74:
                    69:20:ba:fe:95:74:5d:1b:bc:34:1f:ae:3c:c1:0b:
                    1c:b0:da:9b:f3:70:59:b4:1d:1a:48:c4:01:5b:34:
                    2c:2e:cd:c6:42:25:91:74:9d:a1:2d:ee:e0:7e:32:
                    4d:34:cf:ba:39:de:95:e9:b4:61:89:97:88:7e:cd:
                    6f:28:47:17:c6:d6:e6:76:b9:d4:e4:41:26:dc:e0:
                    b9:cd:73:06:dd:c9:93:2c:80:99:b4:0b:90:de:19:
                    3a:69:f7:08:25:77:34:6a:63:bf:e4:44:e2:33:a9:
                    94:cd:96:a8:45:d0:44:e7:4d:28:9d:84:27:c8:c3:
                    cc:a8:36:8a:56:b5:87:f2:42:75:c1:2b:97:ef:89:
                    f5:48:bc:58:03:fe:29:e4:a7:88:b9:e3:a6:b6:63:
                    64:56:e9:20:53:bc:3d:bd:e0:ed:6b:a7:3a:ed:08:
                    87:cf:8a:b9:e3:45:a2:fc:0d:e0:70:64:fc:5d:6d:
                    1f:27:aa:6f:ed:1b:10:00:44:82:8d:6b:4a:e4:46:
                    e3:87:d2:c4:37:34:eb:8d:f8:5b:e0:b6:b4:49:d7:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:20:26:30:6D:21:E9:71:C5:E3:E5:58:B6:06:72:C1:23:74:2A
            X509v3 Authority Key Identifier:
                keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/B9AC3CD4B0F011E5A08A224DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:f1:78:ba:52:dd:8e:84:11:65:70:22:96:9c:fa:62:68:
         c8:c2:db:37:9d:7b:bf:8b:07:39:96:d1:d5:8c:6e:a2:29:84:
         b5:ca:51:61:09:77:f7:6f:49:03:f9:11:ef:a1:b7:74:6e:a5:
         86:41:6f:2f:c6:f1:49:12:55:ed:4e:9e:60:9d:99:37:45:04:
         55:9d:d0:67:9a:0c:4f:26:55:42:01:be:54:bf:ad:ce:90:20:
         55:03:36:ac:09:47:26:95:ae:54:75:62:2d:fa:7a:11:36:0a:
         1f:71:07:87:78:67:1f:2d:53:ea:65:ae:9b:96:7c:59:0d:6d:
         3b:55:85:de:b8:ba:67:6b:cb:32:d0:27:0d:ac:db:8b:06:41:
         69:90:9d:e7:0c:54:7c:07:7c:3e:7d:65:66:37:15:0d:83:59:
         a6:14:85:1e:e7:6d:18:1d:aa:39:c1:5f:9a:c3:b9:f5:f4:a4:
         66:fa:59:ec:f4:37:23:b7:b2:ce:54:a0:66:a4:aa:c4:c5:6a:
         9c:e7:2d:d3:10:dc:1e:81:3a:1d:a8:c9:2b:1c:de:1e:56:4b:
         35:19:ba:e9:38:40:a9:59:24:2b:80:d9:7d:fd:fa:12:66:9b:
         e6:7e:0f:45:76:30:63:2e:df:9d:cb:6b:8f:60:af:52:40:78:
         c6:21:13:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjUwNzA4MTU1MjQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODZkM2VjYy1hZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuTtODCHP3FVuDIh3px2aHwnzFo1M9QTYhmVF15wlodlv8FvRtIIEzZ13XRp
ILr+lXRdG7w0H648wQscsNqb83BZtB0aSMQBWzQsLs3GQiWRdJ2hLe7gfjJNNM+6
Od6V6bRhiZeIfs1vKEcXxtbmdrnU5EEm3OC5zXMG3cmTLICZtAuQ3hk6afcIJXc0
amO/5ETiM6mUzZaoRdBE500onYQnyMPMqDaKVrWH8kJ1wSuX74n1SLxYA/4p5KeI
ueOmtmNkVukgU7w9veDta6c67QiHz4q540Wi/A3gcGT8XW0fJ6pv7RsQAESCjWtK
5Ebjh9LENzTrjfhb4La0SddpLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJVXICYw
bSHpccXj5Vi2BnLBI3QqMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvQjlBQzNDRDRC
MEYwMTFFNUEwOEEyMjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnCw0wDQYJKoZIhvcNAQELBQADggEBAE3W8Xi6Ut2OhBFl
cCKWnPpiaMjC2zede7+LBzmW0dWMbqIphLXKUWEJd/dvSQP5Ee+ht3RupYZBby/G
8UkSVe1OnmCdmTdFBFWd0GeaDE8mVUIBvlS/rc6QIFUDNqwJRyaVrlR1Yi36ehE2
Ch9xB4d4Zx8tU+plrpuWfFkNbTtVhd64umdryzLQJw2s24sGQWmQnecMVHwHfD59
ZWY3FQ2DWaYUhR7nbRgdqjnBX5rDufX0pGb6Wez0NyO3ss5UoGakqsTFapznLdMQ
3B6BOh2oySsc3h5WSzUZuuk4QKlZJCuA2X39+hJmm+Z+D0V2MGMu353La49gr1JA
eMYhE6s=
-----END CERTIFICATE-----
Generated at Sun Jul 20 10:39:55 2025 by rpki-client