Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
File:                     92B377C82CB011F0A2E86B16C4F9AE02.roa (raw, json)
Hash identifier:          FoDHZvXeH5e/XFJzf3AymBW0SIuGnIL2DXJhgfsRixg=
Subject key identifier:   4F:C7:77:66:B5:57:6B:24:36:1F:26:54:AB:AD:F5:08:82:72:B6:91
Certificate issuer:       /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial:       51
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
Signing time:             Thu 03 Jul 2025 07:41:38 +0000
ROA not before:           Thu 03 Jul 2025 07:41:38 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153494
IP address blocks:        103.60.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
        Validity
            Not Before: Jul  3 07:41:38 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68663432-794c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:0e:43:2a:59:7b:72:02:88:a9:9d:1e:7a:
                    65:34:0b:24:c9:83:2e:9f:9b:7e:87:79:43:10:ba:
                    70:da:b5:60:67:37:b7:57:1a:2e:87:d5:0d:26:99:
                    02:9b:ca:b5:81:bf:7f:fc:0b:75:82:d6:24:33:3f:
                    f1:91:ab:39:ce:1e:3e:44:d7:a4:7b:72:fd:02:62:
                    45:f0:f1:10:33:00:29:77:9d:62:44:6d:e1:cc:44:
                    d7:0c:df:73:ef:2b:07:70:0f:f1:0d:9c:70:82:e9:
                    14:f8:32:93:5f:0a:99:59:c2:20:f4:33:a2:11:8d:
                    b9:e7:b4:e5:d0:dd:08:25:57:71:34:5a:76:50:94:
                    9d:99:49:f6:98:0b:e9:13:38:8e:4a:00:b5:91:b9:
                    ee:39:06:e0:e2:fa:a3:90:43:ef:8a:58:e4:7f:51:
                    97:e4:f0:85:24:e9:7f:1b:01:17:3e:6b:60:07:21:
                    f9:e8:85:cc:24:e9:6d:70:05:09:8d:12:24:c2:81:
                    75:f8:d6:1e:2d:4b:b8:8f:cd:eb:09:2d:fe:42:a2:
                    83:05:15:0b:84:dd:fc:f8:1c:23:18:f4:ce:dc:7f:
                    bb:a0:c9:07:ea:34:6d:bc:0c:56:dc:ea:b9:af:9b:
                    9c:aa:7a:03:4d:f5:e8:87:5e:fe:7a:53:55:1f:87:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C7:77:66:B5:57:6B:24:36:1F:26:54:AB:AD:F5:08:82:72:B6:91
            X509v3 Authority Key Identifier:
                keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:af:76:74:e1:26:4b:1f:cb:28:8a:77:82:cb:9a:cf:c8:c2:
         bb:61:f8:5d:18:7e:6d:05:9e:8e:9f:18:52:8c:ba:7e:7e:fd:
         18:83:0a:31:d4:83:79:2d:0a:35:1f:e0:5a:df:89:97:35:7c:
         0f:d2:b5:8c:23:34:88:7d:b0:95:40:59:d1:52:41:c2:11:14:
         b7:aa:55:5d:32:0b:c3:2f:9f:e5:76:dd:82:d8:99:15:37:62:
         eb:ec:fc:01:cd:1a:86:49:a3:9b:82:90:e1:de:91:fe:c6:d2:
         a5:7a:b0:14:5f:e0:0c:05:7e:35:22:a0:08:e9:b9:1f:3b:9e:
         b6:30:5b:54:7c:30:cc:2d:b4:88:93:97:67:23:94:91:46:96:
         cc:48:86:15:12:af:95:ed:34:b7:36:8f:2b:70:73:0c:36:d0:
         61:4e:e0:6c:41:7a:35:a9:45:16:63:58:4f:47:67:e2:16:4d:
         a3:a1:70:2a:ab:64:4c:8b:00:35:66:f2:52:0c:ed:80:0d:e2:
         60:7b:d6:e5:b2:d6:31:ee:a1:da:24:ec:e8:40:c2:ff:6d:a8:
         2b:70:ca:d7:d4:7d:3d:da:a6:39:d7:4a:7e:f1:16:22:40:23:
         d7:80:3a:90:68:6d:cb:e3:11:d5:e3:24:14:e8:6e:76:40:85:
         7f:69:7a:94
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RTk2RTExMC8GA1UEBRMoMjQyOUEzRUU1MDg4RjNENDUzNzJBOEUzQjM2ODM0Qzc1
RUFFNkQyOTAeFw0yNTA3MDMwNzQxMzhaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NjYzNDMyLTc5NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLbw5DKll7cgKIqZ0eemU0CyTJgy6fm36HeUMQunDatWBnN7dXGi6H1Q0mmQKb
yrWBv3/8C3WC1iQzP/GRqznOHj5E16R7cv0CYkXw8RAzACl3nWJEbeHMRNcM33Pv
KwdwD/ENnHCC6RT4MpNfCplZwiD0M6IRjbnntOXQ3QglV3E0WnZQlJ2ZSfaYC+kT
OI5KALWRue45BuDi+qOQQ++KWOR/UZfk8IUk6X8bARc+a2AHIfnohcwk6W1wBQmN
EiTCgXX41h4tS7iPzesJLf5CooMFFQuE3fz4HCMY9M7cf7ugyQfqNG28DFbc6rmv
m5yqegNN9eiHXv56U1Ufh/2FAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUT8d3ZrVX
ayQ2HyZUq631CIJytpEwHwYDVR0jBBgwFoAUJCmj7lCI89RTcqjjs2g0x16ubSkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTZFLzIzRDJGMTZFRUMy
MTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJT
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSkNtajdsQ0k4OVJUY3FqanMyZzB4MTZ1YlNrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi85MkIzNzdDODJD
QjAxMUYwQTJFODZCMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmc8QDANBgkqhkiG9w0BAQsFAAOCAQEAV692dOEmSx/LKIp3
gsuaz8jCu2H4XRh+bQWejp8YUoy6fn79GIMKMdSDeS0KNR/gWt+JlzV8D9K1jCM0
iH2wlUBZ0VJBwhEUt6pVXTILwy+f5XbdgtiZFTdi6+z8Ac0ahkmjm4KQ4d6R/sbS
pXqwFF/gDAV+NSKgCOm5HzuetjBbVHwwzC20iJOXZyOUkUaWzEiGFRKvle00tzaP
K3BzDDbQYU7gbEF6NalFFmNYT0dn4hZNo6FwKqtkTIsANWbyUgztgA3iYHvW5bLW
Me6h2iTs6EDC/22oK3DK19R9PdqmOddKfvEWIkAj14A6kGhty+MR1eMkFOhudkCF
f2l6lA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 09:00:09 2025 by rpki-client