Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F7E56716E03511EC8D8CC540C4F9AE02.roa
File:                     F7E56716E03511EC8D8CC540C4F9AE02.roa (raw, json)
Hash identifier:          uv0a+aYSHDklQyqYU9YYJtgGuvEJFcoYLMxfaGmfmZs=
Subject key identifier:   C0:31:9E:FD:C1:2D:6C:27:FD:E2:30:0A:33:28:E2:C9:AB:82:7B:E3
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0680
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F7E56716E03511EC8D8CC540C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:06:23 +0000
ROA not before:           Wed 27 Aug 2025 01:06:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9339
IP address blocks:        203.146.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae5a0e-265d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:d8:41:35:7a:6a:75:55:50:3f:9d:90:54:
                    75:52:33:4d:87:d4:e7:ed:0d:68:43:c1:2b:50:c4:
                    7d:87:d7:e4:6e:3f:88:dd:cc:cf:16:bd:54:1e:1f:
                    b7:83:fd:81:b3:31:84:2c:fe:6f:e1:2f:5e:f3:c6:
                    93:51:3e:7e:40:b0:94:ac:17:7c:d8:04:15:69:f1:
                    9e:6c:94:67:0c:a7:a5:ab:fd:cf:81:8e:26:2a:c1:
                    72:c6:f3:ea:30:ff:e1:c3:0a:8c:cd:0e:d4:c6:81:
                    ee:f3:5c:7e:b7:a2:e3:bf:b6:63:c9:79:3f:8c:d2:
                    52:a0:58:2f:62:06:2c:76:b4:d3:fc:d2:d8:20:aa:
                    e5:d2:57:a6:46:4a:65:37:14:ae:81:6c:94:93:0b:
                    15:cd:6f:65:02:b8:1c:24:78:4c:05:3d:13:68:4e:
                    48:b5:19:21:a1:01:da:de:91:bb:ef:7b:9a:76:5a:
                    2d:a0:78:40:5a:29:8b:67:79:54:e7:d6:72:b4:be:
                    99:39:ec:46:8b:7f:59:8a:23:a8:f0:08:8f:a6:b7:
                    f1:17:14:6c:58:a9:05:ad:5f:12:12:04:64:bf:07:
                    93:a7:a3:86:ea:62:e2:6d:74:d5:26:e5:d8:80:12:
                    3a:98:1e:52:dc:64:66:01:7e:b5:88:54:c9:72:88:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:9E:FD:C1:2D:6C:27:FD:E2:30:0A:33:28:E2:C9:AB:82:7B:E3
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F7E56716E03511EC8D8CC540C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:7e:06:d3:a2:51:df:c3:24:c0:7d:09:76:b4:4f:ec:db:
         6c:8d:23:7b:4d:cf:63:b1:6d:a7:9b:34:8f:b8:3c:bf:18:f5:
         70:fd:f3:0b:9b:6f:29:97:b0:16:60:5b:46:dd:0f:07:ca:ec:
         1f:a5:d5:17:43:3e:e6:f0:2e:e2:9c:8f:c5:91:f9:22:83:d6:
         0d:36:ad:04:59:36:79:b1:39:1d:ee:a7:b8:8c:e7:96:35:a8:
         51:ab:4e:fd:4c:f9:da:46:56:01:00:3d:8c:42:19:61:f6:95:
         f3:10:ba:14:ce:60:f1:d3:9e:0c:29:d1:d3:0b:43:31:d3:93:
         0d:1d:df:37:91:74:e1:15:ca:de:8d:31:5c:53:d3:46:8e:58:
         e1:f1:61:b5:11:d2:d1:86:52:96:10:cb:70:9f:18:be:51:29:
         33:13:04:53:c6:1b:50:bf:ad:c4:50:41:21:df:b3:7f:fe:9b:
         aa:ab:58:61:f1:8e:a1:be:a5:10:c0:33:74:a4:92:f4:80:e0:
         77:ec:64:e5:9d:44:a7:25:34:c8:59:f4:b8:59:01:52:2e:0d:
         56:3d:da:8f:5a:41:54:f3:82:06:6d:d5:f7:5a:17:5d:64:cf:
         ba:96:1c:13:f3:7e:ba:ed:20:24:d6:80:d0:a1:2f:53:5f:6a:
         35:b5:82:ac
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUwODI3MDEwNjIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGFlNWEwZS0yNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2LjYQTV6anVVUD+dkFR1UjNNh9Tn7Q1oQ8ErUMR9h9fkbj+I3czPFr1UHh+3
g/2BszGELP5v4S9e88aTUT5+QLCUrBd82AQVafGebJRnDKelq/3PgY4mKsFyxvPq
MP/hwwqMzQ7UxoHu81x+t6Ljv7ZjyXk/jNJSoFgvYgYsdrTT/NLYIKrl0lemRkpl
NxSugWyUkwsVzW9lArgcJHhMBT0TaE5ItRkhoQHa3pG773uadlotoHhAWimLZ3lU
59ZytL6ZOexGi39ZiiOo8AiPprfxFxRsWKkFrV8SEgRkvweTp6OG6mLibXTVJuXY
gBI6mB5S3GRmAX61iFTJcoiD+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMAxnv3B
LWwn/eIwCjMo4smrgnvjMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvRjdFNTY3MTZF
MDM1MTFFQzhEOENDNTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLkg0wDQYJKoZIhvcNAQELBQADggEBACiLfgbTolHfwyTA
fQl2tE/s22yNI3tNz2OxbaebNI+4PL8Y9XD98wubbymXsBZgW0bdDwfK7B+l1RdD
PubwLuKcj8WR+SKD1g02rQRZNnmxOR3up7iM55Y1qFGrTv1M+dpGVgEAPYxCGWH2
lfMQuhTOYPHTngwp0dMLQzHTkw0d3zeRdOEVyt6NMVxT00aOWOHxYbUR0tGGUpYQ
y3CfGL5RKTMTBFPGG1C/rcRQQSHfs3/+m6qrWGHxjqG+pRDAM3SkkvSA4HfsZOWd
RKclNMhZ9LhZAVIuDVY92o9aQVTzggZt1fdaF11kz7qWHBPzfrrtICTWgNChL1Nf
ajW1gqw=
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:16:20 2025 by rpki-client