Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/595C959CF47C11EBB34AB831C4F9AE02.roa
File:                     595C959CF47C11EBB34AB831C4F9AE02.roa (raw, json)
Hash identifier:          5kzrcQyFidPv5zApR8jOVucTTuhj9FEkXhDKiJJ7pxM=
Subject key identifier:   36:5E:9C:90:10:3B:9E:D7:88:57:3E:0D:B9:5E:C1:52:B8:32:8F:BC
Certificate issuer:       /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial:       0570
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/595C959CF47C11EBB34AB831C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 00:04:55 +0000
ROA not before:           Tue 19 Aug 2025 00:04:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     48024
IP address blocks:        103.170.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
                          rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 23:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
        Validity
            Not Before: Aug 19 00:04:55 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a3bfa6-f224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:ed:19:eb:3e:81:75:82:c0:99:bb:68:35:
                    47:80:1d:08:e3:45:f2:e3:28:67:84:4f:0e:30:b6:
                    ca:f1:4e:a3:47:42:40:17:70:75:a7:6d:97:ba:44:
                    b1:d5:44:a7:5c:2e:fd:7e:10:93:ee:7d:ba:e7:e7:
                    cc:6d:7a:c2:fc:90:6b:c4:87:e5:f1:a2:87:bc:05:
                    f1:85:27:cd:1c:b1:48:18:93:d2:11:af:d8:c3:d8:
                    43:22:d6:1a:13:d5:73:cd:93:6e:b4:69:c3:63:24:
                    0b:0e:23:a3:2a:6b:21:61:61:16:9c:09:75:fa:23:
                    0f:10:5a:2b:e0:bf:15:62:49:f2:07:24:8e:0f:df:
                    f1:6a:6f:5b:0e:23:7b:2d:c5:17:44:a0:2d:d2:94:
                    5b:c1:a1:55:09:54:32:fc:14:99:e8:ac:94:cb:71:
                    e7:cb:8a:bf:d6:3c:df:c0:e6:a1:94:4b:fb:cb:bb:
                    e5:8d:2c:2b:97:e7:0e:70:74:dc:13:3b:b6:94:41:
                    81:4e:fb:e3:f1:84:9c:6d:38:f4:80:35:36:10:15:
                    54:10:b7:f9:16:18:e3:e5:44:fc:c5:04:f2:14:d7:
                    2a:7e:bb:20:66:f1:d9:69:9d:b4:e5:53:f1:e6:2c:
                    ac:e7:62:f2:8e:fc:59:5e:9a:75:9a:a9:49:41:6d:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5E:9C:90:10:3B:9E:D7:88:57:3E:0D:B9:5E:C1:52:B8:32:8F:BC
            X509v3 Authority Key Identifier:
                keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/595C959CF47C11EBB34AB831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:47:29:15:6e:9d:b2:c1:80:ca:f8:30:93:f2:6d:83:49:
         a1:6d:ba:b3:7c:0e:98:75:7a:74:31:b6:74:10:ca:16:83:eb:
         c8:0e:41:7b:c8:47:65:94:b8:4f:56:28:7c:fc:4c:ad:52:40:
         ea:37:bd:49:35:a0:58:cd:2f:c5:31:30:c1:4b:21:ec:d1:1c:
         96:ab:13:5f:3e:17:ae:c2:61:34:03:f0:81:c9:96:43:93:14:
         06:76:5d:a2:a6:89:c1:81:cd:61:17:27:16:69:25:3f:46:69:
         71:0b:e2:9b:23:80:55:6f:c5:17:e4:d3:98:b8:f9:99:b7:65:
         99:a1:aa:5d:ec:a3:98:5e:96:5a:5f:40:47:34:36:d2:d7:83:
         21:17:78:03:ab:57:7e:fe:20:94:a6:24:c8:72:73:b2:e3:bf:
         bc:28:6c:76:c3:49:21:88:06:0c:ac:22:96:4a:fa:9d:38:5b:
         93:d6:95:34:70:97:b8:bf:29:cf:ab:1e:04:a5:75:10:0d:97:
         6f:64:9a:52:33:88:55:87:86:65:52:e8:14:1f:c4:a6:b0:bf:
         2e:17:45:fa:59:ec:c0:ed:e9:35:2a:2c:13:0e:fe:83:da:10:
         02:56:f5:21:ae:be:b7:3e:e1:84:d9:12:72:66:9b:62:26:d9:
         2c:9b:70:99
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw
QjVBM0NERDAwHhcNMjUwODE5MDAwNDU1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGEzYmZhNi1mMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24PtGes+gXWCwJm7aDVHgB0I40Xy4yhnhE8OMLbK8U6jR0JAF3B1p22XukSx
1USnXC79fhCT7n265+fMbXrC/JBrxIfl8aKHvAXxhSfNHLFIGJPSEa/Yw9hDItYa
E9VzzZNutGnDYyQLDiOjKmshYWEWnAl1+iMPEFor4L8VYknyBySOD9/xam9bDiN7
LcUXRKAt0pRbwaFVCVQy/BSZ6KyUy3Hny4q/1jzfwOahlEv7y7vljSwrl+cOcHTc
Ezu2lEGBTvvj8YScbTj0gDU2EBVUELf5Fhjj5UT8xQTyFNcqfrsgZvHZaZ205VPx
5iys52LyjvxZXpp1mqlJQW1qIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDZenJAQ
O57XiFc+DblewVK4Mo+8MB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0
N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJDMTQvMjJEQUVDQzhGNDdBMTFFQjkzQ0VGRjJGQzRGOUFFMDIvNTk1Qzk1OUNG
NDdDMTFFQkIzNEFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnqtIwDQYJKoZIhvcNAQELBQADggEBAIPPRykVbp2ywYDK
+DCT8m2DSaFturN8Dph1enQxtnQQyhaD68gOQXvIR2WUuE9WKHz8TK1SQOo3vUk1
oFjNL8UxMMFLIezRHJarE18+F67CYTQD8IHJlkOTFAZ2XaKmicGBzWEXJxZpJT9G
aXEL4psjgFVvxRfk05i4+Zm3ZZmhql3so5hellpfQEc0NtLXgyEXeAOrV37+IJSm
JMhyc7Ljv7wobHbDSSGIBgysIpZK+p04W5PWlTRwl7i/Kc+rHgSldRANl29kmlIz
iFWHhmVS6BQfxKawvy4XRfpZ7MDt6TUqLBMO/oPaEAJW9SGuvrc+4YTZEnJmm2Im
2SybcJk=
-----END CERTIFICATE-----
Generated at Fri Aug 22 18:20:40 2025 by rpki-client