Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/193D7FC8AA9C11F0B3AB850AC4F9AE02.roa
File:                     193D7FC8AA9C11F0B3AB850AC4F9AE02.roa (raw, json)
Hash identifier:          KMfcryp9UI5zogksKAQd+l1AvH17ljGQYzbF2GWa9Ks=
Subject key identifier:   10:F1:31:BC:33:FE:34:2A:D6:D7:4F:B8:56:0D:C3:03:37:79:19:B5
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36DD
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/193D7FC8AA9C11F0B3AB850AC4F9AE02.roa
Signing time:             Thu 16 Oct 2025 14:26:27 +0000
ROA not before:           Thu 16 Oct 2025 14:26:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        175.29.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14045 (0x36dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct 16 14:26:27 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f10092-f70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:39:4a:e7:79:42:33:1a:d7:05:bf:f6:98:
                    d8:5c:60:4b:91:c5:20:b8:ee:15:b1:a7:ba:9c:ae:
                    8d:81:ee:05:54:81:6c:d0:33:28:6e:95:b8:95:fe:
                    2f:65:7b:8f:ab:d4:d8:e5:31:74:b0:10:59:dd:9d:
                    cf:1c:0d:6f:44:77:e9:b0:96:04:32:20:dd:fa:a9:
                    b1:dc:38:92:68:f6:24:e7:e3:76:42:14:d2:31:c8:
                    20:e4:4f:86:7f:63:f2:26:45:2c:12:0b:87:56:96:
                    a4:bf:62:d3:18:69:e2:10:4b:aa:17:35:b2:c5:0f:
                    5d:ff:e8:81:71:02:7c:96:98:f7:40:2c:71:33:4d:
                    f9:19:9e:c1:8c:92:3b:17:40:76:46:00:38:0d:66:
                    81:5f:bc:cd:ba:44:bd:09:d0:5f:53:53:14:77:75:
                    75:37:9a:18:77:dc:c7:6f:cb:8d:53:2c:50:0f:d5:
                    7a:8d:45:1a:68:8e:83:c6:d3:01:f5:e8:f2:36:36:
                    e9:58:db:bd:7b:78:ba:46:83:d2:10:7b:46:ca:d2:
                    e6:ba:df:1a:2b:56:cb:ca:50:22:cb:74:92:5b:f2:
                    3e:c2:8f:bc:cc:ea:15:66:58:80:8a:ba:e7:2d:63:
                    57:cd:4b:d4:a6:9a:fc:72:b8:c5:5d:8b:be:4b:93:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F1:31:BC:33:FE:34:2A:D6:D7:4F:B8:56:0D:C3:03:37:79:19:B5
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/193D7FC8AA9C11F0B3AB850AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:f6:58:df:bf:5c:55:e0:09:80:23:ef:52:8b:5f:5f:68:2a:
         2f:bb:d8:14:75:6c:0e:98:3c:b2:d6:d2:ba:3f:e4:27:b9:75:
         4c:2a:97:97:52:fc:c8:c2:ff:c4:e5:da:de:39:9c:20:14:bc:
         96:4c:c9:30:13:63:7e:90:b4:fe:41:32:69:3e:7d:2e:ac:05:
         1e:dd:c0:9d:96:9d:e5:88:a3:f2:b2:66:c7:17:6d:ab:68:eb:
         90:08:5c:48:61:43:74:95:d2:bb:5d:e9:ab:e9:04:2c:9c:4a:
         0c:05:1b:2c:91:68:69:76:63:d8:d5:61:ae:2e:2d:e1:27:01:
         c0:56:62:c4:98:73:c3:27:f6:92:4e:36:c8:46:ec:84:ec:26:
         09:79:6d:e1:1c:84:99:19:31:c4:b3:7a:f4:ae:9a:ef:d3:ce:
         56:14:b1:f2:36:92:02:38:3f:30:f4:2f:09:df:f3:27:1d:ce:
         a4:60:0e:f4:a8:71:20:d8:67:e0:78:45:3e:57:9a:cd:21:a2:
         ac:c9:e6:31:b1:dd:8e:8e:c2:87:83:f7:7a:a1:ea:2d:51:2b:
         b2:14:e7:35:5d:d3:3c:56:db:79:ff:5b:44:16:14:55:d6:0e:
         84:c2:37:85:45:92:de:37:1f:a8:d5:da:a5:cb:1a:6d:b7:eb:
         fa:31:fa:78
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUxMDE2MTQyNjI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGYxMDA5Mi1mNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIg5Sud5QjMa1wW/9pjYXGBLkcUguO4Vsae6nK6Nge4FVIFs0DMobpW4lf4v
ZXuPq9TY5TF0sBBZ3Z3PHA1vRHfpsJYEMiDd+qmx3DiSaPYk5+N2QhTSMcgg5E+G
f2PyJkUsEguHVpakv2LTGGniEEuqFzWyxQ9d/+iBcQJ8lpj3QCxxM035GZ7BjJI7
F0B2RgA4DWaBX7zNukS9CdBfU1MUd3V1N5oYd9zHb8uNUyxQD9V6jUUaaI6DxtMB
9ejyNjbpWNu9e3i6RoPSEHtGytLmut8aK1bLylAiy3SSW/I+wo+8zOoVZliAirrn
LWNXzUvUppr8crjFXYu+S5Og8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBDxMbwz
/jQq1tdPuFYNwwM3eRm1MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvMTkzRDdGQzhB
QTlDMTFGMEIzQUI4NTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKvHYgwDQYJKoZIhvcNAQELBQADggEBALD2WN+/XFXgCYAj
71KLX19oKi+72BR1bA6YPLLW0ro/5Ce5dUwql5dS/MjC/8Tl2t45nCAUvJZMyTAT
Y36QtP5BMmk+fS6sBR7dwJ2WneWIo/KyZscXbato65AIXEhhQ3SV0rtd6avpBCyc
SgwFGyyRaGl2Y9jVYa4uLeEnAcBWYsSYc8Mn9pJONshG7ITsJgl5beEchJkZMcSz
evSumu/TzlYUsfI2kgI4PzD0Lwnf8ycdzqRgDvSocSDYZ+B4RT5Xms0hoqzJ5jGx
3Y6OwoeD93qh6i1RK7IU5zVd0zxW23n/W0QWFFXWDoTCN4VFkt43H6jV2qXLGm23
6/ox+ng=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:48 2025 by rpki-client