Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
File:                     C310EE5AACD311ED84BAA06EC4F9AE02.roa (raw, json)
Hash identifier:          puxNQ3IQMgK+455LW/i47TSp2iaIUiKVoUSQH0z/5bw=
Subject key identifier:   A2:88:29:99:E6:E3:D9:54:F5:63:2A:35:8F:BA:58:79:AF:AE:45:98
Certificate issuer:       /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial:       01EF
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
Signing time:             Thu 25 Sep 2025 01:17:59 +0000
ROA not before:           Thu 25 Sep 2025 01:17:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136744
IP address blocks:        103.141.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
        Validity
            Not Before: Sep 25 01:17:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d49847-430e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:bf:06:4f:97:e8:82:99:df:36:50:fb:dd:
                    e5:ae:db:d6:6b:56:41:90:ff:7a:e5:8d:3b:2b:90:
                    2d:09:d5:a8:06:95:66:54:67:0c:90:d9:c8:b0:f1:
                    2e:5f:e8:f4:8f:d5:cc:56:91:36:d4:9f:3d:a5:06:
                    5a:73:9b:d0:c5:0e:11:bc:06:6d:c7:14:a5:6d:b0:
                    16:48:93:b3:d2:89:30:99:32:86:bd:79:9e:b5:d2:
                    fe:61:b2:84:64:cc:cf:80:b3:f4:fb:53:ae:52:ea:
                    14:6c:c7:a1:e4:1f:ed:41:41:54:f9:a7:98:82:4c:
                    30:9f:eb:8a:6d:60:16:e7:0a:1d:e3:8b:62:f3:18:
                    3e:a2:26:ee:84:70:2e:39:be:5c:06:59:97:bc:1d:
                    b4:c4:92:29:47:29:c4:07:9e:b6:a5:f6:8c:13:37:
                    bb:54:b0:e7:08:14:35:d4:de:dd:71:48:7e:a4:a0:
                    8f:32:94:c1:53:df:10:78:40:f4:c9:70:10:6b:10:
                    24:84:7b:ba:1d:5e:6d:8c:6d:51:8b:e5:cd:2a:d5:
                    e5:08:f7:29:e7:98:10:9b:80:f8:cf:f4:c3:ac:93:
                    87:0f:1e:2b:d4:1b:3c:23:e6:3f:37:a1:af:80:91:
                    5e:c9:93:23:0a:2b:e9:f2:7e:44:6c:f9:c4:12:ba:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:88:29:99:E6:E3:D9:54:F5:63:2A:35:8F:BA:58:79:AF:AE:45:98
            X509v3 Authority Key Identifier:
                keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:84:c4:c6:bc:0a:09:70:0b:bd:96:9b:38:ac:10:11:c9:25:
         dc:e0:71:1b:20:cb:0d:58:ec:29:5b:e6:a7:15:80:16:11:3c:
         cb:4f:06:af:2a:a1:37:fd:5d:14:85:4f:4a:87:fe:c3:0a:a0:
         26:f2:cb:11:e6:cd:28:49:d8:24:81:d6:a9:10:7b:8b:d9:fa:
         da:1b:18:26:a8:98:6b:83:53:6a:9e:61:32:38:82:67:36:35:
         bc:2c:d1:b2:b9:1b:7e:ee:85:a2:16:64:99:89:0f:2a:98:b0:
         3a:80:3a:8d:c4:37:24:36:f9:79:7f:78:f8:62:2b:b7:f3:25:
         a2:22:3d:6f:81:12:3c:c1:f6:44:45:64:3c:11:12:4a:d5:03:
         40:d0:2a:a6:e0:cd:ea:ed:ef:d3:ef:8d:25:97:6d:43:ea:9c:
         8d:46:af:eb:75:92:df:83:e7:f0:b3:5d:59:e2:db:07:fe:df:
         33:99:4c:77:53:95:f0:68:fb:2a:d2:a2:a9:e4:f3:90:84:9d:
         69:94:53:4d:45:4b:d2:07:b8:65:d4:fe:72:3b:a4:a4:4c:bb:
         79:ac:19:1d:9e:9a:5f:ec:22:c3:bb:6a:d2:43:72:d6:8a:92:
         57:03:d0:d1:05:ff:3c:62:ba:b4:64:ec:d1:a5:96:bd:24:16:
         67:f3:fe:14
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx
ODA0RTM1RTYwHhcNMjUwOTI1MDExNzU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQ0OTg0Ny00MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstO/Bk+X6IKZ3zZQ+93lrtvWa1ZBkP965Y07K5AtCdWoBpVmVGcMkNnIsPEu
X+j0j9XMVpE21J89pQZac5vQxQ4RvAZtxxSlbbAWSJOz0okwmTKGvXmetdL+YbKE
ZMzPgLP0+1OuUuoUbMeh5B/tQUFU+aeYgkwwn+uKbWAW5wod44ti8xg+oibuhHAu
Ob5cBlmXvB20xJIpRynEB562pfaMEze7VLDnCBQ11N7dcUh+pKCPMpTBU98QeED0
yXAQaxAkhHu6HV5tjG1Ri+XNKtXlCPcp55gQm4D4z/TDrJOHDx4r1Bs8I+Y/N6Gv
gJFeyZMjCivp8n5EbPnEErocpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKKIKZnm
49lU9WMqNY+6WHmvrkWYMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB
NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM0RkEvQjg5QkNCRjRCQTZBMTFFQzgyQUMwNzg3QzRGOUFFMDIvQzMxMEVFNUFB
Q0QzMTFFRDg0QkFBMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjeAwDQYJKoZIhvcNAQELBQADggEBAJWExMa8CglwC72W
mzisEBHJJdzgcRsgyw1Y7Clb5qcVgBYRPMtPBq8qoTf9XRSFT0qH/sMKoCbyyxHm
zShJ2CSB1qkQe4vZ+tobGCaomGuDU2qeYTI4gmc2Nbws0bK5G37uhaIWZJmJDyqY
sDqAOo3ENyQ2+Xl/ePhiK7fzJaIiPW+BEjzB9kRFZDwREkrVA0DQKqbgzert79Pv
jSWXbUPqnI1Gr+t1kt+D5/CzXVni2wf+3zOZTHdTlfBo+yrSoqnk85CEnWmUU01F
S9IHuGXU/nI7pKRMu3msGR2eml/sIsO7atJDctaKklcD0NEF/zxiurRk7NGllr0k
Fmfz/hQ=
-----END CERTIFICATE-----
Generated at Thu Oct 16 06:10:37 2025 by rpki-client