Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/87C69A4E8DEE11F0A7999742C4F9AE02.roa
File:                     87C69A4E8DEE11F0A7999742C4F9AE02.roa (raw, json)
Hash identifier:          b6lHz5iQ8DWD8DP+PNyLt6Ex1qQ3PXl8EDulrD8ec68=
Subject key identifier:   4E:65:71:75:B5:FE:4E:F6:6E:25:9F:D9:DB:D2:30:CF:7D:2A:F1:74
Certificate issuer:       /CN=A91978F7/serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
Certificate serial:       02
Authority key identifier: 62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/87C69A4E8DEE11F0A7999742C4F9AE02.roa
Signing time:             Wed 10 Sep 2025 02:33:27 +0000
ROA not before:           Wed 10 Sep 2025 02:33:27 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     147030
IP address blocks:        103.173.58.0/23 maxlen: 23
                          2407:e2c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl
                          rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978F7, serialNumber=62155BB0059C4DC861536CB052EC755BAB166C3F
        Validity
            Not Before: Sep 10 02:33:27 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68c0e377-121d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:d7:4d:9e:1d:38:00:8f:d4:36:f0:76:71:
                    22:02:f8:f8:29:f8:84:c1:2d:b3:3a:d2:66:da:41:
                    77:fa:68:e4:bb:48:12:5f:e2:6c:db:48:9b:b4:cf:
                    f3:bd:f5:51:32:c3:87:27:27:94:24:02:4c:93:0b:
                    27:cd:46:2e:d3:da:9b:67:a2:27:c7:cb:05:e0:3d:
                    2b:34:e4:b0:63:f7:5d:ce:6e:a4:4b:1e:52:2f:8c:
                    5e:e7:20:15:99:bc:27:60:02:2b:b6:1f:2b:c4:b6:
                    ef:70:aa:e5:be:6b:92:30:0c:16:83:35:16:b3:04:
                    3f:b2:9e:d2:17:54:38:61:4a:9e:e4:a2:f5:06:1e:
                    b4:02:95:7a:6d:30:37:f2:3f:5d:07:f0:b2:1d:8a:
                    29:31:e6:3c:8a:56:81:bb:19:67:30:4c:56:29:bf:
                    33:d9:e2:86:e1:68:e2:07:fd:7d:ed:f5:9f:a2:e6:
                    b0:75:0c:f8:fb:7a:c7:14:28:f2:1e:b1:af:18:b4:
                    f1:c8:06:63:fd:c2:c6:d4:cc:82:4d:f5:4d:92:9a:
                    ab:34:bb:e6:44:58:f7:a3:02:82:7e:30:2c:a3:94:
                    48:e5:dc:00:5c:40:0e:34:40:3e:05:06:ae:a3:5e:
                    2a:3e:5e:64:41:e7:94:43:4e:20:1a:01:7a:3e:d0:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:65:71:75:B5:FE:4E:F6:6E:25:9F:D9:DB:D2:30:CF:7D:2A:F1:74
            X509v3 Authority Key Identifier:
                keyid:62:15:5B:B0:05:9C:4D:C8:61:53:6C:B0:52:EC:75:5B:AB:16:6C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/YhVbsAWcTchhU2ywUux1W6sWbD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhVbsAWcTchhU2ywUux1W6sWbD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978F7/362247068DEE11F087426542C4F9AE02/87C69A4E8DEE11F0A7999742C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.58.0/23
                IPv6:
                  2407:e2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:20:a9:c9:1c:2f:d3:1d:ee:59:5a:38:67:e8:8f:d5:c2:5a:
         c8:b3:2c:36:92:4d:d0:1a:b9:d0:a9:48:80:1b:a7:91:0b:cb:
         49:e1:30:66:6b:b2:ce:5b:ea:89:3a:f8:f6:14:a4:40:3a:14:
         d6:0d:e5:46:f0:5a:83:e9:46:26:7c:9f:0d:63:e0:f2:f2:01:
         1e:22:0f:8e:4a:37:16:34:67:f8:52:a7:84:2a:18:ea:2e:b4:
         e7:a9:b6:18:e0:9d:5a:62:2c:26:cc:4d:1c:4a:2d:3c:a4:19:
         e7:bd:40:d4:d8:28:dc:3f:64:2f:94:f2:55:b2:8e:15:55:85:
         10:e9:cb:0a:bc:da:72:d0:b2:d9:70:fe:17:1d:f1:07:10:a8:
         76:14:24:1b:a0:c8:5e:b7:a5:df:89:eb:56:02:c0:31:35:34:
         40:fa:6b:a9:b1:a6:d8:d5:6b:13:91:15:02:05:74:ac:a8:dc:
         a1:d4:df:40:21:c2:e6:56:d8:b8:3f:cf:8c:99:a3:9e:53:15:
         df:2e:61:62:de:1f:f6:a1:05:af:d3:7e:67:bd:66:9b:6f:6f:
         4b:d9:f6:ca:2e:21:db:50:3b:cb:50:48:ba:e2:0c:dd:8d:1e:
         87:d0:fd:17:84:85:3d:51:67:f8:72:6c:3e:c2:37:a3:aa:da:
         fc:65:e5:61
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NzhGNzExMC8GA1UEBRMoNjIxNTVCQjAwNTlDNERDODYxNTM2Q0IwNTJFQzc1NUJB
QjE2NkMzRjAeFw0yNTA5MTAwMjMzMjdaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4YzBlMzc3LTEyMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZW9dNnh04AI/UNvB2cSIC+Pgp+ITBLbM60mbaQXf6aOS7SBJf4mzbSJu0z/O9
9VEyw4cnJ5QkAkyTCyfNRi7T2ptnoifHywXgPSs05LBj913ObqRLHlIvjF7nIBWZ
vCdgAiu2HyvEtu9wquW+a5IwDBaDNRazBD+yntIXVDhhSp7kovUGHrQClXptMDfy
P10H8LIdiikx5jyKVoG7GWcwTFYpvzPZ4obhaOIH/X3t9Z+i5rB1DPj7escUKPIe
sa8YtPHIBmP9wsbUzIJN9U2Smqs0u+ZEWPejAoJ+MCyjlEjl3ABcQA40QD4FBq6j
Xio+XmRB55RDTiAaAXo+0MfjAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUTmVxdbX+
TvZuJZ/Z29Iwz30q8XQwHwYDVR0jBBgwFoAUYhVbsAWcTchhU2ywUux1W6sWbD8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3OEY3LzM2MjI0NzA2OERF
RTExRjA4NzQyNjU0MkM0RjlBRTAyL1loVmJzQVdjVGNoaFUyeXdVdXgxVzZzV2JE
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWWhWYnNBV2NUY2hoVTJ5d1V1eDFXNnNXYkQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzhGNy8zNjIyNDcwNjhERUUxMUYwODc0MjY1NDJDNEY5QUUwMi84N0M2OUE0RThE
RUUxMUYwQTc5OTk3NDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWetOjANBAIAAjAHAwUAJAfiwDANBgkqhkiG9w0BAQsFAAOC
AQEAQCCpyRwv0x3uWVo4Z+iP1cJayLMsNpJN0Bq50KlIgBunkQvLSeEwZmuyzlvq
iTr49hSkQDoU1g3lRvBag+lGJnyfDWPg8vIBHiIPjko3FjRn+FKnhCoY6i6056m2
GOCdWmIsJsxNHEotPKQZ571A1Ngo3D9kL5TyVbKOFVWFEOnLCrzactCy2XD+Fx3x
BxCodhQkG6DIXrel34nrVgLAMTU0QPprqbGm2NVrE5EVAgV0rKjcodTfQCHC5lbY
uD/PjJmjnlMV3y5hYt4f9qEFr9N+Z71mm29vS9n2yi4h21A7y1BIuuIM3Y0eh9D9
F4SFPVFn+HJsPsI3o6ra/GXlYQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:42:07 2025 by rpki-client