Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/46F5C9A0C91011ECAAEE7659C4F9AE02.roa
File:                     46F5C9A0C91011ECAAEE7659C4F9AE02.roa (raw, json)
Hash identifier:          iWHV48EKNd3og7iFh+loGKcT9L+j79no0sw51Epleew=
Subject key identifier:   E9:55:21:57:66:4C:E0:CB:4A:B5:CD:79:9F:C0:9C:AF:8A:BA:9F:DF
Certificate issuer:       /CN=A919AA66/serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
Certificate serial:       035E
Authority key identifier: 18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/46F5C9A0C91011ECAAEE7659C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 01:46:51 +0000
ROA not before:           Wed 03 Sep 2025 01:46:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17463
IP address blocks:        203.12.248.0/24 maxlen: 24
                          203.56.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.crl
                          rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 01:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AA66, serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
        Validity
            Not Before: Sep  3 01:46:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b79e0b-b42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:20:40:d6:fa:d4:38:0c:19:fd:51:c7:4e:
                    9c:10:a4:8a:16:03:c4:2d:d7:bf:d7:79:6f:82:d6:
                    62:98:72:1d:a6:c9:ea:a1:d5:5f:ba:6b:c6:06:ad:
                    92:8f:ab:73:c5:4d:9c:d2:df:61:10:b1:5c:55:3d:
                    80:2a:f9:3b:f8:0b:c3:a7:d7:a8:ba:04:78:4e:05:
                    1b:3d:ed:ee:ac:fc:89:ff:c8:8d:76:4f:b1:88:17:
                    c2:7c:2a:4d:4e:3f:4b:db:e1:51:bb:cd:48:a1:5c:
                    6d:b1:d7:49:27:08:18:8c:c6:17:88:40:a4:19:90:
                    03:f9:0a:cb:c1:6b:89:77:6b:d3:37:c9:4e:98:a9:
                    ce:d2:da:92:42:84:71:b3:c6:17:5c:2f:47:47:fa:
                    f8:cb:57:d2:f8:df:b3:7d:3b:34:ca:41:d8:1b:ce:
                    c4:ac:b4:8a:1f:2a:aa:b1:a3:87:db:20:fb:fc:99:
                    45:ca:3a:8a:37:3d:d5:64:f4:09:95:7d:e1:a8:d7:
                    ee:b6:d8:09:41:c8:4d:03:2c:01:d6:0b:d1:da:2e:
                    37:9a:cc:a5:95:b4:86:7e:e1:ee:9c:aa:04:ae:ba:
                    e7:d6:bc:5f:03:dc:50:2a:da:65:ea:9d:3a:64:d3:
                    69:95:59:02:a0:95:2e:23:10:b4:0d:9d:c2:34:9b:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:21:57:66:4C:E0:CB:4A:B5:CD:79:9F:C0:9C:AF:8A:BA:9F:DF
            X509v3 Authority Key Identifier:
                keyid:18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/46F5C9A0C91011ECAAEE7659C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.248.0/24
                  203.56.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:cf:54:28:e9:27:21:15:cf:89:37:bf:ed:e8:52:d9:65:a4:
         82:5e:31:1a:60:6c:89:a1:d4:84:86:7f:cc:e4:56:56:34:9d:
         a9:2e:e1:f3:af:53:25:72:73:d0:05:21:0f:3c:21:5b:82:46:
         ef:99:5c:09:c4:00:bd:a8:b4:24:84:e7:68:24:f8:f8:a6:43:
         c9:2a:cd:5a:12:5a:46:94:ea:43:31:ca:2f:00:68:fb:0d:0c:
         4d:f0:11:22:7f:f4:b4:90:ea:cd:20:b8:99:fa:a2:c1:e0:b6:
         cb:6f:43:4e:12:e3:d3:1f:57:ee:eb:dc:01:6a:29:85:1a:4b:
         1d:f1:23:3d:81:99:98:64:cd:41:14:58:63:34:82:a1:c5:09:
         9b:df:78:66:32:f9:36:11:ac:6f:4b:f8:ca:0f:cf:a4:97:0b:
         18:14:6f:c9:93:97:a2:3a:c2:1a:39:96:89:1c:04:1e:01:da:
         b2:e8:e6:e4:34:51:6d:52:94:36:a8:2b:f6:d4:e0:61:8e:29:
         05:95:79:b3:72:c0:b7:10:5c:74:35:b0:e4:20:ed:2d:8b:67:
         06:01:83:ef:fd:fc:5a:b9:5c:5e:b8:e7:e8:35:84:ff:c9:4f:
         d0:13:05:5e:e1:fe:d1:6f:21:2a:e8:78:05:85:65:3b:5d:fc:
         07:71:64:f6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFBNjYxMTAvBgNVBAUTKDE4Mjc5RTE4OEEyRUJBNUZGMkEzQTQxMEFEM0ExREU0
RDUxRjBGRTUwHhcNMjUwOTAzMDE0NjUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3OWUwYi1iNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxvMgQNb61DgMGf1Rx06cEKSKFgPELde/13lvgtZimHIdpsnqodVfumvGBq2S
j6tzxU2c0t9hELFcVT2AKvk7+AvDp9eougR4TgUbPe3urPyJ/8iNdk+xiBfCfCpN
Tj9L2+FRu81IoVxtsddJJwgYjMYXiECkGZAD+QrLwWuJd2vTN8lOmKnO0tqSQoRx
s8YXXC9HR/r4y1fS+N+zfTs0ykHYG87ErLSKHyqqsaOH2yD7/JlFyjqKNz3VZPQJ
lX3hqNfuttgJQchNAywB1gvR2i43msyllbSGfuHunKoErrrn1rxfA9xQKtpl6p06
ZNNplVkCoJUuIxC0DZ3CNJsw8QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOlVIVdm
TODLSrXNeZ/AnK+Kup/fMB8GA1UdIwQYMBaAFBgnnhiKLrpf8qOkEK06HeTVHw/l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUE2Ni81MzI1NzAwMkM5
MEQxMUVDODZCMDNBNTZDNEY5QUUwMi9HQ2VlR0lvdXVsX3lvNlFRclRvZDVOVWZE
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dDZWVHSW91dWxfeW82UVFyVG9kNU5VZkQtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUFBNjYvNTMyNTcwMDJDOTBEMTFFQzg2QjAzQTU2QzRGOUFFMDIvNDZGNUM5QTBD
OTEwMTFFQ0FBRUU3NjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLDPgDBADLOFwwDQYJKoZIhvcNAQELBQADggEBAK/PVCjp
JyEVz4k3v+3oUtllpIJeMRpgbImh1ISGf8zkVlY0naku4fOvUyVyc9AFIQ88IVuC
Ru+ZXAnEAL2otCSE52gk+PimQ8kqzVoSWkaU6kMxyi8AaPsNDE3wESJ/9LSQ6s0g
uJn6osHgtstvQ04S49MfV+7r3AFqKYUaSx3xIz2BmZhkzUEUWGM0gqHFCZvfeGYy
+TYRrG9L+MoPz6SXCxgUb8mTl6I6who5lokcBB4B2rLo5uQ0UW1SlDaoK/bU4GGO
KQWVebNywLcQXHQ1sOQg7S2LZwYBg+/9/Fq5XF645+g1hP/JT9ATBV7h/tFvISro
eAWFZTtd/AdxZPY=
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:18:35 2025 by rpki-client