Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/30A0F15C844211F08D5EDC71C4F9AE02.roa
File:                     30A0F15C844211F08D5EDC71C4F9AE02.roa (raw, json)
Hash identifier:          InIaj/oLsOP7BoW0eQNCHw7tjMCZzbrG21iu4aAkWXI=
Subject key identifier:   18:93:41:9E:41:03:E6:22:6F:20:AA:72:70:96:71:8A:E7:DE:BB:D8
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       02
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/30A0F15C844211F08D5EDC71C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 19:07:07 +0000
ROA not before:           Thu 28 Aug 2025 19:07:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154173
IP address blocks:        203.174.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Aug 28 19:07:07 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b0a8da-cc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:f5:1d:aa:09:0a:eb:b2:74:b5:26:cb:96:
                    06:66:20:eb:23:f0:bc:5e:d7:aa:1a:11:a5:20:19:
                    9c:c5:67:a9:49:6f:eb:74:6e:af:7d:ef:2a:fd:ae:
                    ec:8d:fe:1b:01:b1:8c:b6:1a:d6:4e:4c:ba:b2:9c:
                    49:37:4a:d9:1a:58:95:f5:b4:8f:ac:4d:9c:f0:6f:
                    47:5b:dd:02:2e:35:9f:12:fd:49:16:88:94:87:08:
                    94:4a:76:ec:5b:27:3a:12:7e:1c:25:1e:3f:4a:ae:
                    13:24:72:09:28:e2:74:fe:86:67:f0:7d:d1:65:0b:
                    a5:72:38:20:e7:ef:84:e8:92:f3:20:e5:ae:6f:ee:
                    db:67:4b:26:03:cf:e5:3b:72:ed:90:7c:d2:d3:e4:
                    22:34:dd:50:3d:14:dc:d3:18:44:ff:39:10:fa:1a:
                    0f:44:d0:0d:69:45:4c:cc:2b:56:38:89:13:72:a3:
                    d8:ed:41:34:bc:17:f1:20:30:da:35:83:65:99:2e:
                    fb:dd:07:0f:bf:6a:70:8c:a3:77:3f:4c:76:b9:bb:
                    43:15:db:2a:02:d6:1a:8d:e7:30:93:d8:8c:75:46:
                    9e:44:7f:ac:98:2f:29:0d:48:23:58:6e:35:f4:56:
                    0c:49:84:a2:fc:e3:72:82:03:e1:a3:93:b6:71:79:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:41:9E:41:03:E6:22:6F:20:AA:72:70:96:71:8A:E7:DE:BB:D8
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/30A0F15C844211F08D5EDC71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:de:99:6d:af:9f:34:ea:9b:0e:ca:19:e0:1a:81:eb:e4:68:
         85:d8:d3:c9:af:d4:62:85:9e:72:97:66:0d:73:fc:db:c5:66:
         bc:2e:39:eb:1f:77:76:4e:23:66:a6:dd:e5:ba:fc:3f:00:11:
         cf:4d:47:a5:2f:c3:a3:0f:bf:b3:19:ae:6f:17:79:21:6b:98:
         b3:52:a7:6d:d9:02:c9:8f:39:2d:ee:12:41:78:4f:7d:83:a7:
         19:a0:b6:e4:e7:ac:0a:98:d4:35:97:1d:c1:61:83:b8:00:62:
         7e:f0:da:3d:be:71:50:94:f4:e4:2f:6d:37:1b:00:72:f1:76:
         b0:0e:a2:ca:d2:15:77:42:11:ae:97:d6:6f:6a:1f:ac:07:32:
         c8:bd:47:f7:4c:24:d6:d6:97:f2:30:1b:62:59:f6:61:90:23:
         c5:13:d5:88:3b:38:40:62:7b:b1:9b:86:23:99:77:38:88:a3:
         c4:eb:1a:47:ee:d2:39:41:1c:35:3a:72:6a:3b:0a:5f:b9:aa:
         71:81:cc:b4:d2:bc:fd:d8:81:09:25:be:f8:ff:94:65:5e:37:
         9e:90:d1:f2:72:87:4a:fb:b4:f6:b8:0c:56:e7:4b:4c:41:60:
         48:89:8d:86:8b:cc:b1:f3:2c:d9:57:60:65:35:ac:52:ec:b3:
         1b:cc:18:3d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE
OTEyODUzMzAeFw0yNTA4MjgxOTA3MDdaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4YjBhOGRhLWNjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK5vUdqgkK67J0tSbLlgZmIOsj8Lxe16oaEaUgGZzFZ6lJb+t0bq997yr9ruyN
/hsBsYy2GtZOTLqynEk3StkaWJX1tI+sTZzwb0db3QIuNZ8S/UkWiJSHCJRKduxb
JzoSfhwlHj9KrhMkcgko4nT+hmfwfdFlC6VyOCDn74TokvMg5a5v7ttnSyYDz+U7
cu2QfNLT5CI03VA9FNzTGET/ORD6Gg9E0A1pRUzMK1Y4iRNyo9jtQTS8F/EgMNo1
g2WZLvvdBw+/anCMo3c/THa5u0MV2yoC1hqN5zCT2Ix1Rp5Ef6yYLykNSCNYbjX0
VgxJhKL843KCA+Gjk7ZxeaI9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGJNBnkED
5iJvIKpycJZxiufeu9gwHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0
MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NERCRi9DMTQ1NjA1MDg0NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi8zMEEwRjE1Qzg0
NDIxMUYwOEQ1RURDNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcuuFjANBgkqhkiG9w0BAQsFAAOCAQEAmt6Zba+fNOqbDsoZ
4BqB6+RohdjTya/UYoWecpdmDXP828VmvC456x93dk4jZqbd5br8PwARz01HpS/D
ow+/sxmubxd5IWuYs1KnbdkCyY85Le4SQXhPfYOnGaC25OesCpjUNZcdwWGDuABi
fvDaPb5xUJT05C9tNxsAcvF2sA6iytIVd0IRrpfWb2ofrAcyyL1H90wk1taX8jAb
Yln2YZAjxRPViDs4QGJ7sZuGI5l3OIijxOsaR+7SOUEcNTpyajsKX7mqcYHMtNK8
/diBCSW++P+UZV43npDR8nKHSvu09rgMVudLTEFgSImNhovMsfMs2VdgZTWsUuyz
G8wYPQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 12:20:01 2025 by rpki-client