Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
File:                     9C9784905E4411EFA84E2085C4F9AE02.roa (raw, json)
Hash identifier:          aKj0/foTO6qeh7gH7zQVckJ1XRosaqB+KSGP1SC4u2U=
Subject key identifier:   CC:A4:63:96:B6:6E:5E:B5:77:13:4A:02:51:5B:BC:70:45:95:4D:E1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CEE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:10 +0000
ROA not before:           Thu 28 Aug 2025 14:53:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135911
IP address blocks:        103.89.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19694 (0x4cee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d56-5950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:55:6f:80:53:6d:3d:91:06:68:c7:76:01:
                    22:ae:17:71:b8:16:14:77:99:ea:56:6c:16:f7:57:
                    38:af:db:7c:d9:fa:71:67:42:24:49:1b:56:a2:4f:
                    6b:cb:72:9d:f1:ae:12:b9:65:9d:b3:26:0f:e2:69:
                    02:20:f2:51:0c:c7:fd:7b:a3:a1:0f:17:d4:58:64:
                    de:d3:61:2b:b3:0c:e3:aa:98:3d:c6:dd:4d:ed:40:
                    90:32:be:54:e9:30:14:75:9c:0d:e3:74:12:ac:81:
                    6f:16:d2:2a:25:09:da:26:92:32:56:ca:7a:c0:83:
                    f2:ed:1e:d4:14:27:b5:1d:ec:85:21:0b:73:e3:3e:
                    5f:89:0a:26:bd:0a:70:b7:21:34:19:31:70:7d:28:
                    97:ac:4f:81:76:23:f1:c5:58:8c:a6:4b:04:f4:28:
                    d0:46:fc:49:99:ff:aa:2f:5c:9d:60:78:d9:03:46:
                    a0:39:6e:97:7e:3f:43:f4:ea:37:9c:8f:f7:bc:20:
                    00:3b:b0:00:55:3b:f0:e8:fe:bc:b4:a8:42:60:3b:
                    0e:4a:e7:41:5d:66:93:66:e4:47:7e:e0:84:94:64:
                    9f:c5:1e:88:da:58:4f:61:b5:fe:fe:ee:43:c6:62:
                    cc:1a:16:74:14:0c:c6:e7:e1:16:70:2a:f9:bf:a9:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:63:96:B6:6E:5E:B5:77:13:4A:02:51:5B:BC:70:45:95:4D:E1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:bf:11:73:47:a1:ae:50:ce:dc:15:2e:8e:cc:12:54:bc:
         87:40:70:96:cd:cd:66:84:36:13:2e:a3:69:e0:2c:ab:aa:db:
         d6:72:13:2e:f5:71:6e:87:f2:43:53:4e:e2:fc:0d:85:4d:69:
         71:5c:3f:59:2c:45:d4:f6:cb:2e:cc:d9:91:bf:52:e8:e7:ae:
         05:ba:67:f9:a5:a8:04:e1:ee:0f:fe:93:f5:46:1e:0a:b9:e9:
         94:08:b0:75:72:bf:13:c5:6b:74:f9:15:79:3a:a0:f7:d8:9f:
         99:26:57:62:fe:d5:f3:f0:7c:3c:6f:99:24:11:8f:4e:8c:9d:
         f4:36:ea:47:14:0a:73:13:8c:86:a6:51:96:52:c8:fc:22:ca:
         6d:9f:d5:17:5b:0c:11:07:dc:71:fa:5f:f2:25:14:df:26:b3:
         46:97:0c:28:92:b4:ae:cb:d3:e1:ba:08:58:a5:ca:d2:48:e8:
         ed:9d:52:37:89:3f:34:6d:1d:15:9d:32:e5:d7:a4:b4:0a:bf:
         e7:40:e3:6a:a6:34:13:35:91:28:b5:6a:df:36:8d:73:9f:53:
         7e:e6:56:52:00:f7:a3:72:80:ef:58:c6:fd:42:f1:0c:fa:1c:
         5a:85:d7:c4:9f:55:9d:03:6a:3b:8c:6f:be:48:d3:dd:57:97:
         88:bc:96:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmQ1Ni01OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA29RVb4BTbT2RBmjHdgEirhdxuBYUd5nqVmwW91c4r9t82fpxZ0IkSRtWok9r
y3Kd8a4SuWWdsyYP4mkCIPJRDMf9e6OhDxfUWGTe02Erswzjqpg9xt1N7UCQMr5U
6TAUdZwN43QSrIFvFtIqJQnaJpIyVsp6wIPy7R7UFCe1HeyFIQtz4z5fiQomvQpw
tyE0GTFwfSiXrE+BdiPxxViMpksE9CjQRvxJmf+qL1ydYHjZA0agOW6Xfj9D9Oo3
nI/3vCAAO7AAVTvw6P68tKhCYDsOSudBXWaTZuRHfuCElGSfxR6I2lhPYbX+/u5D
xmLMGhZ0FAzG5+EWcCr5v6mKfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMykY5a2
bl61dxNKAlFbvHBFlU3hMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUM5Nzg0OTA1
RTQ0MTFFRkE4NEUyMDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnWXgwDQYJKoZIhvcNAQELBQADggEBADBvvxFzR6GuUM7c
FS6OzBJUvIdAcJbNzWaENhMuo2ngLKuq29ZyEy71cW6H8kNTTuL8DYVNaXFcP1ks
RdT2yy7M2ZG/UujnrgW6Z/mlqATh7g/+k/VGHgq56ZQIsHVyvxPFa3T5FXk6oPfY
n5kmV2L+1fPwfDxvmSQRj06MnfQ26kcUCnMTjIamUZZSyPwiym2f1RdbDBEH3HH6
X/IlFN8ms0aXDCiStK7L0+G6CFilytJI6O2dUjeJPzRtHRWdMuXXpLQKv+dA42qm
NBM1kSi1at82jXOfU37mVlIA96NygO9Yxv1C8Qz6HFqF18SfVZ0DajuMb75I091X
l4i8lmc=
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:39:25 2025 by rpki-client