Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE0007C602D111EFA283724CC4F9AE02.roa
File:                     AE0007C602D111EFA283724CC4F9AE02.roa (raw, json)
Hash identifier:          tUTxTTugL3u6tPlYjpOMZ8DBV5Zh+DBJN7q9Vm+pKIo=
Subject key identifier:   74:94:B0:B1:F6:F0:D2:DD:1F:66:E9:3B:25:1B:BA:EA:7F:54:5C:F7
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D93
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE0007C602D111EFA283724CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:55:27 +0000
ROA not before:           Thu 28 Aug 2025 14:55:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150869
IP address blocks:        103.94.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19859 (0x4d93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06ddf-0488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:86:51:11:b2:aa:5e:20:4a:be:9f:7e:a0:
                    50:fb:fe:cf:f1:66:cb:43:ff:0f:ff:74:2a:c4:7f:
                    4c:e6:6c:cd:16:97:87:7d:9f:77:fc:a8:67:99:8a:
                    a5:c6:ca:db:b1:2b:e6:d7:87:fe:39:1e:7a:24:60:
                    cc:1e:27:ac:0f:ee:ed:31:54:14:82:9d:99:af:c9:
                    bd:05:a1:da:af:79:b5:97:15:4d:31:e9:48:f0:3c:
                    80:3a:8b:cb:33:1a:b2:ef:53:90:80:9b:5c:a9:d4:
                    a2:28:02:2f:9c:f3:ba:0f:51:8b:63:f4:04:07:fe:
                    0e:0f:9f:5c:0b:0d:64:e9:63:05:59:98:a1:eb:cc:
                    d4:a6:27:c1:07:37:c6:98:52:f8:21:c6:c3:3b:1b:
                    a5:5d:36:de:61:36:3a:bc:1b:33:0f:c8:9e:8c:b9:
                    92:a3:35:dd:53:41:98:3c:0a:bb:fa:7c:2a:37:71:
                    1d:3e:88:ce:f6:8e:a7:3d:51:89:e8:49:59:f9:49:
                    db:6f:86:2b:22:d8:2f:24:13:ee:02:9c:b3:d5:a2:
                    72:2a:da:52:2a:2c:87:3d:14:83:ed:9d:f2:52:13:
                    8c:2d:9c:15:ea:b8:51:cf:9c:d5:4e:21:14:f7:19:
                    7a:8c:a1:cf:40:b2:9e:99:b8:45:a3:30:69:3f:ed:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:94:B0:B1:F6:F0:D2:DD:1F:66:E9:3B:25:1B:BA:EA:7F:54:5C:F7
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE0007C602D111EFA283724CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:41:7a:6b:a8:a3:52:b7:21:0f:6e:20:69:d2:ca:44:b5:
         e2:6d:e2:ea:d3:8a:6e:63:22:ca:b6:9a:de:6a:6d:46:30:58:
         ff:55:a0:2b:16:d6:1c:44:db:d9:12:42:b4:79:c8:99:a2:b8:
         21:49:ec:b8:45:cb:61:9c:6f:04:7c:8a:d0:cc:0c:f0:cb:c7:
         96:26:a9:17:eb:23:90:3a:b9:1c:bd:33:2b:15:8f:50:4d:bf:
         6a:10:4f:ea:4b:ea:77:19:f5:0a:6c:04:75:7a:11:23:19:b8:
         67:33:fc:9c:94:ed:81:51:79:70:29:ce:7c:fa:18:ce:f5:53:
         83:10:09:9c:f1:fc:b0:56:82:cb:dd:4d:f3:65:d6:9e:7c:d0:
         06:a8:4d:f0:64:f1:78:c3:33:7e:86:a7:e1:56:72:12:c3:31:
         59:81:07:67:52:a0:54:88:5a:ee:3a:4f:4e:04:98:23:57:9a:
         a9:dd:de:e9:65:db:f1:dd:d5:82:06:f2:f1:f2:ea:bc:94:4d:
         02:dc:a9:7e:4c:08:c3:a5:fa:1f:b1:22:5c:c5:d1:f2:b8:18:
         9d:c2:0f:b1:9b:4f:3e:1c:25:39:98:ac:e2:95:f4:cc:26:d3:
         fc:dc:05:98:9f:d7:53:39:d4:1c:69:4e:d2:3d:87:0c:c6:a8:
         3c:1b:63:d2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmRkZi0wNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkmqGURGyql4gSr6ffqBQ+/7P8WbLQ/8P/3QqxH9M5mzNFpeHfZ93/KhnmYql
xsrbsSvm14f+OR56JGDMHiesD+7tMVQUgp2Zr8m9BaHar3m1lxVNMelI8DyAOovL
Mxqy71OQgJtcqdSiKAIvnPO6D1GLY/QEB/4OD59cCw1k6WMFWZih68zUpifBBzfG
mFL4IcbDOxulXTbeYTY6vBszD8iejLmSozXdU0GYPAq7+nwqN3EdPojO9o6nPVGJ
6ElZ+Unbb4YrItgvJBPuApyz1aJyKtpSKiyHPRSD7Z3yUhOMLZwV6rhRz5zVTiEU
9xl6jKHPQLKembhFozBpP+26+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHSUsLH2
8NLdH2bpOyUbuup/VFz3MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUUwMDA3QzYw
MkQxMTFFRkEyODM3MjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnXrAwDQYJKoZIhvcNAQELBQADggEBAE4oQXprqKNStyEP
biBp0spEteJt4urTim5jIsq2mt5qbUYwWP9VoCsW1hxE29kSQrR5yJmiuCFJ7LhF
y2GcbwR8itDMDPDLx5YmqRfrI5A6uRy9MysVj1BNv2oQT+pL6ncZ9QpsBHV6ESMZ
uGcz/JyU7YFReXApznz6GM71U4MQCZzx/LBWgsvdTfNl1p580AaoTfBk8XjDM36G
p+FWchLDMVmBB2dSoFSIWu46T04EmCNXmqnd3ull2/Hd1YIG8vHy6ryUTQLcqX5M
CMOl+h+xIlzF0fK4GJ3CD7GbTz4cJTmYrOKV9Mwm0/zcBZif11M51BxpTtI9hwzG
qDwbY9I=
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:39:23 2025 by rpki-client