Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
File:                     C1C6BCEE96CB11EF8176AD43C4F9AE02.roa (raw, json)
Hash identifier:          jWxJZeWEq2vnP0tl9xsoP8KITN3/hJGVwZiw/esto84=
Subject key identifier:   46:84:42:91:44:B1:1D:7D:C9:54:1C:CF:8F:32:FF:3C:AD:2A:50:9C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D0D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:37 +0000
ROA not before:           Thu 28 Aug 2025 14:53:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135963
IP address blocks:        103.194.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19725 (0x4d0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:37 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d70-9c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:98:19:75:76:f9:f7:f3:e2:84:25:ab:ca:
                    9e:8a:f6:c3:3d:b1:56:6a:4d:f5:9a:1f:7e:72:2d:
                    70:c7:47:80:48:da:a4:4c:1a:5a:9b:b0:4e:ec:c2:
                    92:1b:78:9d:fb:70:07:5e:0a:f5:85:0f:1e:03:38:
                    48:9e:99:47:74:9e:b7:ef:af:98:2e:e2:94:0a:92:
                    75:72:a0:0c:0a:80:06:c6:3a:43:22:c3:95:ff:18:
                    45:a4:dc:94:bd:50:76:df:67:6e:81:1e:01:98:c0:
                    05:e2:8a:18:da:55:69:3e:0a:68:8f:b0:4b:8e:d5:
                    2d:0c:87:6c:76:3c:a6:2f:f9:fb:06:23:ff:1b:de:
                    05:4f:54:da:4e:b6:e8:4e:a8:e1:39:01:ed:6b:25:
                    23:ed:47:69:82:9c:f3:fd:10:6a:1b:db:73:70:0e:
                    c9:29:69:01:fd:00:f5:cc:e1:d9:51:27:86:29:8f:
                    8f:ef:7b:42:c9:02:d4:ba:aa:a2:02:a7:7c:21:47:
                    1f:00:1b:95:1e:59:55:3c:2f:cd:2f:6e:12:b3:2e:
                    20:31:5e:f1:81:9a:fc:c8:c0:2b:11:02:17:dd:ee:
                    bb:5d:1c:d7:f8:93:48:5c:5f:1d:d6:61:d2:fd:91:
                    8f:51:02:0c:0b:a9:68:c2:b2:1f:97:e3:6c:10:d0:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:42:91:44:B1:1D:7D:C9:54:1C:CF:8F:32:FF:3C:AD:2A:50:9C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:41:02:7f:00:a8:56:e0:11:ff:88:55:2d:35:a3:8e:f8:c5:
         8e:d1:1b:de:54:58:70:76:31:48:ea:24:1b:dd:d1:7b:62:bf:
         6d:62:55:61:0d:62:f8:72:94:b6:82:e7:4a:2e:d0:38:88:88:
         d8:67:a2:be:09:7f:5c:ca:3e:ea:c7:4e:a5:0e:1e:b1:13:d3:
         c1:d2:d3:8d:c8:12:f3:ed:84:4c:cc:c6:4d:eb:04:52:c7:22:
         f4:df:a2:9c:80:ad:30:5e:b4:ef:82:18:f9:70:c2:42:3b:74:
         de:ec:43:52:58:1b:7d:4d:bc:4c:16:0b:5a:cb:bd:77:ce:24:
         14:a7:ad:22:be:b4:a7:d5:06:51:4d:3b:2c:d7:b7:c5:84:21:
         12:73:8c:51:73:d2:19:76:8a:d7:3a:bb:06:e4:b0:84:53:25:
         45:8a:ab:2b:bf:7f:00:9a:f0:9d:1f:de:f8:48:50:5d:f1:75:
         7d:7d:1f:ad:21:83:8c:9c:a0:3d:30:8d:aa:9e:7e:f1:c6:e9:
         05:e1:54:e2:6f:7c:e0:35:84:41:ab:66:b2:d0:14:32:ec:b3:
         ef:f4:36:10:d5:1d:c8:83:d9:e1:a7:87:dc:03:7e:b1:26:5c:
         b7:04:1f:6f:69:5c:69:48:e2:60:bb:2b:c7:59:ee:62:d6:02:
         a5:16:ba:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmQ3MC05YzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudCYGXV2+ffz4oQlq8qeivbDPbFWak31mh9+ci1wx0eASNqkTBpam7BO7MKS
G3id+3AHXgr1hQ8eAzhInplHdJ6376+YLuKUCpJ1cqAMCoAGxjpDIsOV/xhFpNyU
vVB232dugR4BmMAF4ooY2lVpPgpoj7BLjtUtDIdsdjymL/n7BiP/G94FT1TaTrbo
TqjhOQHtayUj7Udpgpzz/RBqG9tzcA7JKWkB/QD1zOHZUSeGKY+P73tCyQLUuqqi
Aqd8IUcfABuVHllVPC/NL24Ssy4gMV7xgZr8yMArEQIX3e67XRzX+JNIXF8d1mHS
/ZGPUQIMC6lowrIfl+NsENAXmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEaEQpFE
sR19yVQcz48y/zytKlCcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzFDNkJDRUU5
NkNCMTFFRjgxNzZBRDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnwrwwDQYJKoZIhvcNAQELBQADggEBAANBAn8AqFbgEf+I
VS01o474xY7RG95UWHB2MUjqJBvd0Xtiv21iVWENYvhylLaC50ou0DiIiNhnor4J
f1zKPurHTqUOHrET08HS043IEvPthEzMxk3rBFLHIvTfopyArTBetO+CGPlwwkI7
dN7sQ1JYG31NvEwWC1rLvXfOJBSnrSK+tKfVBlFNOyzXt8WEIRJzjFFz0hl2itc6
uwbksIRTJUWKqyu/fwCa8J0f3vhIUF3xdX19H60hg4ycoD0wjaqefvHG6QXhVOJv
fOA1hEGrZrLQFDLss+/0NhDVHciD2eGnh9wDfrEmXLcEH29pXGlI4mC7K8dZ7mLW
AqUWutw=
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:44:54 2025 by rpki-client