Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DAD50CA0F0A411ED80D2CB35C4F9AE02.roa
File:                     DAD50CA0F0A411ED80D2CB35C4F9AE02.roa (raw, json)
Hash identifier:          xZZ/u5bF6sFULTKf5JJKQFpgYM5CxcIGqqESOhf1pgI=
Subject key identifier:   D7:9F:44:07:8E:C2:15:C0:67:A2:B6:8B:AE:91:5D:CB:FA:D1:A2:49
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4E3C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DAD50CA0F0A411ED80D2CB35C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:57:51 +0000
ROA not before:           Thu 28 Aug 2025 14:57:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63734
IP address blocks:        103.199.16.0/22 maxlen: 22
                          2404:fbc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20028 (0x4e3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e6e-c500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:6f:5d:76:5a:52:89:15:a2:9a:d7:92:14:
                    bd:76:c3:8f:42:ab:dd:29:9a:8a:60:c4:27:0b:03:
                    b8:90:3e:5c:2a:3e:1c:9a:91:f8:ec:6d:2b:f4:ed:
                    f4:f1:b5:18:76:af:b0:49:58:c0:3a:a6:a7:d3:b9:
                    1c:ec:d6:e3:54:98:5a:2d:55:f9:9f:ff:68:d6:5f:
                    17:21:8c:5e:16:a9:49:15:1c:2b:74:4a:c5:01:b7:
                    8b:ac:c0:d1:a8:bf:9d:a5:6a:8f:e2:2b:aa:e8:c7:
                    0a:1f:0f:84:0a:55:6d:1e:03:a8:79:2d:cd:7d:7a:
                    84:b9:ef:d4:d5:5c:04:c5:14:18:22:aa:e5:d0:44:
                    f7:ea:b3:43:0a:5d:68:c1:db:38:90:dd:24:59:5c:
                    d8:b2:76:ef:32:91:5d:bc:61:09:ee:18:e9:03:15:
                    54:a0:1b:b9:2c:83:d0:31:84:3c:1f:34:4f:5b:88:
                    ba:46:0a:6a:60:5b:bc:93:9f:f3:6a:fb:84:89:c5:
                    10:0b:d2:b3:f2:46:55:ed:7a:8b:d6:ff:76:89:9d:
                    2f:94:e8:b3:32:a5:ab:02:63:a3:b1:05:d7:e9:e1:
                    fe:de:66:87:29:11:b1:c4:5a:4d:0b:02:a5:d9:32:
                    18:df:53:17:bb:52:68:77:b3:4e:a0:50:a6:86:33:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:44:07:8E:C2:15:C0:67:A2:B6:8B:AE:91:5D:CB:FA:D1:A2:49
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DAD50CA0F0A411ED80D2CB35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.16.0/22
                IPv6:
                  2404:fbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:a2:bd:6e:1e:b6:93:1a:36:7c:42:53:07:1a:ad:e2:70:
         4d:98:18:a8:5d:fc:d7:0b:28:32:96:59:0c:8c:c5:a3:46:5f:
         76:bc:c8:ca:f0:73:51:40:cf:10:4c:a7:47:1b:1b:c7:9e:5f:
         c1:5d:b9:97:29:ca:ad:72:6e:95:b0:ca:e7:52:ac:28:b5:7b:
         83:35:b8:3a:2d:5a:0e:03:cd:70:54:82:5b:4e:9a:1c:24:b9:
         d0:2c:0f:0b:52:c6:79:43:e5:2b:9a:43:a7:43:c0:65:d7:ad:
         99:4b:26:23:cd:98:bc:08:fc:35:1f:8d:ab:3a:ae:63:7f:d1:
         fb:14:f4:85:66:e8:fc:25:c6:61:07:c3:df:f4:43:3e:65:86:
         77:49:b8:71:4e:47:e9:4f:f6:f9:f7:e1:79:72:c2:15:40:3a:
         67:5b:1a:fb:d7:5e:18:42:d5:a0:08:c1:f1:be:80:5e:cb:3e:
         47:5a:85:7b:e2:28:84:2c:ce:1e:6e:96:90:36:4d:84:89:b3:
         7e:2b:a5:cb:7d:fe:4b:33:65:ac:ad:dd:c4:f2:d7:66:ef:96:
         ca:5d:70:c2:5e:ed:f6:41:c7:de:e0:50:9b:0d:11:fc:20:32:
         b3:72:c4:54:dc:45:7b:6a:de:ad:28:96:b3:a5:cc:bb:bb:79:
         bf:8c:18:84
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICTjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmU2ZS1jNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNFvXXZaUokVoprXkhS9dsOPQqvdKZqKYMQnCwO4kD5cKj4cmpH47G0r9O30
8bUYdq+wSVjAOqan07kc7NbjVJhaLVX5n/9o1l8XIYxeFqlJFRwrdErFAbeLrMDR
qL+dpWqP4iuq6McKHw+EClVtHgOoeS3NfXqEue/U1VwExRQYIqrl0ET36rNDCl1o
wds4kN0kWVzYsnbvMpFdvGEJ7hjpAxVUoBu5LIPQMYQ8HzRPW4i6RgpqYFu8k5/z
avuEicUQC9Kz8kZV7XqL1v92iZ0vlOizMqWrAmOjsQXX6eH+3maHKRGxxFpNCwKl
2TIY31MXu1Jod7NOoFCmhjOPnQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNefRAeO
whXAZ6K2i66RXcv60aJJMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvREFENTBDQTBG
MEE0MTFFRDgwRDJDQjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJnxxAwDwQCAAIwCQMHACQE+8AAADANBgkqhkiG9w0BAQsF
AAOCAQEAZMyivW4etpMaNnxCUwcareJwTZgYqF381wsoMpZZDIzFo0ZfdrzIyvBz
UUDPEEynRxsbx55fwV25lynKrXJulbDK51KsKLV7gzW4Oi1aDgPNcFSCW06aHCS5
0CwPC1LGeUPlK5pDp0PAZdetmUsmI82YvAj8NR+NqzquY3/R+xT0hWbo/CXGYQfD
3/RDPmWGd0m4cU5H6U/2+ffheXLCFUA6Z1sa+9deGELVoAjB8b6AXss+R1qFe+Io
hCzOHm6WkDZNhImzfiuly33+SzNlrK3dxPLXZu+Wyl1wwl7t9kHH3uBQmw0R/CAy
s3LEVNxFe2rerSiWs6XMu7t5v4wYhA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:44:54 2025 by rpki-client