Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/9D6E545AA84B11F0B4DF3885C4F9AE02.roa
File:                     9D6E545AA84B11F0B4DF3885C4F9AE02.roa (raw, json)
Hash identifier:          LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=
Subject key identifier:   09:FB:94:4A:3A:E2:21:25:C7:31:31:F3:CE:F9:1E:CF:84:32:13:E0
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       01B9
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/9D6E545AA84B11F0B4DF3885C4F9AE02.roa
Signing time:             Mon 13 Oct 2025 15:45:17 +0000
ROA not before:           Mon 13 Oct 2025 15:45:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     329611
IP address blocks:        103.112.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Oct 13 15:45:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ed1e8c-6366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:1c:70:94:86:73:f5:b3:8a:29:eb:99:3b:
                    5e:d5:82:93:07:91:1c:7c:9c:c4:e5:77:54:5d:8f:
                    d8:15:d5:0f:39:b1:89:13:77:5e:6a:0f:cb:a5:68:
                    aa:0d:59:a0:ff:5c:2f:b5:ff:01:5e:fc:e5:be:60:
                    99:b9:f8:19:bb:6e:ce:b8:4e:39:fd:1e:21:ba:f2:
                    af:a0:bc:8f:c3:87:f0:a3:51:10:9d:66:ef:80:54:
                    3c:b2:29:81:8e:92:b0:58:1b:c2:5b:48:63:cc:a7:
                    18:cd:1b:a4:ea:c1:a6:9e:9e:ac:ce:26:77:55:42:
                    b8:96:de:fc:92:ad:f8:e1:db:96:e8:5a:a7:42:3d:
                    80:30:2d:96:c3:08:32:ab:20:e1:b4:3d:81:bf:ec:
                    49:a6:ec:aa:cb:66:f2:05:18:b9:39:28:ab:16:dd:
                    92:99:a9:58:5a:c1:78:85:eb:18:f7:d6:80:6f:6e:
                    15:98:2c:a6:ef:22:31:49:70:24:ae:30:f7:1f:4d:
                    1e:44:ed:91:bb:19:81:41:48:e3:ea:ed:f1:c5:55:
                    54:a5:56:33:0b:c9:1f:cf:ad:bd:bb:36:f9:4b:b5:
                    2d:1e:51:4a:ca:53:d3:b6:3c:60:00:12:b2:c4:3b:
                    91:73:f5:e6:9f:e2:df:74:c8:1d:a2:89:e1:99:3b:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:94:4A:3A:E2:21:25:C7:31:31:F3:CE:F9:1E:CF:84:32:13:E0
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/9D6E545AA84B11F0B4DF3885C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:64:a5:28:76:53:29:41:db:cf:9a:0b:19:8d:b8:14:55:
         4e:32:64:6d:13:d5:45:cf:87:ad:5b:ee:57:c2:68:b7:f9:f3:
         e2:3e:8d:29:83:29:f6:80:ff:b3:76:29:d9:8c:bd:0e:86:1d:
         19:6e:aa:93:28:fe:7c:e5:bd:e5:51:72:1e:48:89:31:5e:8d:
         5b:1a:ea:20:ed:d6:08:27:e2:56:22:2b:62:14:8d:19:48:9a:
         3a:15:87:62:aa:77:66:5a:4e:aa:97:9e:6c:b1:e0:3a:12:ec:
         82:0b:af:ba:61:5e:d2:28:e4:ae:31:47:d0:39:75:33:5c:f7:
         f1:c1:4f:22:93:c2:39:b9:79:77:b1:f7:f3:33:2f:3d:11:26:
         74:25:c7:e9:9e:fa:5c:bd:f4:96:b4:a4:63:77:d4:d3:4e:b5:
         7a:71:03:52:7e:3b:57:65:10:0c:83:75:7a:ec:af:3e:a0:47:
         43:b5:6a:1d:8f:54:c5:f8:64:9a:31:e5:41:3b:9c:7b:b0:32:
         82:eb:d3:51:c1:8a:5a:bd:29:95:5c:c4:f7:97:7a:1a:fe:ba:
         6f:79:98:8d:36:01:22:39:cb:c2:53:fa:ce:95:72:db:1a:76:
         2d:21:fc:5d:c3:60:8d:8b:6e:9d:45:00:8e:5b:8d:78:cf:76:
         6f:27:16:1a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3
RDREQUE4OTAwHhcNMjUxMDEzMTU0NTE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGVkMWU4Yy02MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzq0ccJSGc/WziinrmTte1YKTB5EcfJzE5XdUXY/YFdUPObGJE3deag/LpWiq
DVmg/1wvtf8BXvzlvmCZufgZu27OuE45/R4huvKvoLyPw4fwo1EQnWbvgFQ8simB
jpKwWBvCW0hjzKcYzRuk6sGmnp6sziZ3VUK4lt78kq344duW6FqnQj2AMC2Wwwgy
qyDhtD2Bv+xJpuyqy2byBRi5OSirFt2SmalYWsF4hesY99aAb24VmCym7yIxSXAk
rjD3H00eRO2RuxmBQUjj6u3xxVVUpVYzC8kfz629uzb5S7UtHlFKylPTtjxgABKy
xDuRc/Xmn+LfdMgdoonhmTsIoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAn7lEo6
4iElxzEx8875Hs+EMhPgMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3
NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTdCOTQvQ0M3NDFCQjYzNzcwMTFFRThEQzhCQjM0QzRGOUFFMDIvOUQ2RTU0NUFB
ODRCMTFGMEI0REYzODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJncGAwDQYJKoZIhvcNAQELBQADggEBAKINZKUodlMpQdvP
mgsZjbgUVU4yZG0T1UXPh61b7lfCaLf58+I+jSmDKfaA/7N2KdmMvQ6GHRluqpMo
/nzlveVRch5IiTFejVsa6iDt1ggn4lYiK2IUjRlImjoVh2Kqd2ZaTqqXnmyx4DoS
7IILr7phXtIo5K4xR9A5dTNc9/HBTyKTwjm5eXex9/MzLz0RJnQlx+me+ly99Ja0
pGN31NNOtXpxA1J+O1dlEAyDdXrsrz6gR0O1ah2PVMX4ZJox5UE7nHuwMoLr01HB
ilq9KZVcxPeXehr+um95mI02ASI5y8JT+s6Vctsadi0h/F3DYI2Lbp1FAI5bjXjP
dm8nFho=
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:18:19 2025 by rpki-client