Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7545D7688D6C11F0AB7BFE70C4F9AE02.roa
File:                     7545D7688D6C11F0AB7BFE70C4F9AE02.roa (raw, json)
Hash identifier:          Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=
Subject key identifier:   C2:D7:5C:25:88:5A:CE:B6:43:E8:D7:CC:4B:A3:1B:2B:CD:9B:0D:FB
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D14
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7545D7688D6C11F0AB7BFE70C4F9AE02.roa
Signing time:             Tue 09 Sep 2025 11:02:21 +0000
ROA not before:           Tue 09 Sep 2025 11:02:21 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        103.137.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 11:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3348 (0xd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Sep  9 11:02:21 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68c0093d-60ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:66:c9:a0:38:d9:62:df:06:24:81:ad:4d:
                    af:d4:98:82:aa:6a:7c:a6:7f:86:ee:87:45:c5:99:
                    f6:3d:1f:4e:c9:35:8a:cc:6f:f2:31:e6:f3:28:ad:
                    32:90:5f:b0:80:d2:90:64:be:32:09:ef:2d:2f:e7:
                    b1:46:e3:c2:ca:ff:ae:61:26:d3:7e:df:20:8f:77:
                    4b:55:57:40:67:2e:30:ef:2b:89:96:b7:ff:ef:1c:
                    74:4e:70:0d:05:00:36:d7:a0:ad:4f:e3:db:24:f4:
                    f6:44:8f:0c:b6:74:c6:94:11:ac:79:c5:89:f4:30:
                    25:54:d7:c3:9c:49:06:8a:95:e1:e2:a0:6d:e9:c7:
                    f8:28:3a:a4:e3:6d:24:77:03:40:6a:f0:28:10:3b:
                    8b:50:e2:04:0a:33:e5:f5:c7:52:50:b3:dd:86:11:
                    f3:fe:a8:a2:54:48:75:f1:3d:c3:49:6b:49:96:88:
                    38:4e:9d:66:c6:f6:52:67:c0:26:8c:2b:5c:cf:fd:
                    37:c9:6d:ba:45:ad:1e:f6:38:69:e8:4a:6b:04:ac:
                    40:f9:17:ac:d5:00:62:51:89:d2:49:03:86:47:e5:
                    7d:79:6d:cd:5e:ae:36:c5:03:c6:54:78:6e:b9:62:
                    da:d2:1f:2b:2e:da:98:07:71:de:d7:95:1b:dc:cd:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D7:5C:25:88:5A:CE:B6:43:E8:D7:CC:4B:A3:1B:2B:CD:9B:0D:FB
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7545D7688D6C11F0AB7BFE70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:95:a8:ab:42:34:6c:fa:81:92:45:5a:71:59:c9:6a:b7:
         5c:a0:5a:fd:43:84:af:78:96:cd:54:ae:b3:fb:f2:82:e4:38:
         3c:5b:fe:24:cb:41:08:c0:ea:10:0a:07:46:fc:6d:96:88:56:
         5e:ba:16:c3:91:45:71:43:bf:0d:bc:f9:63:52:59:2e:52:06:
         f0:01:40:90:a1:79:92:80:8a:0d:76:2c:5b:b0:43:fb:a0:10:
         95:fd:a2:96:49:fb:a5:62:44:e3:ca:96:d1:cb:1f:5f:3a:0c:
         f8:8f:d8:ee:c1:bf:0e:f3:09:87:2a:d6:da:72:26:41:72:a6:
         bd:8f:dd:94:ad:ac:85:cf:7c:98:8b:62:57:ef:01:ae:56:c0:
         ba:25:02:0b:a4:07:8a:c6:4e:51:fb:2b:76:05:6c:ca:11:b5:
         31:63:16:d4:a0:ed:98:0b:b9:a7:66:77:17:f5:2a:09:95:87:
         e3:48:dc:a7:9d:f1:0b:a1:1f:94:ca:b7:3d:a5:85:9d:5f:df:
         11:b0:3f:51:10:3a:f5:4a:47:0a:d7:f2:47:0a:f5:59:4f:07:
         3d:8f:e5:69:24:11:76:fa:4d:37:42:85:16:8e:74:9e:31:8d:
         ad:5c:75:5f:29:ef:12:b2:cc:90:e6:c0:f7:8b:11:88:9e:f2:
         f6:a3:1a:52
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx
MEI1MEFDNTcwHhcNMjUwOTA5MTEwMjIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OGMwMDkzZC02MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppRmyaA42WLfBiSBrU2v1JiCqmp8pn+G7odFxZn2PR9OyTWKzG/yMebzKK0y
kF+wgNKQZL4yCe8tL+exRuPCyv+uYSbTft8gj3dLVVdAZy4w7yuJlrf/7xx0TnAN
BQA216CtT+PbJPT2RI8MtnTGlBGsecWJ9DAlVNfDnEkGipXh4qBt6cf4KDqk420k
dwNAavAoEDuLUOIECjPl9cdSULPdhhHz/qiiVEh18T3DSWtJlog4Tp1mxvZSZ8Am
jCtcz/03yW26Ra0e9jhp6EprBKxA+Res1QBiUYnSSQOGR+V9eW3NXq42xQPGVHhu
uWLa0h8rLtqYB3He15Ub3M03DQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMLXXCWI
Ws62Q+jXzEujGyvNmw37MB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2
ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU0MTgvMEMwQjgwMEVGNjgyMTFFOUE4OTk2MTQ2QzRGOUFFMDIvNzU0NUQ3Njg4
RDZDMTFGMEFCN0JGRTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniUgwDQYJKoZIhvcNAQELBQADggEBAJFflairQjRs+oGS
RVpxWclqt1ygWv1DhK94ls1UrrP78oLkODxb/iTLQQjA6hAKB0b8bZaIVl66FsOR
RXFDvw28+WNSWS5SBvABQJCheZKAig12LFuwQ/ugEJX9opZJ+6ViROPKltHLH186
DPiP2O7Bvw7zCYcq1tpyJkFypr2P3ZStrIXPfJiLYlfvAa5WwLolAgukB4rGTlH7
K3YFbMoRtTFjFtSg7ZgLuadmdxf1KgmVh+NI3Ked8QuhH5TKtz2lhZ1f3xGwP1EQ
OvVKRwrX8kcK9VlPBz2P5WkkEXb6TTdChRaOdJ4xja1cdV8p7xKyzJDmwPeLEYie
8vajGlI=
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:05:21 2025 by rpki-client