Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
File:                     827329BE232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=
Subject key identifier:   68:EC:B5:74:5E:18:0E:E3:93:10:DF:9E:4B:4A:A1:2C:5D:77:11:15
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       07A4
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
Signing time:             Sat 30 Aug 2025 22:13:51 +0000
ROA not before:           Sat 30 Aug 2025 22:13:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137969
IP address blocks:        103.153.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 30 22:13:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b3779f-bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8b:21:22:c8:bf:5f:f2:b3:80:da:80:17:6a:
                    c6:bb:c8:c1:ab:23:a1:b2:3f:0f:a2:04:c6:ca:a5:
                    40:67:5b:f9:26:ae:8c:45:b9:54:db:cb:b5:5d:7c:
                    31:97:b8:f8:7f:4e:55:16:c5:55:14:49:a5:40:03:
                    49:36:be:2f:97:76:14:09:de:7d:3d:92:56:d9:cd:
                    90:1d:91:a0:1f:80:ff:c7:0a:72:67:72:db:34:b5:
                    d6:99:21:2f:a3:90:ac:db:4f:03:d1:4b:cd:f5:a4:
                    d8:14:43:88:55:49:a7:cd:eb:aa:79:f5:df:87:93:
                    e4:f1:97:5e:2f:01:1f:e1:56:86:67:c9:42:a2:89:
                    0b:a2:a9:07:d3:84:a3:7a:02:b4:ae:06:f0:3c:2c:
                    df:44:45:1f:bb:cb:15:65:e4:b4:38:29:83:93:11:
                    b4:81:c1:af:a5:74:16:e1:a6:84:72:f3:42:f0:a5:
                    ad:3f:c2:aa:aa:d3:29:61:12:c9:7b:fe:3a:9a:d6:
                    d9:d5:81:4f:9a:6a:55:d0:ef:e6:9e:35:25:fd:f3:
                    e4:0c:1a:c1:af:95:f2:f2:a8:81:0b:e0:30:16:60:
                    07:9c:0a:81:c9:2e:d2:48:c0:5b:ad:9b:67:6f:24:
                    32:09:1d:c4:12:c0:19:4c:5b:d6:29:be:ed:d9:2a:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EC:B5:74:5E:18:0E:E3:93:10:DF:9E:4B:4A:A1:2C:5D:77:11:15
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/827329BE232B11EBB2348B23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:26:c4:f2:b5:12:95:2d:0a:d5:35:2a:5e:0b:57:48:d2:a9:
         b4:29:cc:44:bf:da:ba:40:0b:1e:b7:46:0e:aa:1a:85:39:2d:
         0e:de:90:7d:25:b7:68:30:bb:2a:6e:4a:bb:04:f6:29:dd:e2:
         a3:83:96:ef:a4:cc:a2:28:ec:2c:fa:54:4c:6a:43:8c:cf:3a:
         37:95:24:ec:a9:8c:4b:42:9b:41:68:6c:64:12:3b:af:fc:26:
         39:b7:54:4e:11:12:55:a9:ea:7a:3b:7a:0e:aa:27:bb:0e:e6:
         ab:cc:e0:61:60:60:d0:40:c4:44:03:3a:5a:22:dc:13:a6:89:
         e6:ab:94:db:8e:39:ec:3d:bd:eb:05:bd:63:aa:9b:3a:eb:cf:
         7b:36:fd:4a:92:74:4a:2a:ef:dc:a0:bb:f3:71:37:ca:68:e6:
         5a:80:09:f7:0d:4f:6b:0c:6b:18:81:96:d1:78:28:db:61:a5:
         9b:cc:b0:c1:dc:96:da:59:9b:ad:6f:f6:e4:18:e4:f1:0f:c8:
         7d:08:86:2a:49:47:b6:76:9c:39:1a:19:f3:e8:96:7c:48:c4:
         1e:29:83:f2:db:f5:f7:ac:73:7b:60:14:8a:a2:7a:35:50:af:
         18:37:ae:ea:cd:24:43:f0:ec:15:8d:38:ec:d7:b9:a6:bb:9f:
         6a:1e:c7:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjUwODMwMjIxMzUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIzNzc5Zi1iZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8IshIsi/X/KzgNqAF2rGu8jBqyOhsj8PogTGyqVAZ1v5Jq6MRblU28u1XXwx
l7j4f05VFsVVFEmlQANJNr4vl3YUCd59PZJW2c2QHZGgH4D/xwpyZ3LbNLXWmSEv
o5Cs208D0UvN9aTYFEOIVUmnzeuqefXfh5Pk8ZdeLwEf4VaGZ8lCookLoqkH04Sj
egK0rgbwPCzfREUfu8sVZeS0OCmDkxG0gcGvpXQW4aaEcvNC8KWtP8KqqtMpYRLJ
e/46mtbZ1YFPmmpV0O/mnjUl/fPkDBrBr5Xy8qiBC+AwFmAHnAqByS7SSMBbrZtn
byQyCR3EEsAZTFvWKb7t2SodRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGjstXRe
GA7jkxDfnktKoSxddxEVMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODI3MzI5QkUy
MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAEgmxPK1EpUtCtU1
Kl4LV0jSqbQpzES/2rpACx63Rg6qGoU5LQ7ekH0lt2gwuypuSrsE9ind4qODlu+k
zKIo7Cz6VExqQ4zPOjeVJOypjEtCm0FobGQSO6/8Jjm3VE4RElWp6no7eg6qJ7sO
5qvM4GFgYNBAxEQDOloi3BOmiearlNuOOew9vesFvWOqmzrrz3s2/UqSdEoq79yg
u/NxN8po5lqACfcNT2sMaxiBltF4KNthpZvMsMHcltpZm61v9uQY5PEPyH0IhipJ
R7Z2nDkaGfPolnxIxB4pg/Lb9fesc3tgFIqiejVQrxg3rurNJEPw7BWNOOzXuaa7
n2oex6o=
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:36:49 2025 by rpki-client