Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/E8C350C839FA11F0A6109C5AC4F9AE02.roa
File:                     E8C350C839FA11F0A6109C5AC4F9AE02.roa (raw, json)
Hash identifier:          pogoeA9Gn1DtYbCSaz2wC+J8V+7Rp5s9U9o3boqYro4=
Subject key identifier:   0D:86:DC:EB:4B:C5:06:D2:8B:BF:AB:AD:D9:27:93:B6:5E:A1:B9:80
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       9F
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/E8C350C839FA11F0A6109C5AC4F9AE02.roa
Signing time:             Mon 26 May 2025 06:30:26 +0000
ROA not before:           Mon 26 May 2025 06:30:26 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     138195
IP address blocks:        103.62.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 06:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: May 26 06:30:26 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68340a82-e374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:3c:68:40:80:8f:88:45:e7:3f:4e:b4:63:
                    b6:17:3a:ef:14:f4:a4:35:34:bf:5c:f0:dc:c1:6c:
                    63:3f:ae:7f:c4:de:55:af:ef:4d:bb:a3:d9:6b:a6:
                    25:14:2c:85:c8:d3:e1:15:ce:51:1c:96:00:37:48:
                    be:db:55:31:71:6d:44:47:f2:bb:e4:db:f8:49:0d:
                    35:fe:80:21:f1:ed:85:e9:ca:9f:c8:0b:bc:bc:08:
                    db:9c:f8:0f:95:0c:4d:47:21:eb:e4:89:72:59:34:
                    38:74:3e:44:08:82:03:72:4b:88:53:66:79:da:5d:
                    8b:e3:ef:91:b0:d2:83:3d:ed:c5:b1:fb:ae:dd:06:
                    18:b6:ec:7c:5d:3b:a0:5c:57:fa:79:e2:eb:98:5c:
                    06:e1:69:4d:5f:15:e5:41:5e:4a:a9:ad:14:0b:b6:
                    56:e9:22:ee:c9:11:3b:cd:57:3d:87:b6:a1:8b:ec:
                    17:1c:4a:b0:ac:9d:e8:a8:da:46:79:85:0b:ee:d8:
                    cc:53:28:a7:77:cd:47:2b:ab:10:03:04:70:c5:5f:
                    f0:7b:bd:e0:f7:cf:09:c8:c0:7e:77:82:79:41:54:
                    0e:d1:8e:79:32:ed:cd:af:0e:0a:b4:3c:64:b0:47:
                    e8:ed:37:38:06:d2:26:f5:06:cf:2b:75:80:5e:19:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:DC:EB:4B:C5:06:D2:8B:BF:AB:AD:D9:27:93:B6:5E:A1:B9:80
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/E8C350C839FA11F0A6109C5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d6:25:da:7c:93:84:01:5d:2b:2c:24:6a:f7:fe:0b:6c:67:
         e1:70:8b:7f:fd:38:44:23:e9:c8:21:50:0d:6b:0f:fb:f1:fa:
         ff:f1:04:fb:a5:f8:9b:ce:2c:a5:93:07:14:f3:81:2b:8d:05:
         58:e9:9e:41:67:1d:db:e1:8d:d8:0e:e1:5a:4b:f9:ab:b2:a4:
         03:4f:7e:00:cf:f7:96:23:0b:11:31:fc:ae:51:e6:d0:f1:b6:
         3f:c0:08:20:b6:b6:b5:ae:43:22:90:d4:b7:b3:41:5a:d6:a5:
         3d:12:0c:ff:de:3b:55:78:db:a9:8f:c1:90:ad:66:a5:22:b8:
         68:db:5b:79:62:2a:ce:c3:e9:a2:7d:e2:6c:0b:c7:e1:fa:43:
         0b:19:8a:47:8c:eb:97:48:20:54:02:6e:f4:d8:8f:24:eb:ba:
         63:73:75:ae:52:63:c5:6c:c6:26:02:df:91:be:1b:ee:87:ee:
         33:ca:67:e7:14:7d:3f:71:99:04:4b:6a:9b:81:9b:fc:9e:0f:
         45:4d:da:eb:27:d9:28:5d:9e:ef:2c:ed:ce:5a:95:85:a3:fa:
         14:03:4f:20:c4:03:84:55:fb:00:be:d8:ac:7b:d7:56:cb:e1:
         d2:a5:fc:16:0c:cc:51:23:dd:3f:62:4a:a9:8c:37:66:d4:4d:
         0d:ad:ac:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU1Q0UxMTAvBgNVBAUTKDgyOEE0N0QzQUM2RTZCMDM2MDExQzIzMzIzMTcwQTk3
MzFCQUQyMjQwHhcNMjUwNTI2MDYzMDI2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM0MGE4Mi1lMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbU8aECAj4hF5z9OtGO2FzrvFPSkNTS/XPDcwWxjP65/xN5Vr+9Nu6PZa6Yl
FCyFyNPhFc5RHJYAN0i+21UxcW1ER/K75Nv4SQ01/oAh8e2F6cqfyAu8vAjbnPgP
lQxNRyHr5IlyWTQ4dD5ECIIDckuIU2Z52l2L4++RsNKDPe3Fsfuu3QYYtux8XTug
XFf6eeLrmFwG4WlNXxXlQV5Kqa0UC7ZW6SLuyRE7zVc9h7ahi+wXHEqwrJ3oqNpG
eYUL7tjMUyind81HK6sQAwRwxV/we73g988JyMB+d4J5QVQO0Y55Mu3Nrw4KtDxk
sEfo7Tc4BtIm9QbPK3WAXhkrkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA2G3OtL
xQbSi7+rrdknk7ZeobmAMB8GA1UdIwQYMBaAFIKKR9OsbmsDYBHCMyMXCpcxutIk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTVDRS80NTFBODIzQThC
N0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3TmdFY0l6SXhjS2x6RzYw
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU1Q0UvNDUxQTgyM0E4QjdCMTFFRjgyOTAzMjdGQzRGOUFFMDIvRThDMzUwQzgz
OUZBMTFGMEE2MTA5QzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnPjcwDQYJKoZIhvcNAQELBQADggEBAKbWJdp8k4QBXSss
JGr3/gtsZ+Fwi3/9OEQj6cghUA1rD/vx+v/xBPul+JvOLKWTBxTzgSuNBVjpnkFn
HdvhjdgO4VpL+auypANPfgDP95YjCxEx/K5R5tDxtj/ACCC2trWuQyKQ1LezQVrW
pT0SDP/eO1V426mPwZCtZqUiuGjbW3liKs7D6aJ94mwLx+H6QwsZikeM65dIIFQC
bvTYjyTrumNzda5SY8VsxiYC35G+G+6H7jPKZ+cUfT9xmQRLapuBm/yeD0VN2usn
2Shdnu8s7c5alYWj+hQDTyDEA4RV+wC+2Kx711bL4dKl/BYMzFEj3T9iSqmMN2bU
TQ2trJE=
-----END CERTIFICATE-----
Generated at Mon Jun 2 06:34:56 2025 by rpki-client