Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/AD1469EC7A3911ECB5639D41C4F9AE02.roa
File:                     AD1469EC7A3911ECB5639D41C4F9AE02.roa (raw, json)
Hash identifier:          M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=
Subject key identifier:   45:EA:33:68:FF:41:A5:A4:81:90:51:2B:A9:B1:DA:9C:B5:8D:5E:E0
Certificate issuer:       /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial:       053B
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/AD1469EC7A3911ECB5639D41C4F9AE02.roa
Signing time:             Tue 20 May 2025 23:35:15 +0000
ROA not before:           Tue 20 May 2025 23:35:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139263
IP address blocks:        103.166.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
                          rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 23:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
        Validity
            Not Before: May 20 23:35:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682d11b3-6393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:f6:80:38:ef:ee:7b:7e:a4:18:44:99:a9:
                    a2:78:8f:31:dd:92:9e:ba:20:a7:68:57:c2:de:f4:
                    bd:8d:c4:34:ca:b3:33:43:bc:6c:ad:ef:bf:98:70:
                    ce:f9:74:14:0d:c3:8d:07:93:00:3a:ad:d2:40:c8:
                    62:3b:bd:f1:17:42:b5:0e:ac:29:1f:1f:50:09:ee:
                    ac:6b:5c:85:f8:50:5d:e8:20:bd:25:7c:cc:1f:5a:
                    76:a3:63:d5:d8:e6:09:e5:8c:f4:38:5f:14:1e:1a:
                    21:8a:aa:01:38:1c:02:5f:ce:d7:b8:09:af:3e:3a:
                    f0:d2:71:50:cc:1c:3a:eb:38:80:1f:43:62:52:f1:
                    b8:05:73:66:d5:3d:e5:7b:47:53:1a:90:9d:7a:7d:
                    3d:85:31:d7:e8:95:7f:7c:16:79:3d:0f:e9:89:24:
                    f7:1d:6e:0c:0b:2c:fd:00:47:60:1b:8f:05:63:21:
                    1e:e9:17:ac:bd:1c:4d:44:06:07:ba:0f:c6:cb:53:
                    f5:ab:8b:79:18:a8:0d:fd:35:34:7d:49:b2:31:ed:
                    1c:1a:34:aa:65:9a:b2:bf:5e:ce:bd:83:91:5a:88:
                    20:3a:6d:47:55:89:97:f4:2d:03:cf:2f:7f:a9:ec:
                    8d:91:d4:0b:06:f7:4b:61:90:52:1e:6c:38:5f:8f:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EA:33:68:FF:41:A5:A4:81:90:51:2B:A9:B1:DA:9C:B5:8D:5E:E0
            X509v3 Authority Key Identifier:
                keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/AD1469EC7A3911ECB5639D41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:db:6d:60:d3:c6:59:d5:fe:31:9b:ec:22:ed:64:1f:98:
         dc:a9:8c:fd:21:9c:d6:53:f2:01:1c:9f:10:7c:a3:a9:54:35:
         03:f1:4e:19:09:e1:b1:0b:a1:08:29:02:be:26:18:5d:e7:69:
         d1:76:8a:6d:6a:87:48:58:4a:5d:4e:7b:90:03:d5:61:10:df:
         e5:e1:74:02:ab:98:dc:6c:4d:8b:8c:64:47:09:38:a7:8b:ec:
         9b:e9:25:b3:3d:a5:f5:f7:bf:0c:17:60:4d:e8:82:80:23:3e:
         33:5f:55:58:16:9e:8e:07:db:54:5d:f4:4f:3f:eb:02:14:2b:
         53:7f:98:1c:ba:1e:81:62:cc:d9:19:12:ec:cc:83:12:76:ae:
         f3:d7:92:53:78:8e:54:20:36:4b:42:02:2d:35:94:63:ec:ed:
         6a:b9:1f:c8:b6:dc:f4:34:e3:ba:c3:57:13:2a:5d:f3:cc:19:
         8f:5c:22:ff:37:f4:72:d2:a6:3a:6a:99:0d:b9:f2:5d:64:da:
         b3:5f:df:bc:40:17:57:85:f2:14:11:79:e3:bf:72:62:2b:c7:
         38:d8:28:8b:2e:40:15:01:49:92:0c:2a:46:d6:ff:55:36:4e:
         f3:6c:65:73:7c:e4:39:fc:ed:14:68:e3:01:b7:2c:42:ad:69:
         91:80:b9:1d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD
NURCNEUwQUQwHhcNMjUwNTIwMjMzNTE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJkMTFiMy02MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2An2gDjv7nt+pBhEmamieI8x3ZKeuiCnaFfC3vS9jcQ0yrMzQ7xsre+/mHDO
+XQUDcONB5MAOq3SQMhiO73xF0K1DqwpHx9QCe6sa1yF+FBd6CC9JXzMH1p2o2PV
2OYJ5Yz0OF8UHhohiqoBOBwCX87XuAmvPjrw0nFQzBw66ziAH0NiUvG4BXNm1T3l
e0dTGpCden09hTHX6JV/fBZ5PQ/piST3HW4MCyz9AEdgG48FYyEe6ResvRxNRAYH
ug/Gy1P1q4t5GKgN/TU0fUmyMe0cGjSqZZqyv17OvYORWoggOm1HVYmX9C0Dzy9/
qeyNkdQLBvdLYZBSHmw4X4+smQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEXqM2j/
QaWkgZBRK6mx2py1jV7gMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5
OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkyREMvQzYwNTc4QTBGOTk4MTFFQjhBRjQ5QzFEQzRGOUFFMDIvQUQxNDY5RUM3
QTM5MTFFQ0I1NjM5RDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpkYwDQYJKoZIhvcNAQELBQADggEBAICo221g08ZZ1f4x
m+wi7WQfmNypjP0hnNZT8gEcnxB8o6lUNQPxThkJ4bELoQgpAr4mGF3nadF2im1q
h0hYSl1Oe5AD1WEQ3+XhdAKrmNxsTYuMZEcJOKeL7JvpJbM9pfX3vwwXYE3ogoAj
PjNfVVgWno4H21Rd9E8/6wIUK1N/mBy6HoFizNkZEuzMgxJ2rvPXklN4jlQgNktC
Ai01lGPs7Wq5H8i23PQ047rDVxMqXfPMGY9cIv839HLSpjpqmQ258l1k2rNf37xA
F1eF8hQReeO/cmIrxzjYKIsuQBUBSZIMKkbW/1U2TvNsZXN85Dn87RRo4wG3LEKt
aZGAuR0=
-----END CERTIFICATE-----
Generated at Mon Jun 2 04:52:06 2025 by rpki-client