Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/7D4E6EDCC3A511E78971975FC4F9AE02.roa
File:                     7D4E6EDCC3A511E78971975FC4F9AE02.roa (raw, json)
Hash identifier:          b8auFL+OGTstQHyewNvl2CDT74Oau9yNM7VkRWGDuEg=
Subject key identifier:   2C:32:05:11:AD:BE:A5:87:2C:E1:A8:A1:C8:EB:A2:A7:EE:52:26:B5
Certificate issuer:       /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial:       1801
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/7D4E6EDCC3A511E78971975FC4F9AE02.roa
Signing time:             Wed 20 Aug 2025 16:54:58 +0000
ROA not before:           Wed 20 Aug 2025 16:54:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136726
IP address blocks:        103.94.184.0/24 maxlen: 24
                          2001:df1:7f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
                          rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 16:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6145 (0x1801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
        Validity
            Not Before: Aug 20 16:54:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a5fde2-5900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:cb:ed:47:f6:a5:4b:34:1a:6b:f2:80:08:
                    35:ae:b5:c1:67:ae:80:2f:c0:7c:01:08:fa:ec:e6:
                    16:39:ae:e7:e3:2f:12:39:82:3c:58:6a:fc:dd:23:
                    5f:fc:55:30:0b:e2:4e:b6:c6:0b:84:48:0b:45:55:
                    21:ec:3d:42:49:3e:7d:38:47:b9:e9:65:79:25:56:
                    8a:af:ea:cf:02:3d:b9:59:02:e0:51:a0:ef:13:80:
                    4c:57:d8:5e:3f:8d:54:38:43:fe:db:12:e3:01:b0:
                    f8:23:f5:b8:e3:d3:4e:8b:b8:d4:3f:dd:16:66:15:
                    91:07:e0:3b:45:6d:bb:d0:dd:dc:64:40:f0:fb:9c:
                    0a:80:d9:e0:fb:a6:24:ea:d1:08:15:a1:63:a9:73:
                    d0:9b:36:29:84:64:e2:9e:77:17:dc:1d:c7:c4:ff:
                    51:cd:11:87:e8:4c:bf:eb:8c:72:14:89:d7:81:3d:
                    9f:76:bb:a7:07:5f:37:b8:46:8f:9e:4d:ec:7e:3a:
                    14:c6:ba:a8:73:07:cc:a3:2a:6d:ec:5f:4c:81:59:
                    9f:c6:4f:9a:2e:18:a9:f5:11:7a:b5:e5:20:57:2a:
                    dc:df:1a:23:be:d2:a7:5d:42:eb:75:09:37:63:59:
                    d3:d5:4e:ca:20:f4:27:55:bf:83:82:1a:89:28:9e:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:32:05:11:AD:BE:A5:87:2C:E1:A8:A1:C8:EB:A2:A7:EE:52:26:B5
            X509v3 Authority Key Identifier:
                keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/7D4E6EDCC3A511E78971975FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.184.0/24
                IPv6:
                  2001:df1:7f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:fc:a1:7d:4a:1e:8e:1e:d7:9e:3a:7d:78:4c:87:b6:d8:
         33:5b:f2:1d:25:7f:2e:b8:f6:8c:95:d1:ea:d3:15:e0:5a:22:
         54:02:51:5d:9e:f9:d0:a5:03:95:a6:26:be:07:21:ce:c6:1b:
         33:75:64:20:36:b9:b4:96:ff:d9:0a:6d:f7:c9:12:e5:44:b1:
         de:16:e4:9c:0a:72:17:09:a4:2e:c6:6e:01:86:ed:cc:4a:84:
         c2:63:80:12:b7:24:ee:d2:b8:cd:4a:50:06:84:47:c5:f8:42:
         01:05:68:5d:96:f4:cd:00:b9:0c:cf:00:ba:54:34:9c:f0:9a:
         27:fb:2a:0b:50:3a:e2:96:4a:93:b7:20:20:d4:18:d6:ee:73:
         95:62:ae:bc:cf:20:3f:29:2f:58:64:6f:67:a8:d2:89:a1:0b:
         fd:4b:6c:ab:e1:e3:58:75:4e:50:72:74:da:50:89:ac:de:f2:
         0a:33:52:56:93:f6:2b:62:b6:76:37:1d:32:8e:82:68:51:c8:
         ab:5c:83:45:c4:fb:02:56:73:4c:fe:50:27:da:88:93:fc:b1:
         cd:2e:f4:99:d2:63:20:4e:8e:06:4a:e4:d2:55:c1:ed:c7:82:
         e7:cd:d2:74:14:6a:a8:8b:73:d8:13:1f:3d:bc:b0:3d:64:ed:
         ce:79:ca:57
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICGAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw
Qjg0RDBDOEEwHhcNMjUwODIwMTY1NDU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE1ZmRlMi01OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLHL7Uf2pUs0GmvygAg1rrXBZ66AL8B8AQj67OYWOa7n4y8SOYI8WGr83SNf
/FUwC+JOtsYLhEgLRVUh7D1CST59OEe56WV5JVaKr+rPAj25WQLgUaDvE4BMV9he
P41UOEP+2xLjAbD4I/W449NOi7jUP90WZhWRB+A7RW270N3cZEDw+5wKgNng+6Yk
6tEIFaFjqXPQmzYphGTinncX3B3HxP9RzRGH6Ey/64xyFInXgT2fdrunB183uEaP
nk3sfjoUxrqocwfMoypt7F9MgVmfxk+aLhip9RF6teUgVyrc3xojvtKnXULrdQk3
Y1nT1U7KIPQnVb+DghqJKJ553wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCwyBRGt
vqWHLOGoocjroqfuUia1MB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz
QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REYzQ0EvRUY0RjkzN0NDM0E0MTFFNzk3QkJGMTVFQzRGOUFFMDIvN0Q0RTZFREND
M0E1MTFFNzg5NzE5NzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnXrgwDwQCAAIwCQMHACABDfF/ADANBgkqhkiG9w0BAQsF
AAOCAQEApZv8oX1KHo4e1546fXhMh7bYM1vyHSV/Lrj2jJXR6tMV4FoiVAJRXZ75
0KUDlaYmvgchzsYbM3VkIDa5tJb/2Qpt98kS5USx3hbknApyFwmkLsZuAYbtzEqE
wmOAErck7tK4zUpQBoRHxfhCAQVoXZb0zQC5DM8AulQ0nPCaJ/sqC1A64pZKk7cg
INQY1u5zlWKuvM8gPykvWGRvZ6jSiaEL/Utsq+HjWHVOUHJ02lCJrN7yCjNSVpP2
K2K2djcdMo6CaFHIq1yDRcT7AlZzTP5QJ9qIk/yxzS70mdJjIE6OBkrk0lXB7ceC
583SdBRqqItz2BMfPbywPWTtznnKVw==
-----END CERTIFICATE-----
Generated at Fri Aug 22 18:21:52 2025 by rpki-client