Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/7549B6D2744A11EDA8F69509C4F9AE02.roa
File:                     7549B6D2744A11EDA8F69509C4F9AE02.roa (raw, json)
Hash identifier:          Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=
Subject key identifier:   E6:75:F4:45:69:6E:FA:89:10:49:55:74:4B:F9:A8:B5:40:49:A6:62
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       0647
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/7549B6D2744A11EDA8F69509C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 22:54:35 +0000
ROA not before:           Wed 02 Apr 2025 22:54:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.164.236.0/23 maxlen: 24
                          2001:df6:5180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
                          rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B
        Validity
            Not Before: Apr  2 22:54:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc02b-7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:f7:4d:e4:a1:3f:0e:08:7f:29:6c:0f:c2:
                    70:ed:11:44:ff:af:b6:fd:81:31:ce:26:80:96:b3:
                    ef:a2:9f:f6:74:ef:0f:77:90:a5:9b:33:ae:8c:d0:
                    4e:d1:25:f5:8b:51:d1:52:2b:68:5a:5a:fe:24:d5:
                    c5:9c:8f:71:cc:8d:c3:6a:92:65:b9:f2:88:33:ef:
                    6d:7b:90:c9:c4:26:c6:a0:7d:0e:13:30:3f:a5:03:
                    0f:83:44:50:65:f8:57:b9:60:d8:6b:e6:81:6a:85:
                    c1:7d:e6:ae:83:ff:4d:dd:53:09:5f:b0:68:ac:2f:
                    e0:9c:30:26:0c:60:e0:81:79:e4:70:0a:20:e3:38:
                    be:63:3c:dd:90:17:4a:6b:08:72:c7:75:73:fb:3d:
                    61:29:90:4f:3d:be:e9:a4:ed:0f:8c:c2:c3:26:d2:
                    93:73:20:31:5a:9d:60:6f:45:1e:2d:bb:1b:d5:4b:
                    5d:b1:b1:85:5a:21:07:93:ea:84:4c:68:bb:c4:1e:
                    14:a6:f4:36:44:33:35:13:5c:d6:a9:3c:0d:60:df:
                    d9:a4:0a:47:60:42:5c:1e:3f:ee:c5:a7:06:06:2e:
                    e9:e2:a2:7d:35:8e:d4:f5:2c:a2:20:6f:f9:98:df:
                    26:03:80:48:59:aa:54:d2:aa:12:93:b6:73:64:1c:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:F4:45:69:6E:FA:89:10:49:55:74:4B:F9:A8:B5:40:49:A6:62
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/7549B6D2744A11EDA8F69509C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.236.0/23
                IPv6:
                  2001:df6:5180::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:8a:2a:ee:79:27:1d:2e:ca:6f:9c:6d:dd:2b:87:b9:b3:
         2d:7c:5f:e3:24:b0:25:b9:32:ae:94:f5:f9:ca:57:42:d6:77:
         78:f4:e8:43:cb:b6:4c:cd:93:7f:08:10:d4:70:ea:4e:b5:64:
         ac:04:30:83:54:ab:d6:67:7b:23:dd:80:29:cc:25:86:df:3b:
         2b:2f:a4:ec:34:47:a5:c7:38:a8:d3:13:30:4b:9f:29:7e:05:
         de:16:52:ab:0e:f4:3c:b9:b7:a8:d7:90:c9:0e:16:1b:44:47:
         ed:d2:de:8f:9b:90:6b:b1:e0:4f:2b:36:38:5e:2a:1f:b2:58:
         a1:22:9a:28:0e:c0:54:cb:05:a9:c4:ac:77:12:06:b7:6a:04:
         35:1c:be:95:74:27:89:58:32:1b:66:19:2d:11:46:7d:5c:15:
         2d:48:53:63:e3:b4:13:d0:8f:44:e2:64:a4:9f:b6:bd:91:aa:
         90:b4:7d:03:f4:83:d8:b7:19:b6:38:28:48:c2:81:b0:35:41:
         28:b1:f0:34:e8:13:7a:17:2d:2d:45:db:c0:d2:79:7b:c3:ea:
         bf:95:d2:0e:d7:05:fa:50:35:20:29:97:5a:2e:29:29:88:96:
         e9:01:4f:e1:c6:88:6d:88:c0:79:42:08:2e:8f:27:fd:94:ef:
         bd:40:0a:a8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1
RUZFQTQ0OTYwHhcNMjUwNDAyMjI1NDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkYzAyYi03NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAL3TeShPw4IfylsD8Jw7RFE/6+2/YExziaAlrPvop/2dO8Pd5ClmzOujNBO
0SX1i1HRUitoWlr+JNXFnI9xzI3DapJlufKIM+9te5DJxCbGoH0OEzA/pQMPg0RQ
ZfhXuWDYa+aBaoXBfeaug/9N3VMJX7BorC/gnDAmDGDggXnkcAog4zi+YzzdkBdK
awhyx3Vz+z1hKZBPPb7ppO0PjMLDJtKTcyAxWp1gb0UeLbsb1UtdsbGFWiEHk+qE
TGi7xB4UpvQ2RDM1E1zWqTwNYN/ZpApHYEJcHj/uxacGBi7p4qJ9NY7U9SyiIG/5
mN8mA4BIWapU0qoSk7ZzZByKuwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOZ19EVp
bvqJEElVdEv5qLVASaZiMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE
MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI2OEIvNDI2RjU3QzA4RDM5MTFFQkI5RjRDQjE3QzRGOUFFMDIvNzU0OUI2RDI3
NDRBMTFFREE4RjY5NTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnpOwwDwQCAAIwCQMHACABDfZRgDANBgkqhkiG9w0BAQsF
AAOCAQEAJW2KKu55Jx0uym+cbd0rh7mzLXxf4ySwJbkyrpT1+cpXQtZ3ePToQ8u2
TM2TfwgQ1HDqTrVkrAQwg1Sr1md7I92AKcwlht87Ky+k7DRHpcc4qNMTMEufKX4F
3hZSqw70PLm3qNeQyQ4WG0RH7dLej5uQa7HgTys2OF4qH7JYoSKaKA7AVMsFqcSs
dxIGt2oENRy+lXQniVgyG2YZLRFGfVwVLUhTY+O0E9CPROJkpJ+2vZGqkLR9A/SD
2LcZtjgoSMKBsDVBKLHwNOgTehctLUXbwNJ5e8Pqv5XSDtcF+lA1ICmXWi4pKYiW
6QFP4caIbYjAeUIILo8n/ZTvvUAKqA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:29 2025 by rpki-client