Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/51CBE4868C6711EB98B7B279C4F9AE02.roa
File:                     51CBE4868C6711EB98B7B279C4F9AE02.roa (raw, json)
Hash identifier:          Yv0AVkztP1uS/O4625/O5LwxegYUh+Kz98XB8afMRms=
Subject key identifier:   41:D7:50:37:3C:DB:58:F0:5F:C9:45:F1:0E:F3:ED:3D:C6:F3:90:36
Certificate issuer:       /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial:       069F
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/51CBE4868C6711EB98B7B279C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 22:42:18 +0000
ROA not before:           Tue 04 Nov 2025 22:42:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134966
IP address blocks:        103.6.104.0/24 maxlen: 24
                          103.137.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
        Validity
            Not Before: Nov  4 22:42:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690a814a-955d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:51:bf:52:47:bc:83:98:fd:74:82:b5:14:
                    14:95:c4:eb:0b:ae:e7:03:91:63:86:ca:b2:c6:ea:
                    8b:59:f7:d7:dc:69:61:08:5d:ae:4b:1b:3f:47:24:
                    7b:8a:76:24:db:cc:52:74:23:fe:89:da:c5:48:c2:
                    cd:66:6f:30:39:09:1c:6d:57:41:58:83:16:28:e5:
                    29:77:dc:45:bc:c4:58:23:2e:50:b2:bb:4b:41:ea:
                    c6:2c:1a:ca:38:8a:36:93:22:98:aa:61:3d:c2:57:
                    82:46:bc:91:ac:47:5d:4a:48:e9:e3:24:93:de:ad:
                    86:65:b0:d1:da:2c:ba:c3:66:4d:4b:c5:f3:82:cc:
                    38:45:21:3b:be:20:38:25:c8:55:3f:19:d2:c6:d5:
                    67:2a:3d:7f:1b:34:50:8a:e6:24:88:ad:79:32:98:
                    cf:79:9b:7d:f2:89:de:1f:6d:2f:6c:0c:b1:0e:15:
                    a2:46:12:85:ed:87:b5:cf:cb:53:9a:52:d5:1f:b0:
                    6d:79:ca:29:6b:b6:45:b1:3b:4e:99:2f:a9:4e:89:
                    0c:07:57:1a:9a:3f:80:91:6e:94:51:79:ae:a3:bc:
                    6f:17:02:1e:2b:6c:79:e4:2d:ba:64:9f:12:9d:cb:
                    4e:e4:3f:3e:66:8e:2a:e1:28:55:e3:20:ea:8f:5d:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:50:37:3C:DB:58:F0:5F:C9:45:F1:0E:F3:ED:3D:C6:F3:90:36
            X509v3 Authority Key Identifier:
                keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/51CBE4868C6711EB98B7B279C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.104.0/24
                  103.137.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:96:49:e7:56:b3:25:0b:0e:62:40:ae:8d:cc:d6:ff:d9:
         1c:25:94:3b:06:05:86:4f:eb:c0:6b:c4:4c:d6:00:d4:a0:f6:
         f7:cc:62:b9:af:47:69:98:09:ec:9c:48:80:51:66:9d:8a:90:
         ee:dd:0f:b0:3a:cd:ef:4b:c3:f7:f2:1b:87:49:c6:9f:8e:bf:
         4e:4a:ec:48:02:4c:94:f2:f7:36:6d:87:c7:2c:96:02:d8:25:
         30:ba:58:1b:69:c2:e7:c9:10:1e:66:38:a3:de:80:78:ff:aa:
         a3:6d:02:86:c2:d4:50:ba:d3:8b:59:40:33:c2:6e:59:3b:5d:
         fc:a8:68:4a:9c:6a:ff:b9:5a:89:f7:7d:31:e8:26:50:7d:e8:
         89:2a:10:df:a2:48:78:60:43:54:96:df:c0:34:a5:96:5a:55:
         a2:7c:26:76:34:a9:72:ec:17:ca:8a:6d:8f:4e:9f:c0:f3:b7:
         f6:b1:c1:fc:ee:07:8e:bb:7c:86:39:67:31:df:f2:56:49:b8:
         6c:26:8f:f6:2b:f8:dd:f1:36:31:66:2b:15:5d:43:ba:6d:bd:
         5c:65:c6:a6:fb:76:8d:60:b7:35:00:e2:07:cd:91:12:e8:15:
         2c:c4:cd:e1:53:5c:94:6d:76:20:09:e8:86:80:dd:3a:fe:2f:
         ef:ab:68:78
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz
QkY1QzVEMTQwHhcNMjUxMTA0MjI0MjE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhODE0YS05NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2XBRv1JHvIOY/XSCtRQUlcTrC67nA5FjhsqyxuqLWffX3GlhCF2uSxs/RyR7
inYk28xSdCP+idrFSMLNZm8wOQkcbVdBWIMWKOUpd9xFvMRYIy5QsrtLQerGLBrK
OIo2kyKYqmE9wleCRryRrEddSkjp4yST3q2GZbDR2iy6w2ZNS8Xzgsw4RSE7viA4
JchVPxnSxtVnKj1/GzRQiuYkiK15MpjPeZt98oneH20vbAyxDhWiRhKF7Ye1z8tT
mlLVH7Btecopa7ZFsTtOmS+pTokMB1camj+AkW6UUXmuo7xvFwIeK2x55C26ZJ8S
nctO5D8+Zo4q4ShV4yDqj10NKQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEHXUDc8
21jwX8lF8Q7z7T3G85A2MB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD
NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQzMUUvN0E4NDgxOTY4QzY1MTFFQkFBRjgwMzc2QzRGOUFFMDIvNTFDQkU0ODY4
QzY3MTFFQjk4QjdCMjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnBmgDBABnidMwDQYJKoZIhvcNAQELBQADggEBALUTlknn
VrMlCw5iQK6NzNb/2RwllDsGBYZP68BrxEzWANSg9vfMYrmvR2mYCeycSIBRZp2K
kO7dD7A6ze9Lw/fyG4dJxp+Ov05K7EgCTJTy9zZth8cslgLYJTC6WBtpwufJEB5m
OKPegHj/qqNtAobC1FC604tZQDPCblk7XfyoaEqcav+5Won3fTHoJlB96IkqEN+i
SHhgQ1SW38A0pZZaVaJ8JnY0qXLsF8qKbY9On8Dzt/axwfzuB467fIY5ZzHf8lZJ
uGwmj/Yr+N3xNjFmKxVdQ7ptvVxlxqb7do1gtzUA4gfNkRLoFSzEzeFTXJRtdiAJ
6IaA3Tr+L++raHg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:29 2025 by rpki-client