Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/79B9645874F911F0BD52962FC4F9AE02.roa
File:                     79B9645874F911F0BD52962FC4F9AE02.roa (raw, json)
Hash identifier:          wu+Dox9IU3hwRlFzpqIU7gx86wEYNjyUbkdxdJNUmAk=
Subject key identifier:   66:3E:28:51:15:60:D2:A4:30:C4:4E:CB:DB:39:C4:B0:A8:33:22:7D
Certificate issuer:       /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Certificate serial:       0447
Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/79B9645874F911F0BD52962FC4F9AE02.roa
Signing time:             Sat 09 Aug 2025 08:18:49 +0000
ROA not before:           Sat 09 Aug 2025 08:18:49 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136395
IP address blocks:        103.179.54.0/24 maxlen: 24
                          2001:df0:48c0::/48 maxlen: 49
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl
                          rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
        Validity
            Not Before: Aug  9 08:18:49 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68970468-f07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:f4:8b:ce:77:23:70:63:ae:f4:39:f4:2c:
                    d6:b9:5e:b0:66:b6:61:39:9f:d1:a8:26:9f:23:af:
                    a3:28:59:c3:94:7c:fb:91:9a:61:36:99:74:b3:7f:
                    c8:ac:a8:ae:70:65:03:73:24:7d:20:8c:6b:45:d2:
                    72:7b:ef:a4:76:d2:a8:4d:5f:f7:2c:ab:c3:3d:89:
                    2b:2e:81:59:02:1c:91:02:81:08:cf:cf:cd:6c:23:
                    87:4a:f8:53:90:e0:d2:95:80:9b:70:0a:19:e2:7f:
                    2b:6f:f2:fc:cc:7e:99:25:bd:a4:5a:86:b6:84:c5:
                    af:00:38:3c:a3:b6:14:a6:2b:06:2e:1b:e3:14:2e:
                    1d:6f:ef:f1:f4:a7:6f:09:f5:4f:21:07:3c:54:7f:
                    3b:90:f8:ee:75:16:aa:bf:69:21:a6:23:15:92:5e:
                    43:9a:a9:2f:e2:28:47:b8:17:61:ab:54:f7:40:c9:
                    30:e0:ae:9c:46:14:b7:b0:4b:ce:3e:87:7a:a6:08:
                    f1:3b:dc:a9:ec:eb:36:05:de:cf:91:af:51:59:fc:
                    ed:2c:1d:80:9b:40:34:3a:2c:4e:d3:76:ae:c7:eb:
                    bf:70:e5:83:9a:68:73:28:23:7b:1a:11:25:c2:24:
                    f1:35:1c:45:60:b0:75:e7:2a:7a:da:91:37:e4:e5:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3E:28:51:15:60:D2:A4:30:C4:4E:CB:DB:39:C4:B0:A8:33:22:7D
            X509v3 Authority Key Identifier:
                keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/79B9645874F911F0BD52962FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.54.0/24
                IPv6:
                  2001:df0:48c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:db:ef:80:ec:2a:4d:55:b1:8c:fc:c4:90:01:36:de:e3:
         16:29:ad:b1:80:cb:52:40:b0:99:d9:b0:2d:cb:99:a1:8e:55:
         2c:1d:8a:cc:cb:0a:32:25:0d:32:b4:72:e4:84:09:d3:ea:4a:
         77:40:ca:c9:f0:62:8d:86:5f:7b:9f:c4:29:75:42:0b:6e:8c:
         b0:c9:f7:f0:b7:3c:e8:87:fe:0f:fb:2d:71:77:26:fd:7a:97:
         9d:2a:a3:48:cc:7b:33:b2:7a:41:8b:98:e7:10:d5:3f:d8:d6:
         ff:5d:7c:23:db:51:5d:b3:5f:11:d0:a4:b7:4b:60:2e:e2:b3:
         19:a6:16:6c:00:59:8b:3f:ef:fa:be:ca:66:f5:d4:ed:24:1d:
         d8:a7:1b:82:c0:3b:50:a1:f8:7a:f0:35:50:35:3f:5f:74:88:
         f8:3a:14:b7:25:9e:0c:ce:a0:85:8c:10:74:3f:22:f7:76:24:
         20:51:93:48:0e:93:6a:d3:0c:4f:70:d8:ba:b2:7a:e5:4c:b6:
         7f:84:f1:85:9d:f6:8e:99:ad:93:68:7c:33:d7:48:0c:00:07:
         70:9e:88:91:11:12:a4:da:0b:59:75:ad:16:c7:67:a0:59:0f:
         ec:5d:54:1e:c0:90:90:67:25:d3:ec:6d:b2:72:48:da:a8:ff:
         51:5a:6d:76
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD
M0RCMUUyQzYwHhcNMjUwODA5MDgxODQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk3MDQ2OC1mMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJb0i853I3BjrvQ59CzWuV6wZrZhOZ/RqCafI6+jKFnDlHz7kZphNpl0s3/I
rKiucGUDcyR9IIxrRdJye++kdtKoTV/3LKvDPYkrLoFZAhyRAoEIz8/NbCOHSvhT
kODSlYCbcAoZ4n8rb/L8zH6ZJb2kWoa2hMWvADg8o7YUpisGLhvjFC4db+/x9Kdv
CfVPIQc8VH87kPjudRaqv2khpiMVkl5Dmqkv4ihHuBdhq1T3QMkw4K6cRhS3sEvO
Pod6pgjxO9yp7Os2Bd7Pka9RWfztLB2Am0A0OixO03aux+u/cOWDmmhzKCN7GhEl
wiTxNRxFYLB15yp62pE35OX12QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGY+KFEV
YNKkMMROy9s5xLCoMyJ9MB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG
QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUEwQjkvMkUwNkQ2REU2RkI4MTFFQ0E1Njc3Qzc4QzRGOUFFMDIvNzlCOTY0NTg3
NEY5MTFGMEJENTI5NjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnszYwDwQCAAIwCQMHACABDfBIwDANBgkqhkiG9w0BAQsF
AAOCAQEAfMPb74DsKk1VsYz8xJABNt7jFimtsYDLUkCwmdmwLcuZoY5VLB2KzMsK
MiUNMrRy5IQJ0+pKd0DKyfBijYZfe5/EKXVCC26MsMn38Lc86If+D/stcXcm/XqX
nSqjSMx7M7J6QYuY5xDVP9jW/118I9tRXbNfEdCkt0tgLuKzGaYWbABZiz/v+r7K
ZvXU7SQd2KcbgsA7UKH4evA1UDU/X3SI+DoUtyWeDM6ghYwQdD8i93YkIFGTSA6T
atMMT3DYurJ65Uy2f4TxhZ32jpmtk2h8M9dIDAAHcJ6IkRESpNoLWXWtFsdnoFkP
7F1UHsCQkGcl0+xtsnJI2qj/UVptdg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:16:23 2025 by rpki-client