Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
File:                     91C771A2D02111EA843F372FC4F9AE02.roa (raw, json)
Hash identifier:          DNzgYLTa4x8Yro4MUg5YZJaz6+PS7oRCf/le1/gHgMk=
Subject key identifier:   79:11:27:A8:AB:9A:DB:03:CF:35:03:8B:6C:B5:D0:3A:4A:9D:6A:8F
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0B71
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 20:30:00 +0000
ROA not before:           Thu 31 Jul 2025 20:30:00 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     198148
IP address blocks:        116.66.212.0/22 maxlen: 22
                          116.66.216.0/22 maxlen: 22
                          116.66.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2929 (0xb71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
        Validity
            Not Before: Jul 31 20:30:00 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688bd247-aa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:e0:ba:b0:f8:85:0e:b6:99:4a:16:d4:95:
                    54:cd:6c:e6:e5:f6:7c:01:d8:46:d6:1a:8c:7a:1f:
                    4e:01:b5:a6:01:2e:24:59:d7:53:c8:1b:fc:2f:07:
                    07:77:45:73:30:ee:ff:06:f2:55:1b:a9:6f:2d:f0:
                    a0:fa:51:c3:e7:3c:40:7a:b8:02:78:08:2b:7b:65:
                    cd:b2:94:a7:4c:dc:55:77:fd:dd:d1:0a:ac:3c:ce:
                    44:62:fc:ab:4b:ce:bc:8a:97:6f:52:13:6c:eb:8a:
                    f6:79:2c:9f:6b:40:2d:46:f5:8b:ae:88:64:c7:00:
                    52:82:24:08:1d:d1:87:cb:49:c5:b0:99:ea:42:0f:
                    8b:2a:bf:52:75:9c:d5:51:99:47:27:13:bb:63:3a:
                    62:b9:c8:3a:2a:05:bf:c3:d2:2b:06:f3:2d:41:d1:
                    ea:37:9b:6f:e7:ee:bb:db:d4:a5:f4:82:c7:fe:8b:
                    f5:6a:46:9b:96:c7:a0:4f:43:1c:0b:1d:51:b5:c2:
                    f8:14:ce:01:cc:82:24:3b:01:3d:aa:26:15:bb:a3:
                    c2:a2:b8:06:51:4c:f5:d3:fa:a1:fd:ca:ae:08:e4:
                    4e:4b:03:b8:bd:da:2f:5f:f0:bc:b6:ac:c8:09:e1:
                    f5:59:8f:fb:08:ef:ed:14:d7:37:ec:44:0c:79:e8:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:27:A8:AB:9A:DB:03:CF:35:03:8B:6C:B5:D0:3A:4A:9D:6A:8F
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.212.0-116.66.223.255

    Signature Algorithm: sha256WithRSAEncryption
         c2:bf:ee:1e:f7:1d:99:2a:66:f2:45:f0:78:0b:9a:1a:4b:c4:
         eb:8f:21:0d:01:d1:17:ef:cd:0c:93:4a:bb:be:19:0e:24:43:
         16:35:c0:76:e7:9c:a9:4e:82:52:fd:93:e1:86:fe:fa:76:b0:
         7c:96:b1:02:a3:07:96:8f:a7:b1:5e:54:68:64:df:53:e1:b5:
         be:67:39:a5:72:f0:bf:c5:0f:bf:41:76:40:7e:8c:41:7a:05:
         5a:24:79:83:4c:88:46:f7:82:2d:fb:85:21:c7:9b:0a:f4:b7:
         7e:65:2c:6e:3d:f5:31:9f:9e:59:5d:c2:0e:78:f6:ea:9a:33:
         0c:18:3c:dc:0d:b1:a4:71:2a:82:b7:60:5a:6c:d1:e0:f7:5f:
         fc:28:24:c8:4a:19:f1:85:d7:53:dd:1f:87:71:07:15:14:2e:
         2a:cd:3f:a8:bb:86:55:c4:a4:39:16:e0:e5:77:f6:1c:24:c5:
         71:88:b1:50:de:10:76:4e:93:5c:8b:a2:9f:4c:7d:0d:8c:aa:
         c7:a8:73:70:29:c4:aa:66:72:e5:e8:15:f2:06:99:78:16:35:
         4b:28:42:55:6b:a3:00:db:f7:d0:4e:4e:4b:c7:69:20:61:5d:
         08:2e:9b:9b:3f:52:79:ec:6c:dc:c7:86:b5:8b:b1:ec:19:42:
         3c:94:95:1f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB
OTNDMjYzQUEwHhcNMjUwNzMxMjAzMDAwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhiZDI0Ny1hYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lHgurD4hQ62mUoW1JVUzWzm5fZ8AdhG1hqMeh9OAbWmAS4kWddTyBv8LwcH
d0VzMO7/BvJVG6lvLfCg+lHD5zxAergCeAgre2XNspSnTNxVd/3d0QqsPM5EYvyr
S868ipdvUhNs64r2eSyfa0AtRvWLrohkxwBSgiQIHdGHy0nFsJnqQg+LKr9SdZzV
UZlHJxO7Yzpiucg6KgW/w9IrBvMtQdHqN5tv5+6729Sl9ILH/ov1akablsegT0Mc
Cx1RtcL4FM4BzIIkOwE9qiYVu6PCorgGUUz10/qh/cquCOROSwO4vdovX/C8tqzI
CeH1WY/7CO/tFNc37EQMeejcJwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFHkRJ6ir
mtsDzzUDi2y10DpKnWqPMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2
NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvOTFDNzcxQTJE
MDIxMTFFQTg0M0YzNzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAnRC1AMEBXRCwDANBgkqhkiG9w0BAQsFAAOCAQEAwr/u
HvcdmSpm8kXweAuaGkvE648hDQHRF+/NDJNKu74ZDiRDFjXAduecqU6CUv2T4Yb+
+nawfJaxAqMHlo+nsV5UaGTfU+G1vmc5pXLwv8UPv0F2QH6MQXoFWiR5g0yIRveC
LfuFIcebCvS3fmUsbj31MZ+eWV3CDnj26pozDBg83A2xpHEqgrdgWmzR4Pdf/Cgk
yEoZ8YXXU90fh3EHFRQuKs0/qLuGVcSkORbg5Xf2HCTFcYixUN4Qdk6TXIuin0x9
DYyqx6hzcCnEqmZy5egV8gaZeBY1SyhCVWujANv30E5OS8dpIGFdCC6bmz9Seexs
3MeGtYux7BlCPJSVHw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:41 2025 by rpki-client