Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/557745EE4E1B11EEBA53316CC4F9AE02.roa
File:                     557745EE4E1B11EEBA53316CC4F9AE02.roa (raw, json)
Hash identifier:          0J3C/5LKRpZtNoFr4bVuUTTLQ/TaBpaNWA8a6SWNpPU=
Subject key identifier:   36:70:EA:29:41:F8:83:56:44:EE:3C:48:3B:FE:87:5D:5B:D4:96:D3
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       0191
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/557745EE4E1B11EEBA53316CC4F9AE02.roa
Signing time:             Thu 23 Oct 2025 05:18:37 +0000
ROA not before:           Thu 23 Oct 2025 05:18:37 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139515
IP address blocks:        103.71.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl
                          rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Oct 23 05:18:37 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f9baad-3bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:19:d9:08:06:8d:d9:59:e3:bf:4c:6a:05:
                    72:69:95:a3:df:a9:c3:7b:1b:6f:b3:92:3f:a3:54:
                    fc:b0:a4:b7:af:69:e3:36:04:2b:01:f2:56:7e:bd:
                    53:fd:fa:2a:8d:62:4b:36:22:db:03:33:b7:8a:5c:
                    ab:57:3d:48:8b:dc:f6:ed:c9:0c:97:ce:00:88:a0:
                    e6:33:28:13:52:50:aa:f5:94:83:b5:ea:f4:87:cf:
                    6a:70:a7:b0:c0:58:3d:c5:17:5b:ba:64:80:3d:ab:
                    25:4b:67:23:c9:ae:be:bc:dc:bb:e1:74:0b:f6:2f:
                    99:e8:b7:a8:4b:44:f5:ad:cd:88:ab:15:8d:66:80:
                    19:7d:3e:d2:b8:6a:bb:23:be:19:28:6a:f3:56:92:
                    19:33:d3:ee:23:94:f0:1e:f5:eb:3c:5c:bd:6d:60:
                    aa:37:11:30:fe:79:57:64:84:5b:10:66:57:b5:7c:
                    9b:e8:48:6e:da:fd:47:0c:db:0b:d1:bb:c5:31:d6:
                    10:ee:39:b0:80:53:a2:5f:92:ce:de:66:d4:38:aa:
                    0a:be:56:23:9c:14:eb:b0:63:22:2e:7d:f6:06:25:
                    20:eb:bc:eb:99:5a:71:90:38:33:e8:0c:17:b1:2d:
                    22:6f:fc:85:50:c1:37:89:eb:c5:ad:a7:64:82:43:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:EA:29:41:F8:83:56:44:EE:3C:48:3B:FE:87:5D:5B:D4:96:D3
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/557745EE4E1B11EEBA53316CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:c2:4b:f9:be:b8:87:a7:83:a3:5b:b8:f5:bf:bf:3e:91:
         5e:bd:1a:42:0c:d3:6c:3e:d8:7f:27:28:7d:31:c4:92:c4:2b:
         93:a7:42:10:0c:d7:2f:54:e3:dd:0a:1d:49:b1:9b:8f:cc:70:
         de:ea:60:d2:fa:88:6a:ed:df:be:9d:46:16:b6:41:83:ab:79:
         c3:f5:ce:02:72:c5:31:73:32:43:7c:bc:96:19:f9:9c:64:7d:
         21:bb:c9:51:1c:83:3d:cb:c9:33:12:8b:7a:60:1b:77:fd:97:
         e8:b5:0f:00:c0:29:16:42:91:bc:17:dc:3e:b6:e7:e6:c6:89:
         bf:49:75:7e:63:95:da:d3:e4:f8:ce:64:4f:4b:3c:3d:1a:00:
         4d:c9:cc:54:93:a7:99:6e:37:c9:ea:da:16:84:66:23:6a:94:
         89:27:e9:6a:9d:64:c1:a0:d9:0b:81:fa:c0:7b:f1:a3:d7:9a:
         11:bb:d4:fe:81:cc:61:dd:fa:01:bd:92:eb:6b:0d:bd:ed:83:
         b0:02:25:54:69:08:1d:1e:21:c6:85:26:df:ab:e5:07:fd:fb:
         4f:f3:aa:cf:15:42:44:25:da:b4:bf:8e:b1:6d:8f:55:a8:58:
         f9:53:83:da:39:e5:c1:4c:65:dd:aa:cb:13:fc:77:36:0b:60:
         32:9c:33:92
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4
RTJBNjI2NjEwHhcNMjUxMDIzMDUxODM3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGY5YmFhZC0zYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk64Z2QgGjdlZ479MagVyaZWj36nDextvs5I/o1T8sKS3r2njNgQrAfJWfr1T
/foqjWJLNiLbAzO3ilyrVz1Ii9z27ckMl84AiKDmMygTUlCq9ZSDter0h89qcKew
wFg9xRdbumSAPaslS2cjya6+vNy74XQL9i+Z6LeoS0T1rc2IqxWNZoAZfT7SuGq7
I74ZKGrzVpIZM9PuI5TwHvXrPFy9bWCqNxEw/nlXZIRbEGZXtXyb6Ehu2v1HDNsL
0bvFMdYQ7jmwgFOiX5LO3mbUOKoKvlYjnBTrsGMiLn32BiUg67zrmVpxkDgz6AwX
sS0ib/yFUME3ievFradkgkM+5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDZw6ilB
+INWRO48SDv+h11b1JbTMB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF
MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzYzODUvN0IyMkM3NDI0RTFBMTFFRTkzRENENzY3QzRGOUFFMDIvNTU3NzQ1RUU0
RTFCMTFFRUJBNTMzMTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnR2wwDQYJKoZIhvcNAQELBQADggEBADo7wkv5vriHp4Oj
W7j1v78+kV69GkIM02w+2H8nKH0xxJLEK5OnQhAM1y9U490KHUmxm4/McN7qYNL6
iGrt376dRha2QYOrecP1zgJyxTFzMkN8vJYZ+ZxkfSG7yVEcgz3LyTMSi3pgG3f9
l+i1DwDAKRZCkbwX3D625+bGib9JdX5jldrT5PjOZE9LPD0aAE3JzFSTp5luN8nq
2haEZiNqlIkn6WqdZMGg2QuB+sB78aPXmhG71P6BzGHd+gG9kutrDb3tg7ACJVRp
CB0eIcaFJt+r5Qf9+0/zqs8VQkQl2rS/jrFtj1WoWPlTg9o55cFMZd2qyxP8dzYL
YDKcM5I=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:42:03 2025 by rpki-client