Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FF9D74D8735F11F093707251C4F9AE02.roa
File:                     FF9D74D8735F11F093707251C4F9AE02.roa (raw, json)
Hash identifier:          x+4V7MgRD99pCQ1H4NPILV8k6b/KjY/7SvzSzH6UBOU=
Subject key identifier:   DE:A8:16:D8:AD:4B:36:48:37:38:F7:02:B5:BF:2D:4E:BC:D9:79:F1
Certificate issuer:       /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial:       0408
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FF9D74D8735F11F093707251C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 07:36:17 +0000
ROA not before:           Thu 07 Aug 2025 07:36:17 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     10075
IP address blocks:        103.179.62.0/23 maxlen: 24
                          2400:4ba0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
                          rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
        Validity
            Not Before: Aug  7 07:36:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68945771-a053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:28:09:25:d6:e3:f0:01:dd:65:5f:85:78:
                    88:7e:9b:d2:36:2a:b0:f5:47:a7:25:3d:50:2f:52:
                    35:e2:f3:d4:32:5d:26:aa:74:64:ef:4b:42:85:24:
                    04:c7:0e:7b:5d:7f:1b:e2:ec:5a:eb:94:bf:65:fa:
                    de:51:c9:2c:7e:db:3e:10:93:9e:b2:70:80:66:42:
                    4b:6e:74:5d:fb:3e:69:78:ec:d2:f7:df:7e:d3:ed:
                    3f:e1:75:79:c4:73:cb:2e:ee:52:d1:f6:a4:3a:7f:
                    f0:33:d1:22:67:d9:da:f2:a4:fa:ef:5f:50:bc:74:
                    d4:aa:af:7d:57:0d:9f:24:d2:3f:f8:c4:bf:30:7d:
                    3b:fb:2c:9f:45:ad:38:fc:3c:11:ad:1b:90:bb:b0:
                    96:3b:c4:e1:f6:c8:1d:59:05:9d:fc:1b:2d:6c:3b:
                    78:0a:06:f9:d8:ef:97:1f:21:9c:58:86:b7:69:86:
                    82:c4:70:d1:a3:91:17:89:c4:6d:06:76:b6:b9:cd:
                    31:6f:d4:f6:91:04:6a:17:83:0a:6f:20:72:1e:ff:
                    48:b3:5e:68:20:22:ea:d1:10:88:88:b3:67:c0:ef:
                    e7:26:06:98:65:81:26:18:0f:89:38:e9:5b:45:93:
                    10:57:89:cf:1c:87:5e:92:ea:3c:2e:bc:e6:45:16:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A8:16:D8:AD:4B:36:48:37:38:F7:02:B5:BF:2D:4E:BC:D9:79:F1
            X509v3 Authority Key Identifier:
                keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FF9D74D8735F11F093707251C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.62.0/23
                IPv6:
                  2400:4ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:87:08:2a:5f:f3:c4:5b:9f:57:6d:4c:20:7d:b1:b2:5e:
         b1:38:4e:e6:f4:8c:b3:f9:19:bc:3f:56:53:25:9e:85:cf:d9:
         40:69:ae:ba:82:f9:b5:47:8c:c9:64:5f:e2:d3:69:9c:a1:51:
         32:b2:55:c5:ce:26:fe:f2:ff:f0:b7:56:e1:1d:c4:f5:42:79:
         e4:dd:b8:9a:3f:41:b2:3b:9e:cb:67:cb:99:44:2b:04:dd:fa:
         06:a1:01:2c:8d:4c:da:df:71:92:a7:a5:83:d8:60:09:11:ce:
         63:b8:9c:37:35:d1:59:30:0f:72:99:31:d0:f6:61:a3:1c:53:
         7f:63:df:43:67:8d:2c:85:ca:74:03:97:20:ad:18:da:74:17:
         40:36:b9:a2:74:02:a8:25:c9:b3:dd:1d:85:fa:27:1b:40:5a:
         52:c0:89:57:3c:ec:ba:7a:e8:75:49:2f:4a:f8:45:b0:2c:27:
         f7:7f:54:be:71:25:d2:1c:6f:93:94:c4:4d:17:f2:7f:c8:7b:
         a3:1c:75:81:4b:a9:0b:f6:3b:42:63:f6:3f:d1:4f:42:95:06:
         bc:1f:45:1a:0c:87:08:e3:8e:44:68:08:43:e4:06:f5:98:a5:
         98:ee:05:9e:a2:c3:d0:9c:24:0f:2e:43:38:da:dd:71:fb:fc:
         3f:35:55:45
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4
NTREMzZEQzIwHhcNMjUwODA3MDczNjE3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk0NTc3MS1hMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJ8oCSXW4/AB3WVfhXiIfpvSNiqw9UenJT1QL1I14vPUMl0mqnRk70tChSQE
xw57XX8b4uxa65S/ZfreUcksfts+EJOesnCAZkJLbnRd+z5peOzS999+0+0/4XV5
xHPLLu5S0fakOn/wM9EiZ9na8qT6719QvHTUqq99Vw2fJNI/+MS/MH07+yyfRa04
/DwRrRuQu7CWO8Th9sgdWQWd/BstbDt4Cgb52O+XHyGcWIa3aYaCxHDRo5EXicRt
Bna2uc0xb9T2kQRqF4MKbyByHv9Is15oICLq0RCIiLNnwO/nJgaYZYEmGA+JOOlb
RZMQV4nPHIdekuo8LrzmRRbd+QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFN6oFtit
SzZINzj3ArW/LU682XnxMB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz
RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI3RjMvNzc5RjZFOTI4M0Y4MTFFQzgxNkIwMzY3QzRGOUFFMDIvRkY5RDc0RDg3
MzVGMTFGMDkzNzA3MjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnsz4wDQQCAAIwBwMFACQAS6AwDQYJKoZIhvcNAQELBQAD
ggEBAJ+2hwgqX/PEW59XbUwgfbGyXrE4Tub0jLP5Gbw/VlMlnoXP2UBprrqC+bVH
jMlkX+LTaZyhUTKyVcXOJv7y//C3VuEdxPVCeeTduJo/QbI7nstny5lEKwTd+gah
ASyNTNrfcZKnpYPYYAkRzmO4nDc10VkwD3KZMdD2YaMcU39j30NnjSyFynQDlyCt
GNp0F0A2uaJ0AqglybPdHYX6JxtAWlLAiVc87Lp66HVJL0r4RbAsJ/d/VL5xJdIc
b5OUxE0X8n/Ie6McdYFLqQv2O0Jj9j/RT0KVBrwfRRoMhwjjjkRoCEPkBvWYpZju
BZ6iw9CcJA8uQzja3XH7/D81VUU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:51:50 2025 by rpki-client