Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/97A9EA446CE211EEA0262334C4F9AE02.roa
File:                     97A9EA446CE211EEA0262334C4F9AE02.roa (raw, json)
Hash identifier:          O5L0VNBny7pJfYOS9ciWnkG89gWRJAbqHnsSmXbIfoU=
Subject key identifier:   8D:87:2A:0B:D0:4D:9C:09:12:04:C9:EB:A1:AC:9F:DA:89:B2:C6:32
Certificate issuer:       /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial:       0570
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/97A9EA446CE211EEA0262334C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 00:06:11 +0000
ROA not before:           Tue 29 Jul 2025 00:06:11 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     15083
IP address blocks:        103.115.170.0/24 maxlen: 24
                          103.115.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
                          rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
        Validity
            Not Before: Jul 29 00:06:11 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68881072-eef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:81:77:e4:1a:e2:b4:13:4e:46:86:b0:cf:
                    bc:06:30:c1:d6:66:59:a5:2c:66:97:06:9b:bf:18:
                    78:a3:3f:5f:2e:a1:0e:ae:87:85:d4:e6:bd:a8:ae:
                    3a:3d:d9:ba:d0:13:2c:03:07:45:f5:47:88:e2:9d:
                    97:b4:92:4a:f9:f8:e2:dd:11:71:df:72:5a:31:f2:
                    ba:40:3f:43:89:ae:1f:8e:fe:67:5c:cd:b5:04:6c:
                    45:aa:19:21:d7:6c:54:d6:22:d5:7d:70:ef:90:f2:
                    62:fa:01:0d:41:09:7a:c9:07:ca:a6:37:ac:05:f4:
                    5b:d8:ff:3c:e8:de:e5:aa:50:cb:a5:5e:32:2c:84:
                    25:c7:43:6a:4d:a9:f0:5c:69:ae:19:4b:71:5b:38:
                    ec:52:75:2f:9a:2a:4f:d9:30:4e:e1:1d:4d:f9:91:
                    4f:85:cb:2d:f8:54:09:93:de:3b:c5:c4:28:9f:66:
                    22:1a:6f:aa:b0:8d:26:65:e7:1c:41:c3:43:f5:f6:
                    36:f7:63:dd:d7:ed:0f:36:bb:33:dc:ba:1d:18:08:
                    ef:3b:41:ea:f1:7c:0e:46:87:35:28:51:e3:b6:1a:
                    32:e6:76:69:f8:b1:ea:d6:70:60:02:dd:74:81:17:
                    7c:9d:14:93:04:d3:85:dd:65:2a:5d:cb:02:4d:7a:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:87:2A:0B:D0:4D:9C:09:12:04:C9:EB:A1:AC:9F:DA:89:B2:C6:32
            X509v3 Authority Key Identifier:
                keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/97A9EA446CE211EEA0262334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:73:16:a0:a8:38:16:72:a0:db:0c:94:0c:dd:39:04:c2:
         78:53:90:5a:5c:fe:b9:74:3d:26:97:30:39:0c:c3:94:0c:6b:
         db:2f:69:c4:32:b3:a8:a8:c9:a3:03:82:7b:94:7f:20:c1:bb:
         61:af:d6:58:41:93:23:96:bf:c7:95:85:5c:a2:1f:0e:9f:f3:
         3b:7b:60:6f:0f:a0:76:8a:08:a3:46:11:92:7e:cd:c2:05:20:
         75:58:49:f7:14:98:e3:f3:cb:5f:f6:fb:e6:39:14:52:56:ef:
         c4:e1:dc:a9:ae:e7:8f:5d:a2:82:c6:b9:d8:61:32:3b:19:9c:
         98:b2:b8:98:5a:5d:f7:c7:6e:cc:de:36:87:8d:d7:6a:7b:40:
         10:f2:09:f7:b6:4d:28:b8:04:99:cf:79:19:28:5a:f5:83:ef:
         02:78:02:9b:e0:8e:35:5f:26:be:ab:9d:76:07:dd:8e:66:9d:
         32:5c:5b:76:2c:cd:53:f8:66:82:cb:db:7e:a7:1a:d6:a0:1e:
         63:af:77:6e:d1:45:b6:1e:f6:80:6d:d5:2a:b1:9f:f7:ff:4b:
         ba:5b:2a:f4:c6:3b:05:1a:48:02:09:ae:42:c3:92:55:f0:60:
         e1:66:32:11:c5:70:6f:68:b6:22:0f:c9:67:3b:c6:4b:a1:31:
         a6:13:8b:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3
REQyQzFENTMwHhcNMjUwNzI5MDAwNjExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg4MTA3Mi1lZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvq6Bd+Qa4rQTTkaGsM+8BjDB1mZZpSxmlwabvxh4oz9fLqEOroeF1Oa9qK46
Pdm60BMsAwdF9UeI4p2XtJJK+fji3RFx33JaMfK6QD9Dia4fjv5nXM21BGxFqhkh
12xU1iLVfXDvkPJi+gENQQl6yQfKpjesBfRb2P886N7lqlDLpV4yLIQlx0NqTanw
XGmuGUtxWzjsUnUvmipP2TBO4R1N+ZFPhcst+FQJk947xcQon2YiGm+qsI0mZecc
QcND9fY292Pd1+0PNrsz3LodGAjvO0Hq8XwORoc1KFHjthoy5nZp+LHq1nBgAt10
gRd8nRSTBNOF3WUqXcsCTXrKGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI2HKgvQ
TZwJEgTJ66Gsn9qJssYyMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0
REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UxNTEvMTJBQ0Q2QkFGNERDMTFFQjhGN0RCOTQ5QzRGOUFFMDIvOTdBOUVBNDQ2
Q0UyMTFFRUEwMjYyMzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnc6owDQYJKoZIhvcNAQELBQADggEBAA9McxagqDgWcqDb
DJQM3TkEwnhTkFpc/rl0PSaXMDkMw5QMa9svacQys6ioyaMDgnuUfyDBu2Gv1lhB
kyOWv8eVhVyiHw6f8zt7YG8PoHaKCKNGEZJ+zcIFIHVYSfcUmOPzy1/2++Y5FFJW
78Th3Kmu549dooLGudhhMjsZnJiyuJhaXffHbszeNoeN12p7QBDyCfe2TSi4BJnP
eRkoWvWD7wJ4ApvgjjVfJr6rnXYH3Y5mnTJcW3YszVP4ZoLL236nGtagHmOvd27R
RbYe9oBt1Sqxn/f/S7pbKvTGOwUaSAIJrkLDklXwYOFmMhHFcG9otiIPyWc7xkuh
MaYTi9w=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:32:07 2025 by rpki-client