Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/10E0F1884D0C11EE81002274C4F9AE02.roa
File:                     10E0F1884D0C11EE81002274C4F9AE02.roa (raw, json)
Hash identifier:          0/8Hj8JGllFpFJtLO8M2e+60zSKfijAxsvrqYMK0zA8=
Subject key identifier:   D3:95:5D:AC:60:AB:C6:0F:5E:03:7D:D6:79:27:B2:CD:18:C7:D0:F1
Certificate issuer:       /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial:       34D9
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/10E0F1884D0C11EE81002274C4F9AE02.roa
Signing time:             Fri 24 Oct 2025 15:00:57 +0000
ROA not before:           Fri 24 Oct 2025 15:00:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4768
IP address blocks:        202.27.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13529 (0x34d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
        Validity
            Not Before: Oct 24 15:00:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fb94a8-f597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:2f:ea:07:89:ea:d1:ca:05:af:1d:f7:95:
                    87:37:9b:eb:91:cb:d0:36:4b:d9:88:2c:55:b4:24:
                    a7:71:c3:7f:c5:37:1b:f9:bd:a8:fa:20:d1:ab:06:
                    86:94:20:2b:d1:3b:7e:3c:dd:0f:62:95:e0:d3:50:
                    18:c0:59:cc:30:29:15:79:df:5d:0a:b7:41:ae:6f:
                    58:26:3b:e5:14:74:a2:6c:7e:53:e6:09:02:46:7d:
                    d3:fe:4e:c6:20:a8:1c:95:c9:8e:01:99:ae:74:ee:
                    84:65:bb:4f:2f:db:7e:bb:08:1d:29:ba:40:ad:81:
                    a9:97:d3:e1:81:3c:29:bd:7e:03:7d:f7:c7:49:e3:
                    e7:35:52:57:d7:34:6a:44:a0:8b:cc:9e:62:a8:a6:
                    ef:7c:14:2b:47:4e:e3:1d:c6:3a:81:74:3b:42:35:
                    6a:c2:82:a6:1a:11:1b:4b:b9:0e:25:bb:bd:24:41:
                    d0:69:83:3a:9e:3f:0c:01:0d:ed:fa:c3:f7:57:c2:
                    97:12:7b:61:e1:17:0c:fd:92:c7:6e:cf:a0:4a:95:
                    54:f1:9e:3f:97:aa:a1:cd:d5:21:da:45:aa:7d:a6:
                    21:9c:a7:5f:90:eb:97:f5:3b:8a:57:8c:1e:e1:0c:
                    c6:ff:6e:75:1e:6c:bf:e8:ff:b8:09:f6:a1:4e:23:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:5D:AC:60:AB:C6:0F:5E:03:7D:D6:79:27:B2:CD:18:C7:D0:F1
            X509v3 Authority Key Identifier:
                keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/10E0F1884D0C11EE81002274C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:f8:3d:53:dd:43:6d:a8:6e:e0:a7:fc:7b:79:98:08:f7:32:
         15:0e:c8:96:b1:0d:17:1d:73:97:38:58:73:2e:61:7a:d9:f9:
         20:b1:40:2c:ef:da:c7:f2:44:1c:08:21:8a:fa:77:c4:d9:87:
         e7:bd:37:61:8d:2e:33:6d:83:06:0d:31:54:04:77:09:3a:cd:
         fa:ca:42:04:bd:63:4b:35:99:75:71:9b:97:6f:02:5d:8e:6b:
         89:c3:bc:fb:38:62:4e:6a:ee:20:3b:fc:a4:25:f4:d4:c9:04:
         6f:16:ed:8e:ef:06:1e:a5:c5:e4:66:36:56:ee:38:de:4a:6e:
         ae:69:77:96:74:66:9e:6f:14:ed:3b:3d:37:37:08:82:1f:93:
         a4:86:e3:70:6c:a3:ea:bb:1a:7c:a9:41:3f:c6:ef:a0:d6:4e:
         b7:71:e0:28:fd:c7:ab:96:32:d0:9e:97:4e:83:b2:ae:6e:c4:
         d2:ab:43:b3:7d:5a:af:da:18:78:0f:eb:96:48:ff:ae:c8:b2:
         29:d4:08:23:9a:81:9e:09:49:13:53:b5:97:0a:3e:6d:5b:b4:
         a3:4b:f1:1c:44:47:06:7c:a3:2b:51:ca:89:f2:56:8f:3f:bf:
         04:f2:13:92:e0:e3:d4:2a:7c:4c:0c:bf:2d:58:e8:6b:3e:b5:
         66:50:56:43
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE
NUZGQkQ4MzgwHhcNMjUxMDI0MTUwMDU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZiOTRhOC1mNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpYv6geJ6tHKBa8d95WHN5vrkcvQNkvZiCxVtCSnccN/xTcb+b2o+iDRqwaG
lCAr0Tt+PN0PYpXg01AYwFnMMCkVed9dCrdBrm9YJjvlFHSibH5T5gkCRn3T/k7G
IKgclcmOAZmudO6EZbtPL9t+uwgdKbpArYGpl9PhgTwpvX4DfffHSePnNVJX1zRq
RKCLzJ5iqKbvfBQrR07jHcY6gXQ7QjVqwoKmGhEbS7kOJbu9JEHQaYM6nj8MAQ3t
+sP3V8KXEnth4RcM/ZLHbs+gSpVU8Z4/l6qhzdUh2kWqfaYhnKdfkOuX9TuKV4we
4QzG/251Hmy/6P+4CfahTiOFPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNOVXaxg
q8YPXgN91nknss0Yx9DxMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE
OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODg5QjYvMzlBQTBBMDIxRDk2MTFFMkE2NTQ4RTdFMDhCMDJDRDIvMTBFMEYxODg0
RDBDMTFFRTgxMDAyMjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKG3QwDQYJKoZIhvcNAQELBQADggEBAGn4PVPdQ22obuCn
/Ht5mAj3MhUOyJaxDRcdc5c4WHMuYXrZ+SCxQCzv2sfyRBwIIYr6d8TZh+e9N2GN
LjNtgwYNMVQEdwk6zfrKQgS9Y0s1mXVxm5dvAl2Oa4nDvPs4Yk5q7iA7/KQl9NTJ
BG8W7Y7vBh6lxeRmNlbuON5Kbq5pd5Z0Zp5vFO07PTc3CIIfk6SG43Bso+q7Gnyp
QT/G76DWTrdx4Cj9x6uWMtCel06Dsq5uxNKrQ7N9Wq/aGHgP65ZI/67IsinUCCOa
gZ4JSRNTtZcKPm1btKNL8RxERwZ8oytRyonyVo8/vwTyE5Lg49QqfEwMvy1Y6Gs+
tWZQVkM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:23 2025 by rpki-client