Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
File:                     4F153D60719511F0A684963CC4F9AE02.roa (raw, json)
Hash identifier:          Qdk0XM/e7CFwGkgkffYJcSQIfyDDrObbUxfebzUoWFI=
Subject key identifier:   2E:5D:56:2F:53:C3:F3:5C:B5:84:8E:F9:2E:49:EB:7C:1A:85:71:48
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0B8F
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 19:08:51 +0000
ROA not before:           Sun 02 Nov 2025 19:08:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132827
IP address blocks:        103.11.6.0/24 maxlen: 24
                          103.11.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov  2 19:08:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907ac42-f55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:51:d8:15:5c:6a:15:f7:2b:c1:97:c4:69:
                    ff:fd:a5:f7:7b:a3:ad:13:22:77:c8:7f:fc:23:b4:
                    0e:32:1b:45:ea:b8:b3:45:59:1a:3f:3a:c9:ae:d2:
                    c3:db:f7:7a:ee:83:1f:11:8d:72:cd:83:ff:59:cf:
                    36:e1:46:99:9d:b0:e0:1f:18:1f:65:72:01:b2:92:
                    b0:6a:17:61:d4:31:dc:b5:13:da:5b:ba:e3:8a:b4:
                    c1:73:57:f4:a8:b9:a1:66:42:7f:90:47:40:9d:d4:
                    6b:44:ee:71:18:78:55:45:5d:40:a2:f5:d7:5e:35:
                    53:f8:6e:5b:5f:24:7c:a7:ef:0f:ea:ee:32:8a:74:
                    b6:8c:c3:07:ca:90:b2:7c:3c:29:69:ac:3e:d6:0e:
                    ac:a8:b7:81:58:ae:bc:f6:fc:28:b4:91:33:0e:03:
                    61:8f:02:39:e4:02:fc:40:3d:e1:50:1c:3b:98:de:
                    a0:52:f8:0a:94:b2:d2:5a:ef:a5:17:9f:b7:4b:82:
                    ca:81:3c:e0:e6:6c:8d:42:ba:6f:b3:48:e8:72:d0:
                    30:0e:c4:ae:2a:08:fb:77:cc:7f:fe:97:ce:7d:ca:
                    77:26:75:46:9f:86:98:6a:4d:1b:29:5e:14:8b:c9:
                    17:65:68:82:5d:1a:c8:60:13:47:a7:3a:17:ef:78:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5D:56:2F:53:C3:F3:5C:B5:84:8E:F9:2E:49:EB:7C:1A:85:71:48
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:6a:4c:40:82:69:26:59:eb:23:1a:4e:dc:f0:57:65:62:
         f2:d4:70:34:65:eb:dc:d7:da:bb:42:60:e4:2c:f7:0b:ff:fa:
         21:5b:c1:d1:f7:73:35:5f:23:11:ca:bb:2d:af:15:2d:ba:41:
         fb:f2:77:be:d7:2a:b1:fa:0b:bd:8e:32:57:4c:66:f3:bf:09:
         c6:7c:ed:f2:b7:5b:84:31:57:49:85:89:e9:af:6b:97:e6:8b:
         77:f4:f6:3c:af:14:6a:b4:26:2d:35:27:4b:ba:a3:51:89:99:
         20:db:d1:bb:9d:65:44:23:17:d5:39:f9:03:7f:8d:ce:92:7a:
         5f:6e:2e:ac:8e:0b:38:cb:34:9b:26:23:98:7a:ca:e9:ea:d1:
         66:04:35:c3:c3:b5:68:08:c9:dd:eb:0f:42:2d:ca:a0:de:0f:
         f7:bc:b8:9f:72:55:d2:b1:a1:79:d8:26:06:3f:55:8e:db:1f:
         dd:e8:f1:08:f3:aa:82:ef:68:e7:17:23:22:f6:a8:f2:23:12:
         65:c1:a3:68:c6:3b:1d:f7:a7:27:05:10:a3:9d:da:39:97:fe:
         49:ff:b3:19:2c:1e:b4:d5:59:22:4f:c0:19:2c:4a:e7:c3:ac:
         26:12:d4:da:94:47:0c:33:32:10:5d:f4:ea:86:b2:7d:55:18:
         84:30:76:5d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF
MUNCOEZFRTUwHhcNMjUxMTAyMTkwODUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3YWM0Mi1mNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxptR2BVcahX3K8GXxGn//aX3e6OtEyJ3yH/8I7QOMhtF6rizRVkaPzrJrtLD
2/d67oMfEY1yzYP/Wc824UaZnbDgHxgfZXIBspKwahdh1DHctRPaW7rjirTBc1f0
qLmhZkJ/kEdAndRrRO5xGHhVRV1AovXXXjVT+G5bXyR8p+8P6u4yinS2jMMHypCy
fDwpaaw+1g6sqLeBWK689vwotJEzDgNhjwI55AL8QD3hUBw7mN6gUvgKlLLSWu+l
F5+3S4LKgTzg5myNQrpvs0joctAwDsSuKgj7d8x//pfOfcp3JnVGn4aYak0bKV4U
i8kXZWiCXRrIYBNHpzoX73iREwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC5dVi9T
w/NctYSO+S5J63wahXFIMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx
NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvNEYxNTNENjA3
MTk1MTFGMEE2ODQ5NjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnCwYwDQYJKoZIhvcNAQELBQADggEBADBOakxAgmkmWesj
Gk7c8FdlYvLUcDRl69zX2rtCYOQs9wv/+iFbwdH3czVfIxHKuy2vFS26Qfvyd77X
KrH6C72OMldMZvO/CcZ87fK3W4QxV0mFiemva5fmi3f09jyvFGq0Ji01J0u6o1GJ
mSDb0budZUQjF9U5+QN/jc6Sel9uLqyOCzjLNJsmI5h6yunq0WYENcPDtWgIyd3r
D0ItyqDeD/e8uJ9yVdKxoXnYJgY/VY7bH93o8QjzqoLvaOcXIyL2qPIjEmXBo2jG
Ox33pycFEKOd2jmX/kn/sxksHrTVWSJPwBksSufDrCYS1NqURwwzMhBd9OqGsn1V
GIQwdl0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:29 2025 by rpki-client