Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
File:                     C2604920CFE011EE83247F7CC4F9AE02.roa (raw, json)
Hash identifier:          RlOQ1D2JU0zzfIovINRFiFEm6uvLmquY7AElz0gTShU=
Subject key identifier:   DD:04:32:56:01:D0:3A:AE:C2:24:AF:B1:1D:DA:3E:31:0C:74:C1:B7
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       0170
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
Signing time:             Thu 07 Aug 2025 04:41:42 +0000
ROA not before:           Thu 07 Aug 2025 04:41:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135661
IP address blocks:        103.62.232.0/24 maxlen: 24
                          103.62.233.0/24 maxlen: 24
                          103.62.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Aug  7 04:41:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68942e85-89e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:be:1b:c7:0b:86:8e:d5:c9:d5:a3:f4:3b:
                    18:76:5e:84:c4:56:1c:12:2e:a8:c3:31:21:40:01:
                    68:57:fa:14:e8:aa:78:09:6e:82:bf:bd:3f:ac:04:
                    34:a4:26:a8:78:30:5d:c4:44:22:28:8c:17:b0:f1:
                    d8:85:d7:af:1c:25:22:37:2a:09:1a:9d:ea:65:5f:
                    0b:3e:5c:58:10:b6:57:ff:bd:b5:da:c9:a5:5c:bf:
                    69:82:b8:96:7d:23:c7:d1:84:49:06:f7:7d:c1:52:
                    98:dc:8d:fc:31:df:48:18:63:a6:11:69:de:b7:ec:
                    b7:7a:9e:6e:45:5e:b7:89:00:77:17:67:17:62:f7:
                    81:cf:32:d7:a3:1b:31:3c:f0:be:37:61:65:19:dc:
                    de:0c:a5:6d:dd:9c:20:6b:01:22:f7:83:2f:5d:cd:
                    24:f4:33:6b:6c:27:ba:9d:7a:6a:3d:39:6e:31:39:
                    12:18:ff:1f:c2:cf:8d:6a:c6:bb:d1:04:26:da:75:
                    98:97:38:6b:7c:12:1d:bf:6c:a6:3d:88:a9:f1:af:
                    fc:80:34:3d:02:55:cb:dc:8e:3e:63:d6:11:df:93:
                    a9:b8:01:1b:4b:9a:bd:3c:06:f7:42:ed:5a:c2:f9:
                    48:42:7d:15:70:83:64:5d:80:a2:58:2f:43:9f:eb:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:32:56:01:D0:3A:AE:C2:24:AF:B1:1D:DA:3E:31:0C:74:C1:B7
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.232.0/23
                  103.62.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:1f:44:f6:30:c5:b3:05:4f:7f:ee:9c:1b:63:87:64:1d:
         15:d7:c8:cf:ab:24:d8:e6:b7:27:23:4d:ed:af:2c:d5:26:31:
         b2:a6:cc:67:ed:b3:b5:69:66:7c:3c:e0:a9:ff:56:05:5c:1d:
         20:13:30:b3:6f:61:cd:27:22:45:63:ab:30:01:23:84:a5:f9:
         47:2e:d4:26:3e:e2:14:1c:f0:e2:73:f0:ec:7e:ea:13:4c:ee:
         45:85:69:d0:f3:d2:dc:41:f1:6e:8e:ef:1d:62:33:48:63:18:
         0d:43:93:26:ec:13:49:bc:2a:d8:a8:79:97:0a:28:72:a4:fb:
         ef:ca:ee:e0:7e:63:05:9e:45:01:3a:27:d2:03:11:ec:a1:bc:
         a8:33:33:cb:71:ee:9e:95:dd:43:fe:a0:07:24:8f:b0:ea:38:
         a5:c6:5d:e5:eb:d8:02:77:65:5b:d3:cb:5d:25:a8:0c:58:0d:
         93:05:52:11:1d:d4:32:65:ed:8a:5c:b0:32:7c:af:2e:e1:cb:
         bd:18:10:b0:e1:07:bf:98:d5:b9:50:06:67:09:da:f1:f8:8b:
         78:5d:69:67:9a:9d:29:64:14:bd:04:11:38:1a:ea:07:40:5d:
         b7:ab:3c:25:5b:dc:49:3b:4a:36:f2:ac:78:37:25:59:99:c7:
         28:20:ae:eb
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD
MEExOEYzOTQwHhcNMjUwODA3MDQ0MTQxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk0MmU4NS04OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9m+G8cLho7VydWj9DsYdl6ExFYcEi6owzEhQAFoV/oU6Kp4CW6Cv70/rAQ0
pCaoeDBdxEQiKIwXsPHYhdevHCUiNyoJGp3qZV8LPlxYELZX/7212smlXL9pgriW
fSPH0YRJBvd9wVKY3I38Md9IGGOmEWnet+y3ep5uRV63iQB3F2cXYveBzzLXoxsx
PPC+N2FlGdzeDKVt3ZwgawEi94MvXc0k9DNrbCe6nXpqPTluMTkSGP8fws+Nasa7
0QQm2nWYlzhrfBIdv2ymPYip8a/8gDQ9AlXL3I4+Y9YR35OpuAEbS5q9PAb3Qu1a
wvlIQn0VcINkXYCiWC9Dn+vytQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN0EMlYB
0DquwiSvsR3aPjEMdMG3MB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw
REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCRDYvQUJGODczMDI1MERDMTFFRUEzRjNEMzRFQzRGOUFFMDIvQzI2MDQ5MjBD
RkUwMTFFRTgzMjQ3RjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnPugDBABnPuswDQYJKoZIhvcNAQELBQADggEBAHamH0T2
MMWzBU9/7pwbY4dkHRXXyM+rJNjmtycjTe2vLNUmMbKmzGfts7VpZnw84Kn/VgVc
HSATMLNvYc0nIkVjqzABI4Sl+Ucu1CY+4hQc8OJz8Ox+6hNM7kWFadDz0txB8W6O
7x1iM0hjGA1DkybsE0m8KtioeZcKKHKk++/K7uB+YwWeRQE6J9IDEeyhvKgzM8tx
7p6V3UP+oAckj7DqOKXGXeXr2AJ3ZVvTy10lqAxYDZMFUhEd1DJl7YpcsDJ8ry7h
y70YELDhB7+Y1blQBmcJ2vH4i3hdaWeanSlkFL0EETga6gdAXberPCVb3Ek7Sjby
rHg3JVmZxyggrus=
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:13 2025 by rpki-client