Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E49D45ACB21E11F0ACF5A626C4F9AE02.roa
File:                     E49D45ACB21E11F0ACF5A626C4F9AE02.roa (raw, json)
Hash identifier:          yoAsDgUcwh7OeTTb7ZFIUtv4oOQTymeVGdrIDrX/rf4=
Subject key identifier:   5B:95:CA:2C:AE:16:4F:7C:0D:7E:94:99:A2:30:AA:4D:9A:E8:E3:04
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F00
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E49D45ACB21E11F0ACF5A626C4F9AE02.roa
Signing time:             Sun 26 Oct 2025 03:50:20 +0000
ROA not before:           Sun 26 Oct 2025 03:50:20 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149076
IP address blocks:        103.180.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20224 (0x4f00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct 26 03:50:20 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68fd9a7c-105a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:a8:87:4b:9b:32:a1:4c:f5:a8:5e:f2:96:
                    d5:13:ea:fe:79:38:fe:30:98:be:8b:37:61:ff:a0:
                    49:4e:20:d5:7d:ae:7c:c4:21:72:2b:49:e4:23:2c:
                    35:27:a3:7c:d8:fc:f1:16:a3:2d:2c:e5:08:e9:66:
                    1e:91:cd:30:be:10:05:e3:39:10:ea:76:0c:31:e5:
                    75:46:35:de:df:aa:ef:ef:af:85:0e:24:a3:83:38:
                    1c:1a:b8:18:d8:c3:80:d5:b3:39:fa:dd:db:be:1c:
                    f5:c1:e7:60:e4:13:bf:01:be:d4:61:1a:08:1d:48:
                    17:14:e4:a4:39:bc:fc:b9:73:a3:52:d9:d1:ca:2e:
                    7b:db:e5:03:30:36:de:ac:ee:62:af:d5:81:93:d3:
                    3a:59:ec:e6:71:fb:2b:8e:bb:75:21:d1:61:4c:f6:
                    a0:be:79:e5:6e:50:e9:ba:dd:0a:5b:93:35:74:c5:
                    92:ca:04:2c:b1:16:63:bc:81:c6:dc:52:f5:9c:a7:
                    51:21:62:f7:55:da:14:e0:08:1b:be:8c:6f:b7:81:
                    de:b3:c3:68:f0:1b:8f:a1:2b:d4:56:bc:bb:68:7e:
                    c9:e2:6e:44:ad:e7:81:8f:a8:25:b1:d0:50:56:f3:
                    7b:ae:a7:20:68:ac:24:0b:09:e5:27:fa:aa:2b:0a:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:CA:2C:AE:16:4F:7C:0D:7E:94:99:A2:30:AA:4D:9A:E8:E3:04
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E49D45ACB21E11F0ACF5A626C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:0a:12:78:bd:ad:86:ff:ec:8b:5e:ef:d5:32:69:9a:23:82:
         4d:51:3e:5e:35:8d:30:2f:42:99:1e:00:6a:c8:c0:69:51:0d:
         ad:09:37:2e:de:dd:87:69:13:b7:b4:5c:da:ce:24:cb:55:d4:
         32:ee:92:31:0b:76:72:4f:e5:53:4d:fd:f6:9b:96:11:f6:a0:
         fe:fb:e6:cc:4e:f2:d2:84:4f:2f:7d:4e:88:f3:0c:25:2b:11:
         fb:00:40:c9:65:8d:d6:5c:9a:33:3d:c4:10:0f:55:0a:d7:ea:
         90:75:ae:2b:b0:b9:ca:2e:5c:42:c6:83:b8:13:0d:a5:76:ae:
         ec:b9:80:60:87:83:4a:b8:88:a0:59:69:61:d4:59:52:85:b2:
         2d:0c:79:5d:ae:57:bd:a0:37:54:1c:0a:f4:68:89:0f:be:6c:
         fe:ec:a9:ba:79:38:25:fc:b7:49:91:20:c9:0c:a3:44:01:09:
         9a:42:8b:ab:a3:ad:fc:15:d0:46:08:68:70:fd:46:96:f0:ee:
         79:89:4c:37:1a:c0:32:78:d5:52:00:e0:2d:d4:a1:d2:ab:0d:
         51:3e:65:b4:52:55:2c:b8:65:3d:3b:10:11:9b:d4:9d:b6:c3:
         5a:f6:d1:6c:66:dc:89:a8:bf:ad:85:56:f2:ee:f2:8d:d3:6d:
         18:55:21:26
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUxMDI2MDM1MDIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZkOWE3Yy0xMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnOoh0ubMqFM9ahe8pbVE+r+eTj+MJi+izdh/6BJTiDVfa58xCFyK0nkIyw1
J6N82PzxFqMtLOUI6WYekc0wvhAF4zkQ6nYMMeV1RjXe36rv76+FDiSjgzgcGrgY
2MOA1bM5+t3bvhz1wedg5BO/Ab7UYRoIHUgXFOSkObz8uXOjUtnRyi572+UDMDbe
rO5ir9WBk9M6Wezmcfsrjrt1IdFhTPagvnnlblDput0KW5M1dMWSygQssRZjvIHG
3FL1nKdRIWL3VdoU4Agbvoxvt4Hes8No8BuPoSvUVry7aH7J4m5EreeBj6glsdBQ
VvN7rqcgaKwkCwnlJ/qqKwr9MwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFuVyiyu
Fk98DX6UmaIwqk2a6OMEMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTQ5RDQ1QUNC
MjFFMTFGMEFDRjVBNjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntIwwDQYJKoZIhvcNAQELBQADggEBADwKEni9rYb/7Ite
79UyaZojgk1RPl41jTAvQpkeAGrIwGlRDa0JNy7e3YdpE7e0XNrOJMtV1DLukjEL
dnJP5VNN/fablhH2oP775sxO8tKETy99TojzDCUrEfsAQMlljdZcmjM9xBAPVQrX
6pB1riuwucouXELGg7gTDaV2ruy5gGCHg0q4iKBZaWHUWVKFsi0MeV2uV72gN1Qc
CvRoiQ++bP7sqbp5OCX8t0mRIMkMo0QBCZpCi6ujrfwV0EYIaHD9Rpbw7nmJTDca
wDJ41VIA4C3UodKrDVE+ZbRSVSy4ZT07EBGb1J22w1r20Wxm3Imov62FVvLu8o3T
bRhVISY=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:12 2025 by rpki-client