Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
File:                     73BCF8A4641B11ED9E27D420C4F9AE02.roa (raw, json)
Hash identifier:          sW/xU2xd7gm9tlqUAnfY9Als6pZN4jL2w2smoAHwp6s=
Subject key identifier:   CE:DB:05:2F:0D:43:20:63:69:70:EE:F9:B9:CA:B6:85:F6:62:66:E8
Certificate issuer:       /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial:       0299
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 01:46:25 +0000
ROA not before:           Mon 03 Nov 2025 01:46:25 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     63526
IP address blocks:        103.205.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
        Validity
            Not Before: Nov  3 01:46:25 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=69080971-0408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:3d:9c:e7:a8:d4:3f:03:a2:cd:3d:bb:3a:
                    f0:c1:53:6b:c2:93:40:10:85:f4:e2:8a:b0:42:66:
                    ce:bb:05:77:e4:b3:50:f5:d7:b6:a3:9f:55:db:2b:
                    33:bd:8f:da:0f:77:c7:1f:b3:91:13:2f:2c:25:eb:
                    89:0d:89:3e:01:90:8b:d8:a9:73:b2:1d:a0:23:c9:
                    0b:09:be:08:ed:f3:0d:29:05:d9:60:26:ae:f3:d2:
                    1b:72:f3:f6:6c:b0:67:c5:d1:55:e1:6c:da:18:24:
                    66:64:70:21:1c:84:c5:4c:7a:27:7d:c2:78:ee:30:
                    aa:00:13:66:8a:5a:5c:05:f4:0f:9a:36:14:1d:65:
                    47:81:ca:e3:a4:1c:64:2b:0c:b3:d8:24:65:67:89:
                    d5:81:13:78:f7:09:c7:cd:63:f9:14:13:7f:1d:24:
                    9d:3e:fc:ac:30:5d:a3:4c:31:67:dc:e5:8e:4c:9c:
                    94:71:0f:af:1f:52:c1:43:a8:ca:98:53:a2:2d:15:
                    dc:76:1b:d1:79:be:d9:9f:aa:2a:fc:af:d2:68:36:
                    58:0f:c6:03:fe:f7:00:3c:fc:e5:84:6e:ce:32:da:
                    3e:a0:83:48:e0:fa:6e:67:94:51:83:60:aa:89:41:
                    3d:07:b9:a7:3f:0c:6b:c4:f7:91:7a:3d:b0:18:75:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:05:2F:0D:43:20:63:69:70:EE:F9:B9:CA:B6:85:F6:62:66:E8
            X509v3 Authority Key Identifier:
                keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/73BCF8A4641B11ED9E27D420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d4:88:c6:72:c1:6a:16:3b:17:94:42:79:35:c1:91:fe:46:
         d5:f3:6d:41:54:f2:8b:f1:77:07:54:ca:13:ab:b2:e5:95:0d:
         05:d7:9f:d2:0f:76:40:32:33:fb:73:85:62:82:98:e4:b6:67:
         70:f0:55:93:8b:4e:16:9a:f0:53:99:dd:00:90:08:8f:d1:f0:
         7a:d5:7f:68:c3:22:cb:ae:07:e4:dc:4c:a4:57:5c:60:5f:2b:
         3e:f8:e9:65:1e:a0:26:a2:f0:cf:31:1e:cf:e3:66:eb:67:49:
         ed:b9:95:7a:8e:78:16:d4:a5:59:13:19:98:d7:d1:fb:85:c4:
         34:6d:bd:d2:33:d5:b4:3e:35:44:a3:ec:14:9d:c9:e1:f4:64:
         6b:06:7c:66:da:09:1b:93:a5:54:16:c9:c9:a7:1b:f3:53:a2:
         ab:06:9b:85:86:f9:7f:dd:7f:0f:96:26:48:0b:66:08:b8:3e:
         52:6e:75:a9:e6:a6:0c:dd:92:53:bc:54:0a:12:08:e8:92:e6:
         64:19:ae:96:87:ec:2b:28:5e:f4:f5:7c:19:a1:46:62:59:0f:
         c6:05:7e:42:98:f7:95:31:9a:02:41:f0:59:79:30:31:a5:01:
         1f:fe:c6:ce:1a:a5:2a:a1:48:99:ca:af:c1:a7:9c:77:ba:50:
         0e:e6:b2:5d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0
OTk5QjNDMzQwHhcNMjUxMTAzMDE0NjI1WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA4MDk3MS0wNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0R49nOeo1D8Dos09uzrwwVNrwpNAEIX04oqwQmbOuwV35LNQ9de2o59V2ysz
vY/aD3fHH7OREy8sJeuJDYk+AZCL2Klzsh2gI8kLCb4I7fMNKQXZYCau89IbcvP2
bLBnxdFV4WzaGCRmZHAhHITFTHonfcJ47jCqABNmilpcBfQPmjYUHWVHgcrjpBxk
Kwyz2CRlZ4nVgRN49wnHzWP5FBN/HSSdPvysMF2jTDFn3OWOTJyUcQ+vH1LBQ6jK
mFOiLRXcdhvReb7Zn6oq/K/SaDZYD8YD/vcAPPzlhG7OMto+oINI4PpuZ5RRg2Cq
iUE9B7mnPwxrxPeRej2wGHUJdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM7bBS8N
QyBjaXDu+bnKtoX2YmboMB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1
MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ
RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRCRDAvNkY1MDE3NTYyNTBBMTFFREI1Mzk5OTc5QzRGOUFFMDIvNzNCQ0Y4QTQ2
NDFCMTFFRDlFMjdENDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnzSUwDQYJKoZIhvcNAQELBQADggEBAH7UiMZywWoWOxeU
Qnk1wZH+RtXzbUFU8ovxdwdUyhOrsuWVDQXXn9IPdkAyM/tzhWKCmOS2Z3DwVZOL
Thaa8FOZ3QCQCI/R8HrVf2jDIsuuB+TcTKRXXGBfKz746WUeoCai8M8xHs/jZutn
Se25lXqOeBbUpVkTGZjX0fuFxDRtvdIz1bQ+NUSj7BSdyeH0ZGsGfGbaCRuTpVQW
ycmnG/NToqsGm4WG+X/dfw+WJkgLZgi4PlJudanmpgzdklO8VAoSCOiS5mQZrpaH
7CsoXvT1fBmhRmJZD8YFfkKY95UxmgJB8Fl5MDGlAR/+xs4apSqhSJnKr8GnnHe6
UA7msl0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:47:13 2025 by rpki-client