Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/24F87CC2810611EDA756F886C4F9AE02.roa
File:                     24F87CC2810611EDA756F886C4F9AE02.roa (raw, json)
Hash identifier:          FG8mZ0xSMI661bwpz8jXY8dYE+DuRrKVmBGsSUwXpCg=
Subject key identifier:   CD:7B:E0:7C:92:9B:26:F5:78:11:24:3A:20:FF:28:36:74:C8:44:63
Certificate issuer:       /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Certificate serial:       0218
Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/24F87CC2810611EDA756F886C4F9AE02.roa
Signing time:             Wed 29 Oct 2025 02:16:35 +0000
ROA not before:           Wed 29 Oct 2025 02:16:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134698
IP address blocks:        103.71.58.0/24 maxlen: 24
                          103.196.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
        Validity
            Not Before: Oct 29 02:16:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69017903-e382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:56:60:63:e2:fd:f6:67:b2:7b:b9:80:e3:
                    b7:8b:c2:e8:04:69:a1:84:23:09:21:15:16:26:be:
                    5f:50:de:d9:3b:4f:57:7e:14:28:08:97:02:d7:0a:
                    f2:39:c1:84:68:82:10:77:e8:6c:65:30:a6:fc:96:
                    11:fe:03:9e:7f:36:4c:cf:f5:a2:21:40:2a:bd:f3:
                    36:77:48:be:67:9d:a0:95:fd:23:ca:b6:47:f8:df:
                    29:16:58:f4:ea:ea:bb:bc:22:4a:d8:2e:c6:d3:84:
                    79:a3:c2:32:f3:3e:7e:4a:5f:46:73:b5:29:98:92:
                    a1:27:f1:ec:13:51:24:dc:a6:32:08:26:96:42:5b:
                    c0:de:7d:1b:48:44:42:77:04:73:14:a2:be:f9:6a:
                    2e:64:5b:df:95:5e:49:50:77:82:5f:5d:a9:8e:a8:
                    90:ea:19:00:df:e0:40:ca:b2:ed:8a:6f:18:7d:0e:
                    cc:b1:76:77:8e:90:18:2a:71:1e:97:8c:09:33:60:
                    20:8d:22:70:5a:e5:24:74:6e:45:10:48:b6:04:19:
                    9b:12:61:6e:81:f0:d1:45:09:a9:62:7e:4e:6b:ef:
                    69:9e:fa:91:c0:c4:6d:58:cc:ca:c0:5f:8f:29:7e:
                    25:9e:f9:cf:6b:7c:70:42:e8:45:3a:14:1a:31:f3:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7B:E0:7C:92:9B:26:F5:78:11:24:3A:20:FF:28:36:74:C8:44:63
            X509v3 Authority Key Identifier:
                keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/24F87CC2810611EDA756F886C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.58.0/24
                  103.196.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:a6:ae:2e:40:e2:fa:ba:dc:56:b8:80:43:ba:ad:d2:f5:
         58:95:03:22:c4:c8:43:e5:86:4d:2a:1a:ff:2e:9b:94:c1:38:
         e0:51:ce:c2:b5:d6:98:32:11:63:9d:4d:85:a4:14:3d:eb:8a:
         5c:e0:21:e0:76:a0:ef:4b:03:46:46:8c:61:d2:54:69:a5:bb:
         73:07:b1:a1:d0:dd:1c:0a:8a:d9:44:a6:69:2e:66:79:24:95:
         69:85:97:15:36:24:f8:1c:da:0f:d5:72:89:65:e5:e4:f4:09:
         66:ca:b6:c0:64:ca:1e:05:6e:b3:e0:ff:7c:fd:55:eb:be:e7:
         b5:b6:82:7c:ae:4b:2a:f7:46:9d:a2:f9:6c:c7:67:0c:2c:85:
         7d:fb:2e:b6:15:c9:24:94:fc:f0:45:75:9f:fc:3e:f7:da:bc:
         a9:5f:40:08:45:79:fc:63:bd:02:59:05:22:f4:85:6a:ba:6f:
         6f:29:bb:8e:c7:b6:8a:22:17:17:39:55:5e:ad:a3:14:e7:59:
         cf:84:20:2e:ba:fd:45:13:29:22:42:34:36:e2:28:c5:42:b0:
         74:2b:69:4c:01:99:3e:d5:31:96:fa:20:71:14:37:6f:b9:da:
         de:23:f9:a0:c8:01:12:62:19:67:a5:cb:82:f9:9e:21:79:00:
         0b:75:86:07
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1
NTMxQzI1NjYwHhcNMjUxMDI5MDIxNjM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAxNzkwMy1lMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruVWYGPi/fZnsnu5gOO3i8LoBGmhhCMJIRUWJr5fUN7ZO09XfhQoCJcC1wry
OcGEaIIQd+hsZTCm/JYR/gOefzZMz/WiIUAqvfM2d0i+Z52glf0jyrZH+N8pFlj0
6uq7vCJK2C7G04R5o8Iy8z5+Sl9Gc7UpmJKhJ/HsE1Ek3KYyCCaWQlvA3n0bSERC
dwRzFKK++WouZFvflV5JUHeCX12pjqiQ6hkA3+BAyrLtim8YfQ7MsXZ3jpAYKnEe
l4wJM2AgjSJwWuUkdG5FEEi2BBmbEmFugfDRRQmpYn5Oa+9pnvqRwMRtWMzKwF+P
KX4lnvnPa3xwQuhFOhQaMfNpIwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM174HyS
myb1eBEkOiD/KDZ0yERjMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx
MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDAwNzcvNTA2QUUyMzA4MTAzMTFFREE4NDdDRDg1QzRGOUFFMDIvMjRGODdDQzI4
MTA2MTFFREE3NTZGODg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnRzoDBABnxMMwDQYJKoZIhvcNAQELBQADggEBAHjKpq4u
QOL6utxWuIBDuq3S9ViVAyLEyEPlhk0qGv8um5TBOOBRzsK11pgyEWOdTYWkFD3r
ilzgIeB2oO9LA0ZGjGHSVGmlu3MHsaHQ3RwKitlEpmkuZnkklWmFlxU2JPgc2g/V
coll5eT0CWbKtsBkyh4FbrPg/3z9Veu+57W2gnyuSyr3Rp2i+WzHZwwshX37LrYV
ySSU/PBFdZ/8PvfavKlfQAhFefxjvQJZBSL0hWq6b28pu47HtooiFxc5VV6toxTn
Wc+EIC66/UUTKSJCNDbiKMVCsHQraUwBmT7VMZb6IHEUN2+52t4j+aDIARJiGWel
y4L5niF5AAt1hgc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 12:41:48 2025 by rpki-client