Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
File:                     4F445CCE1FF311F0833FC50BC4F9AE02.roa (raw, json)
Hash identifier:          lZkWd47Uz2uf21zAmsLBWU8pUQNaeJCjWHd7MjYuTT0=
Subject key identifier:   D3:6B:A4:E8:DD:A3:65:BE:12:4C:D4:04:F7:11:15:96:A2:0C:8D:47
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       0188
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
Signing time:             Thu 23 Oct 2025 05:51:38 +0000
ROA not before:           Thu 23 Oct 2025 05:51:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.131.106.0/24 maxlen: 24
                          103.142.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Oct 23 05:51:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f9c26a-1a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:7d:04:67:da:29:25:5f:fd:b3:e5:7d:be:
                    23:45:16:58:98:54:61:76:53:32:e1:c5:12:5d:f4:
                    80:af:97:65:f2:1f:56:5e:26:23:a4:5f:1f:5c:02:
                    02:f5:79:c6:2e:79:c1:6d:97:7f:67:9f:16:e7:ea:
                    46:23:37:e7:8e:aa:7a:83:d0:08:5d:08:7e:3d:2c:
                    b2:79:a0:e2:f8:42:5e:07:f5:22:0f:a1:34:be:5d:
                    50:42:53:a9:1d:96:25:83:d9:39:1d:c1:e6:ea:33:
                    17:31:fb:47:f1:e3:e3:3f:4f:62:51:71:f6:b5:58:
                    c9:21:ed:ec:97:92:8b:42:10:95:b0:18:b6:b9:ce:
                    c4:cb:6f:9f:1b:75:cd:cc:21:a9:45:8e:1c:93:c1:
                    30:b6:82:9a:1b:7e:2e:0c:d4:39:06:30:0d:e4:2c:
                    59:2c:28:97:f8:77:08:b4:09:ab:1c:5e:9c:1e:22:
                    fc:09:a4:98:dd:9d:8c:ad:ef:8a:b3:20:d4:61:18:
                    c7:ed:58:cd:e7:b4:cc:03:e9:98:52:48:8e:4c:8e:
                    2e:8a:c9:32:85:78:19:f1:4f:c5:b2:dc:d7:d2:83:
                    30:8e:23:de:1b:95:f0:c3:ff:de:a2:cf:8b:17:20:
                    23:e6:5d:7c:90:4a:6c:36:b0:c6:72:61:fc:81:74:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6B:A4:E8:DD:A3:65:BE:12:4C:D4:04:F7:11:15:96:A2:0C:8D:47
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.106.0/24
                  103.142.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:a4:c9:9e:3b:60:51:8b:5d:8e:45:24:af:bf:e8:6b:12:
         20:0e:dd:9f:18:09:10:85:10:41:1c:68:64:99:d4:4c:02:4c:
         f3:73:fc:44:8c:0c:2f:c2:4c:18:2f:ed:44:27:be:66:fa:44:
         60:66:d2:9f:7b:92:fe:79:98:53:43:c9:0a:b7:17:5b:bf:8c:
         94:93:27:b8:f3:ff:cf:5c:be:73:bf:2a:43:7e:b8:6e:fb:06:
         96:b0:c2:01:a6:5d:43:c6:f4:dd:2a:c4:72:25:ad:b7:83:24:
         1d:0c:9e:78:f2:ee:eb:eb:6b:96:3e:9f:bf:b3:e3:fa:9c:7e:
         7b:4c:22:5d:b1:a9:ea:51:fa:cc:1e:c2:d8:37:c6:62:2a:55:
         e8:c3:e1:5d:50:f0:d2:12:0f:43:d0:2d:db:87:2a:8a:77:8a:
         37:51:2c:ef:ae:6a:5a:6b:22:1b:cc:66:f6:14:1b:fd:36:c4:
         8d:2a:7d:1f:be:4b:78:29:fd:3d:35:e7:6b:9e:43:5d:52:a9:
         da:a4:2b:11:ef:23:71:eb:8b:6d:37:8a:07:29:3b:e9:22:da:
         57:d0:ad:e7:50:c8:0e:e5:1a:aa:2a:ba:60:d3:e6:ab:44:31:
         60:30:c2:11:e8:12:36:23:e0:51:7e:e4:b8:a3:65:9e:7f:9f:
         ec:c3:f5:5a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2
QjMyOEFBOUIwHhcNMjUxMDIzMDU1MTM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGY5YzI2YS0xYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu719BGfaKSVf/bPlfb4jRRZYmFRhdlMy4cUSXfSAr5dl8h9WXiYjpF8fXAIC
9XnGLnnBbZd/Z58W5+pGIzfnjqp6g9AIXQh+PSyyeaDi+EJeB/UiD6E0vl1QQlOp
HZYlg9k5HcHm6jMXMftH8ePjP09iUXH2tVjJIe3sl5KLQhCVsBi2uc7Ey2+fG3XN
zCGpRY4ck8EwtoKaG34uDNQ5BjAN5CxZLCiX+HcItAmrHF6cHiL8CaSY3Z2Mre+K
syDUYRjH7VjN57TMA+mYUkiOTI4uiskyhXgZ8U/FstzX0oMwjiPeG5Xww//eos+L
FyAj5l18kEpsNrDGcmH8gXRsaQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNNrpOjd
o2W+EkzUBPcRFZaiDI1HMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4
QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI2RkIvMTFDRDFCNkU2OEJDMTFFRTkyMEVEQjREQzRGOUFFMDIvNEY0NDVDQ0Ux
RkYzMTFGMDgzM0ZDNTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABng2oDBABnjqAwDQYJKoZIhvcNAQELBQADggEBAD17pMme
O2BRi12ORSSvv+hrEiAO3Z8YCRCFEEEcaGSZ1EwCTPNz/ESMDC/CTBgv7UQnvmb6
RGBm0p97kv55mFNDyQq3F1u/jJSTJ7jz/89cvnO/KkN+uG77BpawwgGmXUPG9N0q
xHIlrbeDJB0Mnnjy7uvra5Y+n7+z4/qcfntMIl2xqepR+swewtg3xmIqVejD4V1Q
8NISD0PQLduHKop3ijdRLO+ualprIhvMZvYUG/02xI0qfR++S3gp/T0152ueQ11S
qdqkKxHvI3Hri203igcpO+ki2lfQredQyA7lGqoqumDT5qtEMWAwwhHoEjYj4FF+
5LijZZ5/n+zD9Vo=
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:00:09 2025 by rpki-client