Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
File:                     8E4647E6EB2911EB9891D01DC4F9AE02.roa (raw, json)
Hash identifier:          ORDwcUk6C17rG0Rjjv65wOFUqorGmDWrJEH1nGvJDz0=
Subject key identifier:   54:42:37:D0:99:5F:7F:59:CF:36:C9:6D:B0:AC:D4:D8:03:27:CB:80
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0D0D
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
Signing time:             Wed 30 Jul 2025 18:28:20 +0000
ROA not before:           Wed 30 Jul 2025 18:28:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.80.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3341 (0xd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Jul 30 18:28:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688a6443-2532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:dd:3f:1a:d7:5c:bd:c6:6e:0b:3c:9a:f1:
                    3b:41:e0:94:db:0e:5e:46:d0:14:c8:c7:1c:e0:45:
                    b2:d1:97:a4:3a:34:6d:71:af:4b:70:cc:c2:00:36:
                    fa:26:66:ae:60:00:a1:bc:ed:09:0e:bc:fb:51:28:
                    9b:48:af:ca:29:10:76:28:40:05:2e:dd:f2:39:4d:
                    eb:6a:cf:a2:ec:03:56:32:05:93:fe:01:73:66:d9:
                    7c:20:b4:99:e3:80:65:e4:70:e2:40:f9:81:7f:74:
                    bd:5d:bd:9a:21:47:8a:48:b8:5f:f9:52:6e:67:4b:
                    e8:97:3d:57:e1:50:15:73:b5:db:ee:1e:76:3c:f4:
                    13:47:3a:bb:a5:f0:09:52:46:c9:b3:03:a1:39:61:
                    a0:3c:02:c6:7c:e1:1d:09:9f:70:ab:e9:a7:29:71:
                    cd:e3:68:24:63:4e:f6:5d:e9:0a:d4:b9:3c:56:63:
                    19:c6:17:75:af:c2:b8:23:af:a0:fd:ea:43:7e:5c:
                    30:e5:ee:84:ce:a1:9b:eb:54:fb:73:fb:68:2c:4b:
                    cd:95:7d:12:4b:05:d3:51:5e:86:1b:00:6b:44:09:
                    60:1d:1c:67:e7:ff:54:db:84:55:4e:e3:97:3f:16:
                    98:91:41:29:60:6a:40:a3:7c:df:9c:13:31:cf:4b:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:37:D0:99:5F:7F:59:CF:36:C9:6D:B0:AC:D4:D8:03:27:CB:80
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:2f:97:54:42:a4:82:cf:38:78:25:be:8a:81:c4:4c:bc:
         c3:21:c5:91:93:36:b6:55:9c:6f:67:e2:2d:2b:ab:c0:01:a9:
         52:b6:1e:06:43:ff:cb:3b:a9:a9:79:b7:0d:0e:89:0b:1a:e5:
         64:7f:a3:f7:f9:68:55:c6:40:eb:40:a0:23:8a:58:28:e6:e6:
         b7:76:de:c0:73:a6:5a:32:ea:6b:73:d8:c7:ae:a6:ce:ce:95:
         37:c1:cd:27:75:60:52:1f:7a:4c:53:5c:10:10:c3:1a:c3:43:
         45:e1:df:43:a5:3f:4b:d9:6a:59:8b:97:56:9f:e0:b2:36:7d:
         8b:00:f9:70:f5:fb:2f:9d:cb:01:40:76:0b:a9:56:e3:52:79:
         60:e4:c7:1c:ee:b2:2f:70:81:1f:5e:6b:d4:06:6b:ff:bb:f0:
         9b:cf:df:78:cb:49:1e:49:0c:3d:aa:29:25:36:e9:f2:2d:28:
         48:ae:13:da:b0:af:ec:41:b5:35:ea:cb:07:fa:e4:17:ae:4d:
         8c:e1:3f:3a:c5:46:0c:66:7e:b5:f1:01:82:76:fb:dd:fa:01:
         6e:b5:ad:d6:63:97:e5:ce:8c:67:2b:c9:f9:5b:03:86:ac:5d:
         e9:54:de:bc:a1:aa:c0:af:b9:f6:e8:44:f4:4a:0d:bc:da:8b:
         b9:9b:d7:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF
NTQ0NUU5Q0MwHhcNMjUwNzMwMTgyODIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhhNjQ0My0yNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHrdPxrXXL3Gbgs8mvE7QeCU2w5eRtAUyMcc4EWy0ZekOjRtca9LcMzCADb6
JmauYAChvO0JDrz7USibSK/KKRB2KEAFLt3yOU3ras+i7ANWMgWT/gFzZtl8ILSZ
44Bl5HDiQPmBf3S9Xb2aIUeKSLhf+VJuZ0volz1X4VAVc7Xb7h52PPQTRzq7pfAJ
UkbJswOhOWGgPALGfOEdCZ9wq+mnKXHN42gkY072XekK1Lk8VmMZxhd1r8K4I6+g
/epDflww5e6EzqGb61T7c/toLEvNlX0SSwXTUV6GGwBrRAlgHRxn5/9U24RVTuOX
PxaYkUEpYGpAo3zfnBMxz0v9dwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFRCN9CZ
X39ZzzbJbbCs1NgDJ8uAMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5
RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcwRUQvRTYyNzdBM0VFOUUxMTFFOUE1OTg3RTFGQzRGOUFFMDIvOEU0NjQ3RTZF
QjI5MTFFQjk4OTFEMDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnUAYwDQYJKoZIhvcNAQELBQADggEBACzEL5dUQqSCzzh4
Jb6KgcRMvMMhxZGTNrZVnG9n4i0rq8ABqVK2HgZD/8s7qal5tw0OiQsa5WR/o/f5
aFXGQOtAoCOKWCjm5rd23sBzploy6mtz2Meups7OlTfBzSd1YFIfekxTXBAQwxrD
Q0Xh30OlP0vZalmLl1af4LI2fYsA+XD1+y+dywFAdgupVuNSeWDkxxzusi9wgR9e
a9QGa/+78JvP33jLSR5JDD2qKSU26fItKEiuE9qwr+xBtTXqywf65BeuTYzhPzrF
RgxmfrXxAYJ2+936AW61rdZjl+XOjGcryflbA4asXelU3ryhqsCvufboRPRKDbza
i7mb16o=
-----END CERTIFICATE-----
Generated at Sun Aug 10 19:00:16 2025 by rpki-client