Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa
File:                     D3843904F79D11ECAFF03840C4F9AE02.roa (raw, json)
Hash identifier:          G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=
Subject key identifier:   81:10:53:49:AE:B8:5E:CD:55:2D:05:EE:BC:7D:76:A8:1E:59:B9:06
Certificate issuer:       /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
Certificate serial:       02D4
Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 03:08:45 +0000
ROA not before:           Fri 01 Aug 2025 03:08:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56264
IP address blocks:        103.190.74.0/24 maxlen: 24
                          103.190.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4
        Validity
            Not Before: Aug  1 03:08:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688c2fbd-b23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:c3:d2:0a:d5:83:7e:a7:88:53:90:94:5c:
                    2e:ba:38:6c:24:c9:3d:59:38:bd:c1:61:31:32:53:
                    bc:1e:71:a5:07:bb:28:86:31:77:2f:fd:d4:27:7e:
                    35:2c:c9:ab:f2:59:20:a2:76:76:a2:4e:b9:10:f4:
                    98:45:49:2a:7b:af:4f:f9:fc:98:03:cd:b4:91:a5:
                    1b:18:a5:c5:6b:12:2b:ab:b6:a3:1f:81:da:83:85:
                    dc:b1:78:84:9a:9e:a3:cf:76:dd:83:d1:41:05:98:
                    30:8f:2e:13:44:5c:2a:64:32:26:4e:49:b0:27:f2:
                    63:24:89:b2:db:32:d9:89:f9:f7:cf:35:ac:f6:88:
                    9d:a1:5b:84:0b:13:62:c7:e5:7c:e3:6c:3f:1d:3d:
                    3b:37:6e:1c:ed:ae:5d:5a:a5:67:ad:b7:f6:cd:c5:
                    95:2a:4a:84:c1:4e:ce:15:63:ed:cc:76:0f:59:16:
                    d1:12:8c:5c:93:3c:8d:a2:7e:12:09:2b:da:54:70:
                    22:20:18:f1:10:52:ca:d3:93:02:dc:19:a0:44:cf:
                    a1:d2:98:56:d0:89:cd:3d:10:2b:f0:96:e6:ec:ba:
                    91:63:42:4f:f2:83:9c:4e:67:b9:32:89:a8:37:8c:
                    97:47:10:ed:29:0c:9a:2c:21:ea:be:f9:26:cb:fa:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:10:53:49:AE:B8:5E:CD:55:2D:05:EE:BC:7D:76:A8:1E:59:B9:06
            X509v3 Authority Key Identifier:
                keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/D3843904F79D11ECAFF03840C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:cb:64:35:6d:39:e6:5b:aa:10:de:bf:4f:ce:65:66:72:d2:
         f4:5f:71:3d:4f:67:76:ee:b0:cd:f9:b1:89:6d:bd:f5:f1:e6:
         56:0b:94:eb:e4:10:60:90:ff:0a:62:eb:f4:1c:bd:7d:19:e8:
         c5:db:b7:73:25:06:43:11:39:ba:68:5e:c8:c4:da:01:ce:d5:
         6f:e0:7e:21:79:56:60:af:c1:9d:0b:dd:c1:de:9e:65:98:02:
         c9:61:71:03:4e:45:de:62:8a:9c:b8:a3:45:13:a4:f5:fd:fc:
         b8:82:b4:e0:59:a2:97:31:da:eb:66:51:6e:d4:35:76:fd:f8:
         f3:d9:65:4d:9d:c4:ca:bf:b1:d5:e7:ca:f8:a6:b7:2c:db:cd:
         85:c5:43:71:2c:5c:b9:b8:2c:8f:bf:36:e9:70:4a:6c:a1:54:
         0f:52:12:20:11:53:f1:db:d0:18:3a:b2:d5:be:bb:c8:b7:32:
         0f:df:b0:b7:23:11:a2:b0:95:fb:9b:ff:07:8a:1c:6f:1f:5a:
         8c:73:99:9c:df:5b:a3:2f:42:f4:51:9c:08:fa:bf:49:b8:b1:
         ff:f2:92:4b:5f:1d:81:42:ee:b3:a6:12:1f:14:f1:dd:1b:a8:
         31:54:8c:9d:04:5d:c4:46:43:91:f9:d0:1d:95:02:ac:9b:51:
         c6:00:66:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG
QkIwNzc3QzQwHhcNMjUwODAxMDMwODQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjMmZiZC1iMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzbnD0grVg36niFOQlFwuujhsJMk9WTi9wWExMlO8HnGlB7sohjF3L/3UJ341
LMmr8lkgonZ2ok65EPSYRUkqe69P+fyYA820kaUbGKXFaxIrq7ajH4Hag4XcsXiE
mp6jz3bdg9FBBZgwjy4TRFwqZDImTkmwJ/JjJImy2zLZifn3zzWs9oidoVuECxNi
x+V842w/HT07N24c7a5dWqVnrbf2zcWVKkqEwU7OFWPtzHYPWRbREoxckzyNon4S
CSvaVHAiIBjxEFLK05MC3BmgRM+h0phW0InNPRAr8Jbm7LqRY0JP8oOcTme5Momo
N4yXRxDtKQyaLCHqvvkmy/oR5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIEQU0mu
uF7NVS0F7rx9dqgeWbkGMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3
OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjAwMTcvNzYxNzFFNTRGNzk3MTFFQ0I0QzY2ODM1QzRGOUFFMDIvRDM4NDM5MDRG
NzlEMTFFQ0FGRjAzODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnvkowDQYJKoZIhvcNAQELBQADggEBAHDLZDVtOeZbqhDe
v0/OZWZy0vRfcT1PZ3busM35sYltvfXx5lYLlOvkEGCQ/wpi6/QcvX0Z6MXbt3Ml
BkMRObpoXsjE2gHO1W/gfiF5VmCvwZ0L3cHenmWYAslhcQNORd5iipy4o0UTpPX9
/LiCtOBZopcx2utmUW7UNXb9+PPZZU2dxMq/sdXnyvimtyzbzYXFQ3EsXLm4LI+/
NulwSmyhVA9SEiARU/Hb0Bg6stW+u8i3Mg/fsLcjEaKwlfub/weKHG8fWoxzmZzf
W6MvQvRRnAj6v0m4sf/ykktfHYFC7rOmEh8U8d0bqDFUjJ0EXcRGQ5H50B2VAqyb
UcYAZpU=
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:44:33 2025 by rpki-client