Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/0B936B04519A11F097B33C66C4F9AE02.roa
File:                     0B936B04519A11F097B33C66C4F9AE02.roa (raw, json)
Hash identifier:          1Y1ntLDIFXG0Y71B9AnkRxYD3oDia8ly4pVFW9UXge8=
Subject key identifier:   F8:14:B2:47:3C:AF:86:6A:71:7D:1D:A5:55:51:4B:40:38:31:D7:88
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       081B
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/0B936B04519A11F097B33C66C4F9AE02.roa
Signing time:             Mon 21 Jul 2025 02:56:41 +0000
ROA not before:           Mon 21 Jul 2025 02:56:41 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     40605
IP address blocks:        103.253.110.0/24 maxlen: 24
                          103.253.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Jul 21 02:56:41 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=687dac69-8511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:4c:6b:13:4d:88:09:46:c5:3a:76:c5:e5:
                    95:8d:7d:40:e5:54:9b:2c:f9:fa:84:fd:33:a8:ab:
                    3c:01:d3:e5:6c:6f:7a:ef:4e:e9:e8:f5:c1:eb:7a:
                    d6:2e:3b:6e:c3:8c:40:bf:10:fb:ee:8d:61:10:ee:
                    04:d5:30:2e:76:d1:71:40:a9:64:38:c2:2b:19:4e:
                    8e:f7:d7:8c:c2:c3:9c:7e:b3:a4:68:37:59:97:26:
                    60:90:96:e3:6a:4e:e5:db:58:84:f1:9a:ae:87:42:
                    68:49:b0:b4:3b:d3:bb:15:51:24:26:1e:34:49:9b:
                    6d:ae:df:75:34:50:23:c5:0e:21:81:55:59:9d:2b:
                    46:e2:c3:91:28:4f:d6:90:65:65:7e:d1:70:55:57:
                    5a:c1:6e:6a:b2:7a:96:e0:5f:fb:52:bd:b5:9f:ed:
                    f1:1d:29:49:27:46:57:2e:0d:60:21:e1:19:68:cc:
                    2f:81:20:6f:ad:9e:ab:c2:bb:db:a0:c2:bb:bd:c0:
                    e5:5c:75:77:88:e5:89:63:47:d5:c8:be:09:f3:b6:
                    f4:48:c6:6a:37:9b:47:11:41:16:5f:b3:e8:c9:b3:
                    7a:89:c5:76:60:dd:e3:8e:5f:33:c7:81:96:fa:b5:
                    83:23:2d:95:31:83:e3:39:6e:62:a4:29:29:3f:c3:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:B2:47:3C:AF:86:6A:71:7D:1D:A5:55:51:4B:40:38:31:D7:88
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/0B936B04519A11F097B33C66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:57:9d:08:98:aa:27:52:fc:b7:87:df:7e:e2:db:88:2b:30:
         42:60:e0:cd:92:34:92:18:70:9a:3a:18:86:b6:a9:f9:97:17:
         bd:74:02:dc:0c:4e:33:79:6d:d6:00:26:9a:11:38:0b:89:0c:
         db:4c:ca:ab:74:65:37:58:f5:09:cb:91:21:72:dc:05:62:84:
         a8:3d:7d:97:d8:39:07:7d:46:c5:a5:49:b8:30:bb:cf:ed:8f:
         e4:c4:a4:dc:8b:2c:a6:28:70:fd:b6:3d:70:6d:40:99:e0:79:
         67:10:57:67:8f:1b:fd:61:c1:40:34:3a:b9:42:98:8e:71:8c:
         1a:b8:b3:7d:65:f4:38:4c:31:01:78:e8:ba:2b:bb:6b:bd:9d:
         19:4e:58:8e:07:a1:1f:45:dc:73:7b:4a:5f:a0:de:99:18:45:
         b1:67:a4:bd:ba:51:c6:31:e4:c0:6f:61:92:09:e7:21:0b:50:
         0f:ff:2c:3e:3a:d9:88:82:05:cc:d3:58:a4:96:d8:ba:74:58:
         00:40:cf:f0:5f:c5:df:76:2a:ac:26:ee:6d:74:21:ea:30:cd:
         4e:e4:27:4c:87:7a:47:7f:08:31:ff:7c:d2:bc:ad:41:b1:c9:
         50:7d:46:40:4e:79:7e:f1:05:2b:d3:8d:9f:e2:83:88:7d:78:
         37:82:67:9d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1
MzIzM0U1OTUwHhcNMjUwNzIxMDI1NjQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODdkYWM2OS04NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNNMaxNNiAlGxTp2xeWVjX1A5VSbLPn6hP0zqKs8AdPlbG96707p6PXB63rW
Ljtuw4xAvxD77o1hEO4E1TAudtFxQKlkOMIrGU6O99eMwsOcfrOkaDdZlyZgkJbj
ak7l21iE8Zquh0JoSbC0O9O7FVEkJh40SZttrt91NFAjxQ4hgVVZnStG4sORKE/W
kGVlftFwVVdawW5qsnqW4F/7Ur21n+3xHSlJJ0ZXLg1gIeEZaMwvgSBvrZ6rwrvb
oMK7vcDlXHV3iOWJY0fVyL4J87b0SMZqN5tHEUEWX7PoybN6icV2YN3jjl8zx4GW
+rWDIy2VMYPjOW5ipCkpP8PhSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPgUskc8
r4ZqcX0dpVVRS0A4MdeIMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2
QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvMEI5MzZCMDQ1
MTlBMTFGMDk3QjMzQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn/W4wDQYJKoZIhvcNAQELBQADggEBABNXnQiYqidS/LeH
337i24grMEJg4M2SNJIYcJo6GIa2qfmXF710AtwMTjN5bdYAJpoROAuJDNtMyqt0
ZTdY9QnLkSFy3AVihKg9fZfYOQd9RsWlSbgwu8/tj+TEpNyLLKYocP22PXBtQJng
eWcQV2ePG/1hwUA0OrlCmI5xjBq4s31l9DhMMQF46Loru2u9nRlOWI4HoR9F3HN7
Sl+g3pkYRbFnpL26UcYx5MBvYZIJ5yELUA//LD462YiCBczTWKSW2Lp0WABAz/Bf
xd92Kqwm7m10IeowzU7kJ0yHekd/CDH/fNK8rUGxyVB9RkBOeX7xBSvTjZ/ig4h9
eDeCZ50=
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:17:57 2025 by rpki-client