Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
File:                     86BB53D0105611EB85F56114C4F9AE02.roa (raw, json)
Hash identifier:          KB1SASAODtHX4iXAOPqmH65jf2A2E+pYmVeLrVchSyo=
Subject key identifier:   9A:BE:39:6C:2C:3A:13:CE:04:B7:B2:2B:B3:C4:B3:71:1D:E5:4C:11
Certificate issuer:       /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial:       0795
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
Signing time:             Sun 08 Jun 2025 21:28:58 +0000
ROA not before:           Sun 08 Jun 2025 21:28:58 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136556
IP address blocks:        103.92.160.0/24 maxlen: 24
                          103.92.161.0/24 maxlen: 24
                          2001:df1:2500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
                          rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
        Validity
            Not Before: Jun  8 21:28:58 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6846009a-ab95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b3:fe:22:1a:87:3c:31:b3:a3:bf:78:ec:9f:
                    83:9e:21:8e:cb:a3:33:a5:1d:90:e5:88:70:84:ee:
                    21:11:5e:1d:63:a3:7a:ed:6f:c8:bb:a5:8b:49:3f:
                    ed:99:6d:75:24:a3:59:40:e5:10:04:6b:14:d8:4b:
                    cb:ab:28:84:55:70:8b:ba:56:ba:d0:3f:fa:ec:2d:
                    de:9f:0b:7f:d6:74:8b:51:f1:25:d2:48:9b:62:77:
                    75:6c:a8:01:8b:59:03:c4:c0:64:1c:34:c1:d1:a3:
                    4e:73:6c:68:26:a9:a0:ed:45:b9:ef:34:6c:e3:c7:
                    cd:40:4f:a7:ff:93:c1:67:73:d9:7c:46:ec:24:6b:
                    0a:02:bf:67:2c:00:c9:d7:7f:a3:51:05:93:f6:91:
                    b7:16:34:f4:3f:33:5b:05:ef:31:5e:c0:ec:1a:c9:
                    4f:e4:c4:6a:2d:bc:eb:1f:e6:7a:f2:9c:29:e5:ea:
                    57:22:32:0d:f7:31:b2:d9:be:7f:fc:f1:ae:68:b3:
                    36:51:8b:c2:8a:36:d1:99:91:5c:cf:c2:39:d4:16:
                    ea:a9:55:df:bf:80:a0:77:c0:72:5d:cc:a1:d9:dd:
                    7b:8c:30:8d:60:93:fc:c5:e7:a3:df:c0:99:32:a2:
                    37:e4:9f:17:35:99:7f:4a:7b:e6:0d:09:7b:64:63:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:39:6C:2C:3A:13:CE:04:B7:B2:2B:B3:C4:B3:71:1D:E5:4C:11
            X509v3 Authority Key Identifier:
                keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.160.0/23
                IPv6:
                  2001:df1:2500::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:a7:7f:f2:f6:f2:f4:e9:25:32:6c:b6:aa:bc:67:6f:b1:
         80:f8:0e:1f:55:36:65:86:a7:a5:b6:e6:ac:f9:35:dd:fc:7a:
         c0:cd:bd:77:56:71:50:09:95:84:b5:95:d4:0f:81:11:ba:36:
         44:ee:bf:af:90:ae:94:d1:99:32:49:a1:7c:53:0e:eb:c4:4a:
         e0:07:48:35:71:5d:67:62:92:10:f8:e0:0a:ff:bd:70:47:de:
         81:02:47:2b:21:83:8e:80:05:e1:cc:88:88:1b:a5:f7:11:1a:
         d6:aa:81:d9:ff:5c:4f:c9:eb:c5:80:8b:cb:67:76:5e:5a:f2:
         b5:2d:48:38:67:62:36:d4:b5:28:e8:ed:82:a1:d1:fb:3b:6d:
         c2:40:a5:60:25:91:c7:b2:29:e3:7f:09:f8:99:59:5c:85:8a:
         03:c2:fb:ce:d4:33:67:05:40:9b:1e:85:b2:e8:0a:19:a7:d5:
         e1:40:ac:a5:53:55:48:ab:76:91:67:32:4c:44:01:81:7b:61:
         3c:5a:b9:d3:e6:57:c5:28:34:4b:18:f2:21:e6:b0:8c:ac:0c:
         46:3f:f9:dd:b0:5a:ff:41:16:f3:0a:fd:81:11:eb:3a:63:40:
         74:a4:6c:a7:5d:5b:50:19:f9:26:c4:99:0e:51:c2:76:72:21:
         cd:01:4c:b3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk5MEUxMTAvBgNVBAUTKEY1RDA0NzQ5MERFM0E0RURDRkRDMzdGNkVDQUI5NDkz
OERBN0M2RjYwHhcNMjUwNjA4MjEyODU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQ2MDA5YS1hYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5LP+IhqHPDGzo7947J+DniGOy6MzpR2Q5YhwhO4hEV4dY6N67W/Iu6WLST/t
mW11JKNZQOUQBGsU2EvLqyiEVXCLula60D/67C3enwt/1nSLUfEl0kibYnd1bKgB
i1kDxMBkHDTB0aNOc2xoJqmg7UW57zRs48fNQE+n/5PBZ3PZfEbsJGsKAr9nLADJ
13+jUQWT9pG3FjT0PzNbBe8xXsDsGslP5MRqLbzrH+Z68pwp5epXIjIN9zGy2b5/
/PGuaLM2UYvCijbRmZFcz8I51BbqqVXfv4Cgd8ByXcyh2d17jDCNYJP8xeej38CZ
MqI35J8XNZl/SnvmDQl7ZGPplQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJq+OWws
OhPOBLeyK7PEs3Ed5UwRMB8GA1UdIwQYMBaAFPXQR0kN46Ttz9w39uyrlJONp8b2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkwRS83RTQ2NEIzNDEw
NTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBPM1AzRGYyN0t1VWs0Mm54
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlkQkhTUTNqcE8zUDNEZjI3S3VVazQybnh2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzk5MEUvN0U0NjRCMzQxMDU1MTFFQjgwRjg4MTEzQzRGOUFFMDIvODZCQjUzRDAx
MDU2MTFFQjg1RjU2MTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnXKAwDwQCAAIwCQMHACABDfElADANBgkqhkiG9w0BAQsF
AAOCAQEAI/Wnf/L28vTpJTJstqq8Z2+xgPgOH1U2ZYanpbbmrPk13fx6wM29d1Zx
UAmVhLWV1A+BEbo2RO6/r5CulNGZMkmhfFMO68RK4AdINXFdZ2KSEPjgCv+9cEfe
gQJHKyGDjoAF4cyIiBul9xEa1qqB2f9cT8nrxYCLy2d2XlrytS1IOGdiNtS1KOjt
gqHR+zttwkClYCWRx7Ip438J+JlZXIWKA8L7ztQzZwVAmx6FsugKGafV4UCspVNV
SKt2kWcyTEQBgXthPFq50+ZXxSg0SxjyIeawjKwMRj/53bBa/0EW8wr9gRHrOmNA
dKRsp11bUBn5JsSZDlHCdnIhzQFMsw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 18:07:02 2025 by rpki-client