Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/265C5E7002CE11E6B167303FC4F9AE02.roa
File:                     265C5E7002CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=
Subject key identifier:   E6:85:40:94:25:75:C6:2C:C6:F6:44:EA:EE:BD:A5:AD:82:B1:78:83
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       255D
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/265C5E7002CE11E6B167303FC4F9AE02.roa
Signing time:             Mon 04 Aug 2025 16:24:06 +0000
ROA not before:           Mon 04 Aug 2025 16:24:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132229
IP address blocks:        203.177.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9565 (0x255d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Aug  4 16:24:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6890dea6-0b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:9c:10:97:c4:f4:3c:e1:34:b3:78:b9:f8:
                    a5:6d:2e:f9:e6:d6:78:9a:0a:23:18:99:57:a4:2c:
                    f5:65:6c:73:53:5d:12:09:ac:85:79:7f:4f:72:7f:
                    9b:63:9f:02:1c:7b:9b:9b:cc:80:a6:2b:23:60:f5:
                    ea:ef:e4:56:96:44:0c:b8:a8:af:da:e7:a8:75:89:
                    e0:17:32:5b:0a:8b:cf:c2:63:15:1d:d1:b6:e0:ad:
                    92:e2:7e:1d:0e:8c:85:79:92:16:9e:84:53:22:31:
                    88:75:67:4f:da:39:8e:a0:08:03:a9:1f:4d:cd:8d:
                    ab:3d:8b:25:95:ea:78:28:a4:75:45:16:f1:e9:c5:
                    04:47:51:d1:5a:15:e9:9c:35:d1:40:e6:3f:2f:34:
                    02:c4:93:92:20:51:e6:e8:79:68:ea:4b:cc:9b:12:
                    58:f3:da:0f:24:84:37:64:ff:d9:30:c1:b9:a6:e2:
                    a7:90:1b:4b:7b:5e:2e:16:21:f2:aa:e6:a8:63:08:
                    5b:8d:6c:a9:5c:00:e3:b3:1a:2b:ee:d6:84:87:97:
                    c3:fc:23:4d:18:97:a6:5c:f8:ea:d9:f5:0f:14:12:
                    21:27:fe:65:86:40:0d:a1:38:58:a1:f8:c6:5c:98:
                    fa:28:0b:82:56:49:0c:ce:c1:3b:fb:ce:7a:fd:24:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:85:40:94:25:75:C6:2C:C6:F6:44:EA:EE:BD:A5:AD:82:B1:78:83
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/265C5E7002CE11E6B167303FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:58:1e:2c:70:8e:23:bb:9b:01:23:fc:20:c8:19:06:72:7a:
         63:84:8d:1d:fc:50:d4:3c:e3:f2:8d:68:14:d2:fe:cd:aa:0a:
         0b:2d:d0:23:9a:91:6c:bc:3d:b3:37:80:4b:00:75:f6:f1:a9:
         72:93:eb:09:6a:73:7f:5c:44:05:09:23:b2:55:92:18:7b:e1:
         a5:30:af:37:85:6b:16:fb:eb:7d:45:ff:0d:f2:d7:8b:07:51:
         6e:08:ab:eb:e6:c2:aa:b9:a4:3a:de:28:83:03:19:1d:50:88:
         d5:01:aa:51:b8:cd:54:b7:c2:13:65:60:90:a0:a4:0e:94:1b:
         83:f6:24:31:4a:4c:9f:e1:01:0a:49:a5:f1:d4:4a:1d:d5:ac:
         2d:eb:d7:8c:f5:36:bb:e3:9b:5b:63:ad:f1:88:03:05:a2:ee:
         c8:4b:6c:d4:00:d3:41:dc:b1:43:70:3d:4d:f6:48:ee:6c:aa:
         56:d7:c7:af:b8:85:9d:92:23:99:58:43:00:53:0d:0a:6b:80:
         26:fb:cf:a9:39:60:5c:e8:bc:ea:8c:aa:82:08:54:58:b0:d6:
         4b:fe:82:db:76:c3:f6:56:8b:c4:88:05:ad:02:fa:69:87:b4:
         2e:16:2f:c3:44:d0:a7:4a:a1:66:a0:51:40:93:21:f8:28:22:
         9a:a3:18:14
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjUwODA0MTYyNDA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODkwZGVhNi0wYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9CcEJfE9DzhNLN4ufilbS755tZ4mgojGJlXpCz1ZWxzU10SCayFeX9Pcn+b
Y58CHHubm8yApisjYPXq7+RWlkQMuKiv2ueodYngFzJbCovPwmMVHdG24K2S4n4d
DoyFeZIWnoRTIjGIdWdP2jmOoAgDqR9NzY2rPYsllep4KKR1RRbx6cUER1HRWhXp
nDXRQOY/LzQCxJOSIFHm6Hlo6kvMmxJY89oPJIQ3ZP/ZMMG5puKnkBtLe14uFiHy
quaoYwhbjWypXADjsxor7taEh5fD/CNNGJemXPjq2fUPFBIhJ/5lhkANoThYofjG
XJj6KAuCVkkMzsE7+856/SQb7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOaFQJQl
dcYsxvZE6u69pa2CsXiDMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMjY1QzVFNzAw
MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLsSwwDQYJKoZIhvcNAQELBQADggEBACJYHixwjiO7mwEj
/CDIGQZyemOEjR38UNQ84/KNaBTS/s2qCgst0COakWy8PbM3gEsAdfbxqXKT6wlq
c39cRAUJI7JVkhh74aUwrzeFaxb7631F/w3y14sHUW4Iq+vmwqq5pDreKIMDGR1Q
iNUBqlG4zVS3whNlYJCgpA6UG4P2JDFKTJ/hAQpJpfHUSh3VrC3r14z1Nrvjm1tj
rfGIAwWi7shLbNQA00HcsUNwPU32SO5sqlbXx6+4hZ2SI5lYQwBTDQprgCb7z6k5
YFzovOqMqoIIVFiw1kv+gtt2w/ZWi8SIBa0C+mmHtC4WL8NE0KdKoWagUUCTIfgo
IpqjGBQ=
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:52:23 2025 by rpki-client