Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
File:                     A7B015CEF1DC11EEA578C27DC4F9AE02.roa (raw, json)
Hash identifier:          WDQMfZuZicx7LXWpfOFLeZ3xfavkxYpJ8JsSlFG8PpA=
Subject key identifier:   71:53:0D:72:3A:13:44:B1:11:31:FB:9B:F1:30:78:54:84:7A:3A:28
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       0188
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
Signing time:             Fri 01 Aug 2025 05:11:22 +0000
ROA not before:           Fri 01 Aug 2025 05:11:22 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151343
IP address blocks:        103.204.30.0/23 maxlen: 24
                          2001:df2:75c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Aug  1 05:11:22 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688c4c79-a7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:90:20:70:c8:96:e6:5e:9e:10:ce:08:c7:
                    23:ec:f8:49:8f:a1:79:9f:71:f0:96:32:75:19:ee:
                    97:e8:1c:2f:14:9c:06:8d:44:a9:5a:fa:b2:cf:eb:
                    d7:ab:75:5c:6e:d6:97:2e:56:6d:6a:8c:03:74:9b:
                    bf:aa:47:7b:a7:2b:f6:9f:e3:d2:f4:0f:6a:b1:93:
                    41:88:0e:b8:9d:93:68:fb:b0:eb:d9:8a:78:92:9b:
                    7d:20:14:a9:ea:09:4f:6f:29:ec:db:2b:4a:1e:b9:
                    42:9d:16:da:08:15:cf:96:f5:3b:e1:70:af:46:af:
                    06:6a:09:3b:41:40:6a:a0:e8:a9:b9:7c:35:c3:7c:
                    80:cc:b0:7f:f1:d8:9f:6c:2a:76:f3:8f:45:a1:98:
                    a8:01:9a:f7:71:52:e8:5d:c1:01:0c:5a:74:6e:d6:
                    25:26:16:80:80:0a:2f:48:b7:97:e4:0b:16:4f:08:
                    42:76:90:f7:1a:d3:fc:d4:3b:24:d1:c6:b6:4b:fe:
                    a7:51:44:aa:68:90:fe:2d:ec:cc:d5:10:cc:61:1b:
                    ed:5b:ba:b9:34:0b:bc:4d:51:ff:3a:e3:80:0c:47:
                    30:a9:9d:b2:e2:44:b5:bf:5d:9a:01:62:6e:23:76:
                    37:d2:46:49:98:c6:51:14:d0:32:a3:88:49:d9:1b:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:0D:72:3A:13:44:B1:11:31:FB:9B:F1:30:78:54:84:7A:3A:28
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.30.0/23
                IPv6:
                  2001:df2:75c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:53:c5:78:f4:57:33:ba:61:ef:27:42:34:63:a7:58:79:3e:
         bc:ed:a3:b6:be:94:4c:1f:6b:aa:a9:7d:e9:0c:67:44:b7:2e:
         55:52:54:6c:d0:16:e0:ac:8d:03:59:b4:c1:45:60:7a:a7:f7:
         ca:a7:66:1e:bd:06:93:cf:19:6b:60:18:d1:13:8e:67:1b:e9:
         00:34:84:14:02:cd:d8:40:f5:56:4a:3d:56:49:62:9f:80:3f:
         b0:c4:30:0d:a9:73:6b:d1:70:b5:5c:bc:92:24:4e:4a:e9:83:
         15:0b:98:f2:07:24:83:18:16:72:1a:f4:cc:e1:c9:ae:2b:fb:
         a2:fe:5d:37:11:5f:88:58:d4:a2:bd:fb:ae:4d:7b:e2:81:a4:
         7d:17:b7:32:fd:92:bd:a3:9e:17:9c:76:98:99:b7:0e:30:79:
         a3:95:c7:68:48:4a:86:85:e9:de:f6:66:90:ec:86:9b:db:81:
         15:84:e8:ba:9d:a5:02:67:1c:24:7d:ca:ad:23:10:fd:3c:27:
         a6:e9:f6:42:7b:b9:a1:fa:3c:a7:5c:3c:a8:4f:ce:9b:35:41:
         f3:83:0f:57:9f:0a:77:03:77:c2:11:6f:26:2a:9c:af:f5:6d:
         e5:a1:06:a9:c0:e3:38:b7:1c:79:5b:a7:34:f4:27:99:1e:30:
         d8:a8:f2:8b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw
NkRGNDdFOTEwHhcNMjUwODAxMDUxMTIyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjNGM3OS1hN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuaQIHDIluZenhDOCMcj7PhJj6F5n3HwljJ1Ge6X6BwvFJwGjUSpWvqyz+vX
q3VcbtaXLlZtaowDdJu/qkd7pyv2n+PS9A9qsZNBiA64nZNo+7Dr2Yp4kpt9IBSp
6glPbyns2ytKHrlCnRbaCBXPlvU74XCvRq8Gagk7QUBqoOipuXw1w3yAzLB/8dif
bCp2849FoZioAZr3cVLoXcEBDFp0btYlJhaAgAovSLeX5AsWTwhCdpD3GtP81Dsk
0ca2S/6nUUSqaJD+LezM1RDMYRvtW7q5NAu8TVH/OuOADEcwqZ2y4kS1v12aAWJu
I3Y30kZJmMZRFNAyo4hJ2RtCCQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHFTDXI6
E0SxETH7m/EweFSEejooMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2
MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI5NjkvMERCMzQ0MzIyNjIxMTFFRUE0REVFNTRGQzRGOUFFMDIvQTdCMDE1Q0VG
MURDMTFFRUE1NzhDMjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnzB4wDwQCAAIwCQMHACABDfJ1wDANBgkqhkiG9w0BAQsF
AAOCAQEAyFPFePRXM7ph7ydCNGOnWHk+vO2jtr6UTB9rqql96QxnRLcuVVJUbNAW
4KyNA1m0wUVgeqf3yqdmHr0Gk88Za2AY0ROOZxvpADSEFALN2ED1Vko9Vklin4A/
sMQwDalza9FwtVy8kiROSumDFQuY8gckgxgWchr0zOHJriv7ov5dNxFfiFjUor37
rk174oGkfRe3Mv2SvaOeF5x2mJm3DjB5o5XHaEhKhoXp3vZmkOyGm9uBFYToup2l
AmccJH3KrSMQ/Twnpun2Qnu5ofo8p1w8qE/OmzVB84MPV58KdwN3whFvJiqcr/Vt
5aEGqcDjOLcceVunNPQnmR4w2Kjyiw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:27 2025 by rpki-client