Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/ACC372FE0F4211EE97A24686C4F9AE02.roa
File:                     ACC372FE0F4211EE97A24686C4F9AE02.roa (raw, json)
Hash identifier:          0vwZnVq6+4c6D/8J1aiiHDqlou0UwAPkCDM39Wg9hHM=
Subject key identifier:   31:28:DD:92:4A:5D:A2:5A:F3:05:13:8E:C5:77:E7:5D:6A:37:F4:C4
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       0187
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/ACC372FE0F4211EE97A24686C4F9AE02.roa
Signing time:             Sat 19 Jul 2025 04:09:40 +0000
ROA not before:           Sat 19 Jul 2025 04:09:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.224.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Jul 19 04:09:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687b1a83-f625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:98:b4:a6:48:a7:18:d3:8c:2c:ee:c6:93:
                    fd:ff:8b:bd:57:40:d4:a0:ac:d5:06:66:1b:7e:c5:
                    52:aa:54:71:bc:bf:c4:ad:0e:d0:53:b0:8b:c9:9e:
                    af:cd:2b:ab:b2:46:66:be:f3:23:3b:89:c9:0c:98:
                    af:f0:04:30:ff:b0:8e:74:90:33:6d:98:7d:84:b1:
                    40:3f:96:cf:a6:0d:12:18:f4:72:a6:7c:a5:97:76:
                    d9:33:da:2e:4c:28:f9:dc:7d:0f:02:92:8b:79:cb:
                    e8:39:46:d6:8c:ee:99:d9:cc:3a:17:7f:bd:5b:12:
                    ac:97:6f:0b:99:df:a7:53:f2:88:66:f0:67:1e:cd:
                    fc:d6:98:33:b3:21:0a:cf:2a:79:69:0d:34:a7:04:
                    6b:4f:b6:33:54:b9:d1:27:c0:4c:4d:f0:f6:c2:12:
                    44:2f:71:53:fe:31:21:48:5d:f1:24:f4:9d:b3:3e:
                    1b:db:82:20:37:1f:b2:b0:df:47:22:c4:95:10:81:
                    68:c4:aa:ac:e0:3f:24:f9:e4:9f:6e:64:8e:44:c5:
                    42:c1:5d:dc:47:13:af:e4:2b:62:25:32:a8:ed:b1:
                    d5:a8:b9:85:22:93:e2:5c:e7:8a:df:ed:ca:83:64:
                    73:6a:3b:9b:14:db:c2:47:45:5f:97:1f:02:d3:c6:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:28:DD:92:4A:5D:A2:5A:F3:05:13:8E:C5:77:E7:5D:6A:37:F4:C4
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/ACC372FE0F4211EE97A24686C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:0f:4a:60:ea:7d:e3:7b:40:5c:b7:90:de:06:ae:25:ab:
         ad:72:bf:42:43:1d:68:a9:86:ee:da:45:3a:40:8c:1a:03:a8:
         c5:c9:02:51:a9:19:3b:96:79:3b:2f:1f:0c:ec:c7:65:d3:e5:
         08:79:96:61:6c:98:26:d9:d3:06:f5:20:00:aa:ed:9c:0c:51:
         47:f0:a6:8a:e4:23:7a:b4:7f:a9:5d:39:1c:fc:55:8a:46:da:
         f6:8f:ed:8d:92:90:c2:27:cf:a3:90:7a:dd:b6:31:7d:a9:0a:
         10:8e:2e:ad:32:57:a8:36:28:06:c6:20:01:26:b7:ea:57:0e:
         fd:fa:20:11:8e:b2:65:bc:9e:c9:52:83:2e:79:00:03:c3:6d:
         8d:9f:92:5f:68:77:2a:09:e4:4e:2b:ba:8c:0d:85:bf:ca:5a:
         dd:22:24:4d:04:79:c1:f7:bc:77:a1:bf:7f:d4:c9:2a:96:4d:
         7b:02:cd:ec:8b:4b:3e:7e:4b:5b:58:73:39:55:fb:18:73:ec:
         11:74:37:ab:f9:2f:67:f3:c0:a5:a3:b3:57:68:1f:5b:d0:2e:
         2f:0d:51:e1:fc:8d:47:31:fc:2b:e5:a6:69:04:fb:9d:ca:eb:
         99:8a:cf:01:88:80:13:0e:5d:fe:73:95:b6:b5:79:01:3d:9c:
         16:f4:2a:2d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGRjIxMTAvBgNVBAUTKDc5NTI4MjVEMkUxOEZGMDYxQjlCMzZCRDY2MzQyMTJE
MkRGMUJGM0EwHhcNMjUwNzE5MDQwOTM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODdiMWE4My1mNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxP6YtKZIpxjTjCzuxpP9/4u9V0DUoKzVBmYbfsVSqlRxvL/ErQ7QU7CLyZ6v
zSurskZmvvMjO4nJDJiv8AQw/7COdJAzbZh9hLFAP5bPpg0SGPRypnyll3bZM9ou
TCj53H0PApKLecvoOUbWjO6Z2cw6F3+9WxKsl28Lmd+nU/KIZvBnHs381pgzsyEK
zyp5aQ00pwRrT7YzVLnRJ8BMTfD2whJEL3FT/jEhSF3xJPSdsz4b24IgNx+ysN9H
IsSVEIFoxKqs4D8k+eSfbmSORMVCwV3cRxOv5CtiJTKo7bHVqLmFIpPiXOeK3+3K
g2RzajubFNvCR0Vflx8C08YMsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDEo3ZJK
XaJa8wUTjsV3511qN/TEMB8GA1UdIwQYMBaAFHlSgl0uGP8GG5s2vWY0IS0t8b86
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUZGMi85RTRCQTM0RTBG
MzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93WWJtemE5WmpRaExTM3h2
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VWS0NYUzRZX3dZYm16YTlaalFoTFMzeHZ6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzVGRjIvOUU0QkEzNEUwRjM5MTFFRUFFQ0Y1NjYzQzRGOUFFMDIvQUNDMzcyRkUw
RjQyMTFFRTk3QTI0Njg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn4K4wDQYJKoZIhvcNAQELBQADggEBAG4KD0pg6n3je0Bc
t5DeBq4lq61yv0JDHWiphu7aRTpAjBoDqMXJAlGpGTuWeTsvHwzsx2XT5Qh5lmFs
mCbZ0wb1IACq7ZwMUUfwporkI3q0f6ldORz8VYpG2vaP7Y2SkMInz6OQet22MX2p
ChCOLq0yV6g2KAbGIAEmt+pXDv36IBGOsmW8nslSgy55AAPDbY2fkl9odyoJ5E4r
uowNhb/KWt0iJE0EecH3vHehv3/UySqWTXsCzeyLSz5+S1tYczlV+xhz7BF0N6v5
L2fzwKWjs1doH1vQLi8NUeH8jUcx/CvlpmkE+53K65mKzwGIgBMOXf5zlba1eQE9
nBb0Ki0=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:24 2025 by rpki-client