Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
File:                     A8F83B2E202911F08EABDC87C4F9AE02.roa (raw, json)
Hash identifier:          au4wObG66n+FNIJhrBPi+a9u77dosecOMM31PZwhHNs=
Subject key identifier:   70:43:1A:64:B2:2B:A2:D6:7E:ED:49:F5:FC:86:8A:03:3C:FD:DE:46
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       A8
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
Signing time:             Wed 23 Apr 2025 09:59:35 +0000
ROA not before:           Wed 23 Apr 2025 09:59:35 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     142267
IP address blocks:        103.129.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Apr 23 09:59:35 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6808ba07-e110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:47:c8:39:49:a1:cc:74:ed:46:63:31:af:
                    13:7d:eb:40:28:c5:21:b4:4d:7e:ba:6f:13:7c:38:
                    ea:14:ac:9b:47:9f:94:f3:62:1d:46:9b:ef:a4:97:
                    dc:14:01:6e:2c:3a:02:ef:e0:26:69:88:55:ab:a4:
                    57:b9:04:a5:d8:47:6e:29:cf:8c:14:36:c2:43:33:
                    24:b5:1d:d4:be:e2:c7:e4:98:93:c5:8c:98:5a:e0:
                    f4:b6:4e:e0:ab:83:24:93:09:58:b1:1a:86:ae:32:
                    42:81:fe:0f:b5:ac:df:33:75:d4:46:50:a8:ea:e6:
                    84:96:27:d9:ed:40:e6:f6:ba:b9:dd:ff:c5:de:76:
                    f0:2e:19:0c:e2:74:44:ad:4f:f6:bf:e3:98:67:f6:
                    f8:f1:34:be:e8:ea:ef:2f:0d:5f:e3:0b:f4:58:96:
                    68:37:d2:73:e5:c0:15:a3:4b:05:d8:fd:41:ec:98:
                    60:cd:89:a4:6a:01:eb:14:37:79:32:83:18:84:18:
                    32:22:cb:67:ea:5b:9d:cc:41:cc:82:12:92:83:ad:
                    b2:0f:86:c2:67:08:32:59:8d:1b:bf:41:38:c5:a8:
                    71:5e:e5:38:0e:62:25:1d:94:92:ab:a2:16:0e:53:
                    fe:09:b6:33:fe:db:5f:0e:3b:03:09:e9:2e:54:22:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:1A:64:B2:2B:A2:D6:7E:ED:49:F5:FC:86:8A:03:3C:FD:DE:46
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:74:b4:db:2d:38:e3:f4:92:38:fe:bd:c3:62:47:bf:72:93:
         6c:87:e9:58:8b:b4:34:16:12:92:02:78:3e:0e:b9:84:fa:33:
         e0:cb:80:8f:67:52:e2:90:a7:45:c4:7c:89:d9:aa:41:fc:1b:
         4f:69:69:67:48:50:e4:5e:ad:8d:1c:ce:94:1b:1e:fa:b1:2c:
         c7:2c:38:0d:07:a3:e8:c3:91:6c:f1:45:8d:ce:bd:1f:c8:6f:
         7b:b5:bd:87:12:61:3b:53:bb:9d:b4:9c:1f:3d:50:1a:19:18:
         e9:78:b0:08:b6:4e:d0:9c:bb:cc:90:2d:99:b4:3a:06:1a:7d:
         fa:e2:52:94:05:39:da:d4:ea:2a:ac:27:7c:2d:d3:da:70:c2:
         03:46:7b:c9:83:91:10:d6:0d:4c:f3:d9:6e:c1:d7:b8:72:a2:
         c1:e2:aa:0e:4b:57:ab:6c:19:33:0b:f4:30:5b:66:42:ca:d7:
         f0:52:c6:f5:ce:d3:70:9e:f5:3b:bb:f5:07:02:dd:89:53:ac:
         34:13:81:dc:af:e4:73:9e:20:d3:03:ff:0e:8f:2c:b7:49:c2:
         eb:9c:65:30:24:a7:3b:8a:f0:c9:5d:4e:e0:4e:8c:97:e1:da:
         b4:ad:c6:a7:08:0b:06:bf:8d:02:e1:45:fa:02:89:76:d3:77:
         34:f3:77:be
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB
QUYyQzMxRkYwHhcNMjUwNDIzMDk1OTM1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODA4YmEwNy1lMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqj9HyDlJocx07UZjMa8TfetAKMUhtE1+um8TfDjqFKybR5+U82IdRpvvpJfc
FAFuLDoC7+AmaYhVq6RXuQSl2EduKc+MFDbCQzMktR3UvuLH5JiTxYyYWuD0tk7g
q4MkkwlYsRqGrjJCgf4PtazfM3XURlCo6uaElifZ7UDm9rq53f/F3nbwLhkM4nRE
rU/2v+OYZ/b48TS+6OrvLw1f4wv0WJZoN9Jz5cAVo0sF2P1B7JhgzYmkagHrFDd5
MoMYhBgyIstn6ludzEHMghKSg62yD4bCZwgyWY0bv0E4xahxXuU4DmIlHZSSq6IW
DlP+CbYz/ttfDjsDCekuVCI36wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHBDGmSy
K6LWfu1J9fyGigM8/d5GMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC
NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvQThGODNCMkUy
MDI5MTFGMDhFQUJEQzg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngTcwDQYJKoZIhvcNAQELBQADggEBAAJ0tNstOOP0kjj+
vcNiR79yk2yH6ViLtDQWEpICeD4OuYT6M+DLgI9nUuKQp0XEfInZqkH8G09paWdI
UORerY0czpQbHvqxLMcsOA0Ho+jDkWzxRY3OvR/Ib3u1vYcSYTtTu520nB89UBoZ
GOl4sAi2TtCcu8yQLZm0OgYaffriUpQFOdrU6iqsJ3wt09pwwgNGe8mDkRDWDUzz
2W7B17hyosHiqg5LV6tsGTML9DBbZkLK1/BSxvXO03Ce9Tu79QcC3YlTrDQTgdyv
5HOeINMD/w6PLLdJwuucZTAkpzuK8MldTuBOjJfh2rStxqcICwa/jQLhRfoCiXbT
dzTzd74=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:31 2025 by rpki-client