Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/8D0C1E0E37EF11EE82AF270BC4F9AE02.roa
File:                     8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (raw, json)
Hash identifier:          GFGPvdmy2vrmiAyM3NUeTKYyq91wUi+ACbGsbCoh47g=
Subject key identifier:   25:18:CB:5E:21:01:6C:9D:B0:E4:40:94:03:DC:6A:4A:F7:9D:50:FC
Certificate issuer:       /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial:       0169
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/8D0C1E0E37EF11EE82AF270BC4F9AE02.roa
Signing time:             Wed 09 Jul 2025 04:40:58 +0000
ROA not before:           Wed 09 Jul 2025 04:40:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151470
IP address blocks:        103.229.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
                          rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
        Validity
            Not Before: Jul  9 04:40:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686df2d9-b9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:b0:a1:79:40:1e:2d:61:cb:b0:09:5b:8e:
                    80:5e:02:e9:ab:69:8b:27:65:5b:6b:bb:53:50:02:
                    41:b3:e9:7b:de:69:24:ef:3d:ef:07:fe:83:da:70:
                    96:e4:bd:46:f8:59:0c:c3:3f:f8:58:1c:e6:ed:ff:
                    44:bc:f2:21:2c:51:28:68:6c:cc:eb:24:5f:27:23:
                    79:75:09:4a:02:8f:72:aa:28:dc:e2:95:59:55:66:
                    ad:1d:de:de:b7:01:22:38:39:23:ff:b1:8e:ea:5b:
                    02:2f:c7:1c:ed:72:d0:a7:c6:07:d3:05:41:83:0f:
                    77:b8:95:07:e4:06:9b:5c:69:9f:d9:60:81:28:f0:
                    ce:d9:e8:22:2f:9b:a4:58:a2:43:ca:80:54:96:87:
                    51:58:9d:ef:a0:ce:c8:52:92:50:39:6b:6a:2a:36:
                    34:27:93:68:fa:18:15:07:87:2e:08:23:cd:d7:21:
                    6d:7d:b3:66:7f:c4:dd:ce:ea:fd:ef:b3:f0:19:5c:
                    39:9d:90:65:55:74:fd:5f:d5:c5:cb:1c:8d:2c:ce:
                    e8:05:76:8f:52:3d:24:5e:b0:e2:57:e0:cc:53:73:
                    51:cf:c8:a0:fb:e7:ab:b4:d9:4c:4f:61:07:cc:bd:
                    78:1d:15:ad:ab:49:85:53:64:9c:e6:08:06:2e:22:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:18:CB:5E:21:01:6C:9D:B0:E4:40:94:03:DC:6A:4A:F7:9D:50:FC
            X509v3 Authority Key Identifier:
                keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/8D0C1E0E37EF11EE82AF270BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:a3:ac:fa:6d:09:21:8e:ee:38:04:81:81:70:d6:67:6f:
         e2:fa:d2:4a:88:26:58:1f:12:22:8a:d2:d3:d4:8f:64:cb:76:
         ca:cd:35:39:1c:2b:55:7a:4e:77:2d:78:60:99:48:e6:0e:44:
         10:51:e2:13:33:6d:f3:22:02:75:89:b0:74:a3:ce:e1:15:a5:
         79:49:02:01:d4:7c:35:6e:1a:d4:df:7a:41:8d:f3:62:a2:01:
         05:55:0b:00:9c:80:ab:0a:e7:96:93:d5:51:d3:46:3a:b3:42:
         d4:84:3b:b9:4a:6b:71:2f:4c:af:ee:31:6d:28:03:ef:08:06:
         20:05:c3:c0:c5:3b:8a:f1:ce:b1:72:65:3f:ae:87:94:a6:ac:
         b7:a9:2f:5f:62:81:e1:8c:43:45:d4:87:58:3d:48:c5:71:16:
         35:0a:ac:2a:d3:7d:fb:5d:ad:65:e4:a3:e0:90:58:bc:b2:8f:
         5d:54:f2:23:73:0e:85:aa:00:6f:a9:08:cb:ff:a6:77:92:59:
         56:24:95:36:77:89:f2:03:d4:20:e2:cd:50:07:e3:cd:08:da:
         ec:77:1a:3f:12:91:b0:0d:72:b3:ab:5a:b3:df:c7:88:d4:97:
         37:55:56:dd:82:1a:e5:a2:8e:83:d8:d1:a9:bc:ad:20:d8:df:
         c9:c4:ee:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF
MzA0N0U1MDcwHhcNMjUwNzA5MDQ0MDU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODZkZjJkOS1iOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6X+woXlAHi1hy7AJW46AXgLpq2mLJ2Vba7tTUAJBs+l73mkk7z3vB/6D2nCW
5L1G+FkMwz/4WBzm7f9EvPIhLFEoaGzM6yRfJyN5dQlKAo9yqijc4pVZVWatHd7e
twEiODkj/7GO6lsCL8cc7XLQp8YH0wVBgw93uJUH5AabXGmf2WCBKPDO2egiL5uk
WKJDyoBUlodRWJ3voM7IUpJQOWtqKjY0J5No+hgVB4cuCCPN1yFtfbNmf8Tdzur9
77PwGVw5nZBlVXT9X9XFyxyNLM7oBXaPUj0kXrDiV+DMU3NRz8ig++ertNlMT2EH
zL14HRWtq0mFU2Sc5ggGLiJqpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUYy14h
AWydsORAlAPcakr3nVD8MB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3
RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0FERDEvRDAwNkMwREUzN0VFMTFFRTk4REYzNjY2QzRGOUFFMDIvOEQwQzFFMEUz
N0VGMTFFRTgyQUYyNzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn5eowDQYJKoZIhvcNAQELBQADggEBAJL7o6z6bQkhju44
BIGBcNZnb+L60kqIJlgfEiKK0tPUj2TLdsrNNTkcK1V6TncteGCZSOYORBBR4hMz
bfMiAnWJsHSjzuEVpXlJAgHUfDVuGtTfekGN82KiAQVVCwCcgKsK55aT1VHTRjqz
QtSEO7lKa3EvTK/uMW0oA+8IBiAFw8DFO4rxzrFyZT+uh5SmrLepL19igeGMQ0XU
h1g9SMVxFjUKrCrTfftdrWXko+CQWLyyj11U8iNzDoWqAG+pCMv/pneSWVYklTZ3
ifID1CDizVAH480I2ux3Gj8SkbANcrOrWrPfx4jUlzdVVt2CGuWijoPY0am8rSDY
38nE7g0=
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:32 2025 by rpki-client