Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/9132838C6D3B11F08FAF5337C4F9AE02.roa
File:                     9132838C6D3B11F08FAF5337C4F9AE02.roa (raw, json)
Hash identifier:          A0B5Fh827t09j9A9jIoA5e7FS/oK5UGgKqUFdUr5wZ0=
Subject key identifier:   4A:96:8D:D3:E7:95:FB:A1:EC:4C:C3:51:F8:62:50:F5:75:98:E9:E8
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       0434
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/9132838C6D3B11F08FAF5337C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 11:51:45 +0000
ROA not before:           Wed 30 Jul 2025 11:51:45 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     212666
IP address blocks:        103.47.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Jul 30 11:51:45 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=688a0751-93e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:51:f0:ba:e9:71:61:23:b0:7f:db:7e:4e:
                    d9:31:b0:ae:5f:95:d9:3a:b0:63:69:75:eb:c5:ad:
                    ac:a5:41:48:73:32:7a:72:ea:61:c3:f6:12:96:e9:
                    eb:13:5e:31:34:36:3c:6a:bd:36:69:ed:69:4e:3e:
                    f0:65:be:e5:82:e1:e9:83:c0:bb:01:55:cd:21:4f:
                    f1:45:6e:42:fc:32:25:a9:67:c9:27:4b:b7:fb:8e:
                    b4:d7:80:7a:12:62:ad:a5:df:65:cf:8d:2d:78:f5:
                    9e:31:87:0b:51:27:96:b7:3c:f3:00:eb:79:86:61:
                    ae:bd:79:b9:ae:47:58:8e:0a:aa:fc:8d:cf:2d:6b:
                    36:c1:0f:53:b1:b4:83:d8:50:a2:ce:57:96:bf:97:
                    5f:f8:15:48:a8:58:8f:59:d2:03:ba:2a:ef:af:a4:
                    91:9d:46:ca:7a:db:de:57:08:e1:d8:80:0c:c8:b7:
                    3e:89:ed:7b:e4:1c:b1:b4:f8:fc:c9:d1:cc:f7:2d:
                    8d:0a:61:69:43:2d:48:ec:fa:99:55:66:62:88:e3:
                    63:c4:d4:0a:f4:44:f4:ef:18:45:98:56:49:77:77:
                    71:95:ef:24:76:3e:92:8b:97:91:42:21:f7:f7:d9:
                    e7:bd:d1:88:94:35:02:83:06:d7:80:b2:76:c9:bc:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:96:8D:D3:E7:95:FB:A1:EC:4C:C3:51:F8:62:50:F5:75:98:E9:E8
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/9132838C6D3B11F08FAF5337C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:4d:79:99:f8:e5:6f:62:04:bb:26:ff:9a:3a:42:98:03:de:
         85:4c:13:27:98:f7:f0:e5:3f:72:8c:a0:82:73:f6:0b:a5:c0:
         b9:64:b0:d6:1e:17:e9:d1:69:d1:d3:37:9d:da:8c:22:d6:96:
         58:ae:bb:6c:73:ec:44:6a:33:27:3d:b2:b4:fe:1d:4e:76:67:
         b4:50:2c:4b:b7:75:98:82:d6:2c:1a:a9:9b:e1:af:0c:8a:51:
         bc:8a:1f:95:36:3e:f0:15:62:7a:0c:c1:24:73:c5:47:c9:31:
         da:65:d0:14:64:7c:e3:37:c4:ab:ac:96:72:2e:88:8f:ca:6d:
         01:42:ae:cd:0d:e8:99:0c:f8:7c:47:dd:88:0f:3c:3b:fe:0d:
         df:51:1e:6e:54:8e:35:af:f2:be:65:f8:88:bc:d5:1d:fa:f0:
         c0:f6:1f:06:91:e2:7c:71:d3:f5:8f:58:9e:eb:23:3b:7a:8d:
         24:7c:59:d4:fc:44:e5:20:22:17:a3:8f:1a:dd:01:7d:4a:e5:
         3f:3d:58:81:9f:9d:1d:26:7b:68:d9:36:35:c7:f7:3a:3c:1f:
         95:1a:66:e8:a6:1b:69:ad:ff:e5:e9:a6:90:bd:9c:33:dc:13:
         1e:bc:51:77:2b:ab:67:e5:67:9e:9f:49:21:ce:e7:46:30:33:
         b8:62:d7:73
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjUwNzMwMTE1MTQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhhMDc1MS05M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLxR8LrpcWEjsH/bfk7ZMbCuX5XZOrBjaXXrxa2spUFIczJ6cuphw/YSlunr
E14xNDY8ar02ae1pTj7wZb7lguHpg8C7AVXNIU/xRW5C/DIlqWfJJ0u3+46014B6
EmKtpd9lz40tePWeMYcLUSeWtzzzAOt5hmGuvXm5rkdYjgqq/I3PLWs2wQ9TsbSD
2FCizleWv5df+BVIqFiPWdIDuirvr6SRnUbKetveVwjh2IAMyLc+ie175ByxtPj8
ydHM9y2NCmFpQy1I7PqZVWZiiONjxNQK9ET07xhFmFZJd3dxle8kdj6Si5eRQiH3
99nnvdGIlDUCgwbXgLJ2ybzU4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEqWjdPn
lfuh7EzDUfhiUPV1mOnoMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvOTEzMjgzOEM2
RDNCMTFGMDhGQUY1MzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnL5AwDQYJKoZIhvcNAQELBQADggEBACNNeZn45W9iBLsm
/5o6QpgD3oVMEyeY9/DlP3KMoIJz9gulwLlksNYeF+nRadHTN53ajCLWlliuu2xz
7ERqMyc9srT+HU52Z7RQLEu3dZiC1iwaqZvhrwyKUbyKH5U2PvAVYnoMwSRzxUfJ
Mdpl0BRkfOM3xKuslnIuiI/KbQFCrs0N6JkM+HxH3YgPPDv+Dd9RHm5UjjWv8r5l
+Ii81R368MD2HwaR4nxx0/WPWJ7rIzt6jSR8WdT8ROUgIhejjxrdAX1K5T89WIGf
nR0me2jZNjXH9zo8H5UaZuimG2mt/+XpppC9nDPcEx68UXcrq2flZ56fSSHO50Yw
M7hi13M=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:21:14 2025 by rpki-client