Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2E388BFA2B3C11F0A85EF417C4F9AE02.roa
File:                     2E388BFA2B3C11F0A85EF417C4F9AE02.roa (raw, json)
Hash identifier:          E5Atas0UsdEqkcEvTAarIUoj2Y60IbAVcufUw0XU9nc=
Subject key identifier:   B9:F7:49:F9:F9:0B:46:A1:E8:07:1D:1F:70:56:7C:E1:2C:7C:94:13
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3697
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2E388BFA2B3C11F0A85EF417C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:52:57 +0000
ROA not before:           Sat 02 Aug 2025 15:52:57 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     139418
IP address blocks:        103.144.18.0/24 maxlen: 24
                          103.144.19.0/24 maxlen: 24
                          103.174.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13975 (0x3697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:52:57 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3459-3079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:b9:cf:8a:1a:e1:bf:f2:d9:c1:21:c7:21:
                    84:74:06:3a:53:ac:1e:d3:ca:81:dd:9e:f3:ec:f8:
                    3d:41:11:28:91:68:5f:73:73:b7:45:db:6b:0b:15:
                    d6:06:ab:ea:4b:ca:c1:f0:07:42:d1:5f:6a:02:ec:
                    d2:17:f7:5b:d5:fb:18:5e:69:ba:bd:32:ef:dd:4d:
                    0d:38:18:1c:11:eb:91:1c:5a:80:8b:7f:b5:3f:49:
                    3c:46:2a:d4:58:de:c4:1c:cb:ec:a4:d6:09:3f:84:
                    40:15:3f:c4:1e:b4:8b:c1:8b:a1:24:b1:d2:de:52:
                    9c:e3:71:12:6d:ca:54:49:6c:6a:f6:eb:37:5a:4d:
                    27:87:df:6b:d6:94:c4:53:26:38:06:e1:96:ff:98:
                    4c:1b:4f:3a:0f:d6:f7:48:f3:ad:cd:69:a8:0f:9b:
                    07:f5:34:6d:50:f3:f2:34:76:fe:ca:69:2c:03:d5:
                    a8:15:52:6a:20:b1:6e:1a:22:9b:42:a9:44:9b:ac:
                    5e:9c:b7:e2:4f:e6:4c:16:ba:49:57:1c:f9:a5:9e:
                    22:f6:a0:75:59:a3:c5:91:69:e0:b1:68:d2:6a:0f:
                    ee:03:c4:57:55:d3:a3:1f:e2:01:5a:71:ab:01:81:
                    bc:2f:02:e5:a2:f9:1a:43:78:c2:d0:6a:05:ea:4e:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F7:49:F9:F9:0B:46:A1:E8:07:1D:1F:70:56:7C:E1:2C:7C:94:13
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2E388BFA2B3C11F0A85EF417C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.18.0/23
                  103.174.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:89:f4:ce:a7:00:68:91:62:52:b1:4b:1f:f2:59:e0:e3:4f:
         26:09:33:03:34:9d:08:71:64:a8:1b:20:60:5e:8d:02:f2:8d:
         a9:01:45:70:80:56:d8:7a:c4:05:b5:0a:29:f1:c0:6d:d0:9f:
         e1:74:76:ca:b8:12:f3:07:9f:a3:4c:9f:90:03:2f:d4:d5:a7:
         b1:62:fa:4a:34:5d:50:0e:c3:5b:9f:ed:b8:74:bf:b8:88:87:
         ea:b2:bc:5e:05:b8:1f:bd:74:48:a3:48:7a:b9:2d:b5:37:7c:
         ea:27:2f:5f:e0:b8:51:10:33:60:34:4d:31:08:7f:5d:ce:e7:
         21:66:e5:1d:6f:c1:63:de:ed:7f:b0:25:54:05:9b:ee:a6:84:
         77:50:79:79:df:32:35:6e:ec:80:9f:27:d9:7c:9d:c0:f8:6f:
         13:3f:31:ce:3e:94:aa:d7:be:61:d1:09:7d:76:9f:d8:02:5a:
         df:39:fa:d3:28:92:70:68:3d:da:45:aa:ba:75:b6:23:e3:0a:
         6d:91:97:4d:91:dd:7a:43:a0:35:53:5f:c6:9b:54:d3:54:28:
         de:ed:37:fe:11:d1:c4:b1:0a:95:0b:f7:f7:60:8e:2d:2f:46:
         98:3b:7c:a6:62:33:76:11:af:6a:34:86:f5:0a:c7:26:4d:34:
         60:77:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:27 2025 by rpki-client