Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/728D45FA2FA311F0B0179214C4F9AE02.roa
File:                     728D45FA2FA311F0B0179214C4F9AE02.roa (raw, json)
Hash identifier:          3rGMGiocLbD/sQ6iIfN0E5mYPhZ+V9cKG06+RCgRJWc=
Subject key identifier:   94:6A:E2:68:42:1C:EE:7F:B7:66:97:3C:94:C8:4E:3D:18:4C:47:FE
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       369B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/728D45FA2FA311F0B0179214C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:53:00 +0000
ROA not before:           Sat 02 Aug 2025 15:53:00 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153840
IP address blocks:        163.227.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13979 (0x369b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:53:00 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e345c-54f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:ed:65:b6:a2:94:57:b8:7c:18:37:a8:b9:
                    d5:32:da:ac:27:35:87:44:15:9a:ff:45:30:aa:02:
                    97:4f:89:d2:da:57:29:a5:5f:36:21:a2:53:b3:9f:
                    3f:09:72:fb:06:f6:4f:04:69:ef:a7:b6:b4:6a:e6:
                    37:60:68:ed:29:71:f2:f3:04:83:eb:dd:6d:5d:d7:
                    2a:45:cf:fb:ea:ce:a1:aa:b0:56:14:1c:48:df:c8:
                    a4:85:20:db:50:50:ec:69:79:6d:e2:13:9f:0f:58:
                    00:a7:7d:a6:72:58:4c:4f:bc:e2:a3:05:2d:5f:47:
                    00:f9:15:6a:b4:9f:6e:a8:5f:24:1c:29:0c:fe:2a:
                    71:50:37:7a:97:d7:2d:93:55:6e:13:7e:86:69:92:
                    9d:9e:e8:b8:7a:28:3f:47:0e:48:95:0f:09:fc:36:
                    0a:1e:12:d1:a9:48:27:89:34:b1:c4:53:da:7f:bc:
                    02:30:f1:71:fd:1a:49:b6:7b:76:4a:cd:5c:19:32:
                    7b:09:f3:b4:3b:9c:45:32:ce:23:15:6d:f7:9f:56:
                    b4:03:16:79:05:d8:89:b0:82:00:7a:3c:9d:69:af:
                    77:85:c3:85:8f:f8:11:58:45:22:4b:22:b9:d3:29:
                    36:01:0b:ff:ed:ec:1b:e9:66:a8:ce:47:91:37:6a:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6A:E2:68:42:1C:EE:7F:B7:66:97:3C:94:C8:4E:3D:18:4C:47:FE
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/728D45FA2FA311F0B0179214C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:4d:c6:3c:6a:90:9c:51:f5:d8:32:7e:5d:09:b2:be:a0:
         5e:9e:de:5d:3b:94:a1:4c:6b:d8:ce:82:e1:b9:fb:e0:1a:ab:
         1c:b1:9a:38:a8:b2:38:ec:68:24:b2:1f:65:b6:55:7c:85:b4:
         0f:09:68:0d:ec:76:8b:49:4f:44:3e:5b:ac:56:e3:3d:a1:6b:
         06:9a:50:88:71:28:b6:46:d5:83:b9:36:36:90:28:8f:79:0e:
         23:80:3d:de:fb:3f:6e:23:f6:bf:85:f2:3f:04:8a:2a:8e:1c:
         94:00:30:1e:7a:2f:36:50:5d:f5:25:f5:46:e8:e1:ea:ba:6b:
         c9:98:b7:80:d7:91:e2:c4:02:75:76:98:07:a3:fb:2b:3f:14:
         01:15:3c:88:0a:16:84:0a:1b:2c:60:3e:76:d3:a8:e4:96:3b:
         1c:8d:00:37:03:b9:d0:40:58:a4:91:59:14:89:48:d5:0a:62:
         85:1a:57:bd:9f:ee:20:9a:53:a2:cd:05:70:c0:d5:4b:ac:da:
         54:35:15:a5:45:de:63:05:11:70:c2:3f:65:aa:e6:ac:4b:b4:
         85:4d:2e:45:cf:46:00:62:93:b2:01:14:0f:69:6b:21:11:ad:
         fd:6d:e2:53:56:fb:9f:38:1f:31:d5:c3:95:2c:d4:2d:e1:02:
         0d:27:1e:c4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjUwODAyMTU1MzAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhlMzQ1Yy01NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/PtZbailFe4fBg3qLnVMtqsJzWHRBWa/0UwqgKXT4nS2lcppV82IaJTs58/
CXL7BvZPBGnvp7a0auY3YGjtKXHy8wSD691tXdcqRc/76s6hqrBWFBxI38ikhSDb
UFDsaXlt4hOfD1gAp32mclhMT7ziowUtX0cA+RVqtJ9uqF8kHCkM/ipxUDd6l9ct
k1VuE36GaZKdnui4eig/Rw5IlQ8J/DYKHhLRqUgniTSxxFPaf7wCMPFx/RpJtnt2
Ss1cGTJ7CfO0O5xFMs4jFW33n1a0AxZ5BdiJsIIAejydaa93hcOFj/gRWEUiSyK5
0yk2AQv/7ewb6WaozkeRN2rYFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJRq4mhC
HO5/t2aXPJTITj0YTEf+MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNzI4RDQ1RkEy
RkEzMTFGMEIwMTc5MjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACj45UwDQYJKoZIhvcNAQELBQADggEBAGMNTcY8apCcUfXY
Mn5dCbK+oF6e3l07lKFMa9jOguG5++AaqxyxmjiosjjsaCSyH2W2VXyFtA8JaA3s
dotJT0Q+W6xW4z2hawaaUIhxKLZG1YO5NjaQKI95DiOAPd77P24j9r+F8j8EiiqO
HJQAMB56LzZQXfUl9Ubo4eq6a8mYt4DXkeLEAnV2mAej+ys/FAEVPIgKFoQKGyxg
PnbTqOSWOxyNADcDudBAWKSRWRSJSNUKYoUaV72f7iCaU6LNBXDA1Uus2lQ1FaVF
3mMFEXDCP2Wq5qxLtIVNLkXPRgBik7IBFA9payERrf1t4lNW+584HzHVw5Us1C3h
Ag0nHsQ=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:49 2025 by rpki-client