Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
File:                     807F931E2B4011F092798182C4F9AE02.roa (raw, json)
Hash identifier:          SyOVv0wloe64EqfPG7KvAA2OaXu10vtdAfQrCFTdYjg=
Subject key identifier:   69:98:09:CB:4A:55:52:FC:CB:2A:6D:2A:1B:14:78:6E:5C:73:7B:19
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3698
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:52:58 +0000
ROA not before:           Sat 02 Aug 2025 15:52:58 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     139949
IP address blocks:        103.147.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13976 (0x3698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:52:58 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e345a-6f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:14:95:70:d9:86:61:16:ad:69:59:dd:33:
                    27:aa:bf:91:be:f3:ba:17:ee:96:90:73:70:12:fe:
                    34:03:ab:6e:e3:a3:41:e1:aa:49:9d:75:63:91:a9:
                    51:a4:5d:4f:27:63:3b:6e:ea:49:8c:54:7a:2c:5f:
                    db:fb:f6:1f:08:b7:4a:26:c8:74:e1:ea:07:3a:77:
                    39:45:6b:d2:5b:c0:39:97:7d:bb:8e:9b:e7:28:1e:
                    99:6d:a7:e5:e0:7f:d6:d3:7f:1e:7f:0a:e8:2b:95:
                    43:ed:d7:df:ee:13:09:23:a2:c8:cd:e7:04:b5:05:
                    8d:57:21:f1:27:bd:4d:79:b2:b2:fd:66:c6:3c:a8:
                    87:0e:20:d4:f0:85:68:1a:be:8d:8a:91:0c:a4:11:
                    9b:9f:fe:53:a1:a0:85:fa:1e:3e:bf:6b:ad:91:95:
                    e0:93:a0:ce:3b:52:eb:b4:57:50:26:eb:70:1c:01:
                    75:3a:af:e8:67:7f:48:42:2c:70:23:b9:f4:09:d6:
                    d7:6c:af:85:76:0d:2c:c5:92:b0:8c:78:d9:35:a3:
                    d8:4f:a3:4c:a3:a0:7f:77:73:b7:0c:6d:1c:d0:f9:
                    73:ab:7e:52:1d:01:02:34:d1:47:92:89:b3:2e:e1:
                    53:4a:44:0e:ae:d0:ee:72:0d:b3:6e:d9:0c:84:00:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:09:CB:4A:55:52:FC:CB:2A:6D:2A:1B:14:78:6E:5C:73:7B:19
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:f3:ac:ef:af:81:34:cd:16:53:43:6b:30:75:c2:f8:c6:
         ba:a9:5e:ec:a0:2c:de:84:97:a8:2b:ee:5a:d3:ed:7f:5b:4a:
         ef:aa:d4:f6:1b:28:ed:63:64:3d:26:a4:91:b8:28:07:6a:47:
         62:43:65:99:10:11:8d:07:42:96:91:5e:4d:83:ac:01:2f:77:
         fb:71:db:8e:cb:a7:76:09:67:89:33:ad:ef:36:32:06:4a:bd:
         54:84:17:61:45:be:99:d7:75:4c:ae:b4:2a:2d:61:14:75:1c:
         b9:71:e6:15:f7:ce:ff:03:45:19:b4:c7:50:4a:68:59:1c:8e:
         0c:4f:0a:54:93:0f:88:4e:c6:a9:44:4f:5e:53:d5:6b:f5:4a:
         ef:1a:ca:d9:ee:9a:1d:ca:7f:7a:7e:4c:b6:a8:d8:3e:af:64:
         df:5c:d0:06:15:32:f3:8d:21:b4:72:ee:00:56:00:bd:9f:ca:
         04:0f:d2:eb:a6:7a:33:b0:28:37:ac:9d:fa:42:f8:dc:be:f7:
         ee:05:67:ff:5e:2f:8a:ef:e9:ba:65:e4:2f:8b:75:42:6f:ef:
         8a:71:2e:13:9d:f2:b5:29:43:98:04:6e:c8:8e:28:cb:d8:18:
         c4:2d:7b:95:e8:02:0e:4e:f1:49:05:d3:88:74:c2:6f:9f:fd:
         97:4b:44:7d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjUwODAyMTU1MjU4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhlMzQ1YS02ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNIUlXDZhmEWrWlZ3TMnqr+RvvO6F+6WkHNwEv40A6tu46NB4apJnXVjkalR
pF1PJ2M7bupJjFR6LF/b+/YfCLdKJsh04eoHOnc5RWvSW8A5l327jpvnKB6Zbafl
4H/W038efwroK5VD7dff7hMJI6LIzecEtQWNVyHxJ71NebKy/WbGPKiHDiDU8IVo
Gr6NipEMpBGbn/5ToaCF+h4+v2utkZXgk6DOO1LrtFdQJutwHAF1Oq/oZ39IQixw
I7n0CdbXbK+Fdg0sxZKwjHjZNaPYT6NMo6B/d3O3DG0c0Plzq35SHQECNNFHkomz
LuFTSkQOrtDucg2zbtkMhADNAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGmYCctK
VVL8yyptKhsUeG5cc3sZMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvODA3RjkzMUUy
QjQwMTFGMDkyNzk4MTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkzQwDQYJKoZIhvcNAQELBQADggEBAGBN86zvr4E0zRZT
Q2swdcL4xrqpXuygLN6El6gr7lrT7X9bSu+q1PYbKO1jZD0mpJG4KAdqR2JDZZkQ
EY0HQpaRXk2DrAEvd/tx247Lp3YJZ4kzre82MgZKvVSEF2FFvpnXdUyutCotYRR1
HLlx5hX3zv8DRRm0x1BKaFkcjgxPClSTD4hOxqlET15T1Wv1Su8aytnumh3Kf3p+
TLao2D6vZN9c0AYVMvONIbRy7gBWAL2fygQP0uumejOwKDesnfpC+Ny+9+4FZ/9e
L4rv6bpl5C+LdUJv74pxLhOd8rUpQ5gEbsiOKMvYGMQte5XoAg5O8UkF04h0wm+f
/ZdLRH0=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:37 2025 by rpki-client