Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8F34BFAADF7E11EF9F3F8268C4F9AE02.roa
File:                     8F34BFAADF7E11EF9F3F8268C4F9AE02.roa (raw, json)
Hash identifier:          bHNyKxoycyqRpoo7f6X4AAF5PtZ/4CpsgG6YMYjjnls=
Subject key identifier:   DB:05:4A:0E:BA:FD:DD:6B:C9:57:A3:88:C7:79:3E:F5:57:9A:1C:48
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       36A3
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8F34BFAADF7E11EF9F3F8268C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:53:10 +0000
ROA not before:           Sat 02 Aug 2025 15:53:10 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     36352
IP address blocks:        103.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 23:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13987 (0x36a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:53:10 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3465-7a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:ec:b0:4d:5e:11:31:b7:aa:f7:c5:ec:2c:
                    8c:e1:3f:e5:c6:2d:a1:a9:da:b2:5d:31:65:90:a6:
                    c7:a7:74:22:b2:a8:b2:a4:bd:4b:7d:d4:64:b8:80:
                    e9:62:b5:36:57:ca:8d:10:9a:e3:c2:29:7a:2b:7f:
                    24:71:7a:ee:02:7b:74:cf:0b:74:d0:cb:bb:17:84:
                    0b:d4:ac:19:16:e3:de:67:82:2c:10:b5:de:65:2c:
                    d6:00:a4:68:88:4d:b7:dd:2d:97:fc:67:c5:b6:8a:
                    1a:25:0b:94:9b:ca:4f:6a:e7:49:90:cb:02:70:c7:
                    a5:07:87:62:03:d8:95:a4:ff:e6:ad:09:c4:6e:14:
                    98:64:6b:e9:ee:41:4d:82:a5:73:6f:78:c0:00:66:
                    32:aa:95:e6:9a:05:b2:4d:70:2c:ee:ee:74:3b:9b:
                    10:f4:38:ff:20:ff:fa:71:99:ec:31:2f:ce:bc:42:
                    0b:1b:9a:ac:44:9f:99:dd:8e:ca:db:16:2d:53:f4:
                    0b:5d:ee:b7:df:c3:69:b3:47:e0:e0:83:61:96:ab:
                    b7:e0:80:cf:62:cc:50:de:48:5d:47:13:a8:10:2d:
                    1c:76:16:2c:72:7f:d4:72:f0:cd:02:59:cd:a5:d7:
                    c7:76:32:bd:9a:7a:46:51:31:ba:a7:d5:9b:d3:fb:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:05:4A:0E:BA:FD:DD:6B:C9:57:A3:88:C7:79:3E:F5:57:9A:1C:48
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8F34BFAADF7E11EF9F3F8268C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0c:bc:17:eb:c9:c8:40:3f:ef:04:88:4a:c9:3d:17:67:38:
         d0:c2:58:64:0d:f9:72:06:88:07:80:80:d6:e2:f4:ed:c1:8e:
         fc:f8:bd:21:97:b1:b4:ef:6b:e3:13:e7:ca:6d:ea:66:4a:95:
         8d:18:44:6a:a0:9e:4f:05:74:63:32:35:08:6d:ba:58:ff:c8:
         63:0a:40:df:5c:63:46:8c:e3:fb:43:17:6a:83:e9:14:4e:40:
         0f:6a:13:50:a2:65:9f:db:72:18:a6:72:99:ce:65:02:95:13:
         be:2b:c5:17:44:d2:dd:7e:24:d4:05:51:db:54:be:ca:04:96:
         3b:50:f7:b9:e1:a1:2d:de:21:da:31:3d:76:39:b1:41:0c:8a:
         89:11:9e:01:ea:e4:9c:55:cd:c2:29:06:1d:dd:26:9e:fa:6d:
         da:af:63:99:dd:8b:5a:cb:f8:57:d3:8f:9e:fd:7f:0a:15:4e:
         db:68:22:a9:38:67:bc:0d:dd:83:c9:2d:2d:1b:c2:32:99:36:
         a1:b7:13:85:1e:d2:f8:06:6e:d5:87:a9:c9:68:b1:0c:48:eb:
         35:29:8c:d2:63:c5:00:d7:8b:61:c5:2a:12:14:ae:17:0d:7c:
         6a:63:77:18:f0:fc:93:e0:52:80:7c:d4:26:20:5a:94:38:61:
         62:b6:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:02 2025 by rpki-client