Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F71994162B9A11F0A72AD831C4F9AE02.roa
File:                     F71994162B9A11F0A72AD831C4F9AE02.roa (raw, json)
Hash identifier:          LB8tGJB+flDYfBiPf4Wzw5dhgh++fqBbvhDLC0tg8hM=
Subject key identifier:   B7:59:C1:1E:36:EB:15:2F:CB:0A:6E:B5:62:7A:CC:55:D4:63:10:18
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3695
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F71994162B9A11F0A72AD831C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:52:55 +0000
ROA not before:           Sat 02 Aug 2025 15:52:55 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     138109
IP address blocks:        103.126.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13973 (0x3695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:52:55 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3457-de77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:3a:45:25:8a:7a:51:f2:7b:6a:4a:d2:87:
                    34:33:4f:0d:c5:08:8a:c7:fb:c5:d2:78:ed:4e:3c:
                    c8:9e:e4:af:5a:85:99:53:75:1f:f0:53:15:c3:8d:
                    db:f2:7b:73:15:c3:82:3a:9b:b8:f8:64:63:09:2b:
                    5a:c8:5f:e4:1d:83:d6:d3:a9:12:59:c6:fa:ae:85:
                    5a:8c:51:88:14:6d:64:f2:93:fd:e7:74:a3:17:0d:
                    9a:b7:25:93:ad:f6:36:96:b0:cb:e0:7a:f7:d2:c0:
                    96:d0:dc:72:8d:b0:45:ed:fb:50:3e:87:4b:fa:00:
                    21:b1:02:ab:e6:5c:11:ce:f1:98:b3:16:6a:c1:f1:
                    84:7a:97:53:8b:49:ff:1f:9d:11:f9:34:d3:b7:e0:
                    af:6d:0a:5c:9c:9d:d0:d8:be:f8:c4:03:56:c7:62:
                    2e:89:26:ce:92:61:e4:0d:96:b5:3f:35:ff:5c:33:
                    dd:cc:dd:ea:e0:3a:88:75:36:e1:14:4b:f4:d4:ef:
                    cd:1f:dc:84:d0:77:12:be:d0:ca:20:3c:aa:3c:4b:
                    84:a9:b6:fa:34:4b:48:a6:49:36:9a:01:e5:b1:17:
                    40:a8:6b:6b:df:08:e6:35:31:c1:58:e8:c2:5c:ce:
                    8e:08:66:52:2c:89:69:f7:3b:e9:b5:14:84:1e:83:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:59:C1:1E:36:EB:15:2F:CB:0A:6E:B5:62:7A:CC:55:D4:63:10:18
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F71994162B9A11F0A72AD831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:49:7a:8d:1b:17:06:7c:6f:5c:ea:39:6a:76:b7:8b:03:01:
         cc:4a:1e:52:e1:ad:d5:fe:20:f3:79:a5:db:1f:87:42:59:d8:
         f4:85:b1:c7:50:db:df:44:0b:ec:2d:87:ee:c4:c6:90:8a:1d:
         ec:21:8c:8c:98:79:7e:b2:3b:b9:0b:f9:26:8c:81:86:c8:71:
         d7:bb:35:b4:d3:f0:00:2e:16:86:28:72:99:31:62:f4:49:c9:
         6c:57:fd:bd:2f:74:f1:d1:43:1c:72:17:a4:b5:d9:f8:3d:d5:
         b2:9e:23:85:ce:56:3f:44:9c:07:42:d9:43:7d:09:25:84:20:
         ea:9c:71:3a:60:f5:54:e3:75:7d:fd:57:1a:6f:82:66:e8:e3:
         d9:d1:12:2a:d3:68:7b:a1:77:20:c8:26:ae:4c:84:18:1c:af:
         fe:84:87:a6:96:dc:3e:cd:14:64:df:34:80:e7:64:54:c1:ed:
         37:98:c4:f5:97:18:e4:e8:b7:d4:ac:0f:fa:66:54:84:84:d1:
         fe:df:80:08:47:59:30:28:5b:31:72:88:a1:fc:fe:b4:5c:96:
         bf:e9:92:05:18:a3:99:43:74:97:2e:48:49:8f:9d:3d:f6:6a:
         dd:5f:7a:81:c2:e2:a9:72:d5:17:df:56:85:cd:73:4d:49:16:
         b4:9e:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:06 2025 by rpki-client