Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/1EE23948F8F411ED96463014C4F9AE02.roa
File:                     1EE23948F8F411ED96463014C4F9AE02.roa (raw, json)
Hash identifier:          EvYmZSvFW4TmtbBw6J3n3GDqNPIDejLlfQRwyNljJeQ=
Subject key identifier:   CB:99:0D:38:C8:E9:28:A5:38:8F:A3:FF:69:9F:5A:3A:D7:03:86:13
Certificate issuer:       /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial:       01A1
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/1EE23948F8F411ED96463014C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 07:02:00 +0000
ROA not before:           Wed 30 Jul 2025 07:02:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134555
IP address blocks:        103.16.194.0/24 maxlen: 24
                          103.16.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
                          rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190057, serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
        Validity
            Not Before: Jul 30 07:02:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6889c368-e0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:fc:e2:32:1e:4c:b5:1a:db:63:69:d0:40:
                    5e:81:2d:61:4a:7a:68:87:84:2f:7f:be:3a:3d:69:
                    fc:f4:de:33:2a:be:f4:25:bc:7d:9e:b2:11:54:e1:
                    91:8f:5c:e0:08:8d:2c:e3:03:0b:ed:f7:6e:cd:c5:
                    bd:0e:19:dd:9d:59:e0:d7:04:07:af:da:1b:ea:e7:
                    c5:41:5f:a2:4d:72:53:0f:b5:78:df:ce:c0:12:cc:
                    c3:43:7e:83:2a:ea:50:16:b5:f3:16:63:57:01:ef:
                    6f:3e:af:97:1e:dd:b3:8d:07:9b:d6:a5:00:56:e6:
                    d4:9f:79:db:74:8a:8c:3e:d9:27:c7:c4:ac:79:24:
                    72:b8:22:2b:93:ca:93:19:8e:32:b2:5a:26:15:77:
                    49:7d:ae:66:cb:01:35:ec:18:fe:16:8d:16:f9:21:
                    28:91:55:71:af:b2:3a:df:38:3c:0f:e0:b5:cd:cd:
                    74:41:6b:0c:2b:4f:ec:e7:89:80:b1:2c:36:54:bc:
                    da:7a:1f:67:7d:51:39:6a:8d:c8:75:3d:09:91:52:
                    2d:7d:8d:b3:5b:c0:4c:2d:8c:0a:fe:f4:36:d3:00:
                    ba:44:f6:f8:b6:36:25:55:a0:86:7f:c4:1f:d8:03:
                    02:f2:88:eb:d7:29:42:11:07:d0:d5:17:4e:67:c1:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:0D:38:C8:E9:28:A5:38:8F:A3:FF:69:9F:5A:3A:D7:03:86:13
            X509v3 Authority Key Identifier:
                keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/1EE23948F8F411ED96463014C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:52:40:f0:bc:67:79:32:fc:1d:a7:32:28:50:7d:fb:74:23:
         35:a5:99:94:bc:ce:c0:4d:ff:d6:a0:00:e8:98:20:65:d8:de:
         1b:a6:39:ef:c9:32:10:5a:f4:ef:b2:00:90:a5:6b:78:54:ff:
         45:c7:6d:6c:1b:d8:cb:6f:db:64:c4:75:ca:e1:d2:e4:be:b3:
         df:e6:91:20:8d:f8:de:b1:d2:19:00:d6:0d:ab:fb:e6:56:c5:
         b1:e1:20:d6:6e:ac:d9:74:ed:db:52:52:5e:4a:be:26:fb:23:
         51:cb:20:54:f1:3d:b0:1c:bb:0f:00:66:dd:4a:ed:f8:87:bc:
         77:1a:76:73:ee:fb:38:09:9c:67:2c:1e:91:0e:0b:8c:61:c6:
         f1:92:dd:5b:b9:3a:1d:4f:6b:b9:4b:2c:da:b1:69:a8:0d:cb:
         aa:74:03:a6:6a:3d:e6:6f:c7:4f:1d:37:8c:0f:64:14:54:e1:
         a3:73:f6:a1:01:1f:8a:c7:da:a5:9e:99:af:8d:42:1b:57:05:
         59:8c:5a:27:58:41:c7:6b:a3:ad:bf:de:14:44:82:a4:24:3b:
         e5:c1:f6:fb:e4:07:c6:88:02:d5:1e:57:6f:4b:52:e4:1d:0c:
         81:39:88:cd:9f:7c:fb:c6:9d:4a:fe:8a:89:ad:a3:8f:d5:64:
         d4:11:72:68
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAwNTcxMTAvBgNVBAUTKEFEQjI3QUNBQjY1OUZENEU0MTY3NDU1NzNCNDVEN0Iw
MkJEOEI4MDIwHhcNMjUwNzMwMDcwMjAwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg5YzM2OC1lMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8H84jIeTLUa22Np0EBegS1hSnpoh4Qvf746PWn89N4zKr70Jbx9nrIRVOGR
j1zgCI0s4wML7fduzcW9DhndnVng1wQHr9ob6ufFQV+iTXJTD7V4387AEszDQ36D
KupQFrXzFmNXAe9vPq+XHt2zjQeb1qUAVubUn3nbdIqMPtknx8SseSRyuCIrk8qT
GY4yslomFXdJfa5mywE17Bj+Fo0W+SEokVVxr7I63zg8D+C1zc10QWsMK0/s54mA
sSw2VLzaeh9nfVE5ao3IdT0JkVItfY2zW8BMLYwK/vQ20wC6RPb4tjYlVaCGf8Qf
2AMC8ojr1ylCEQfQ1RdOZ8E/ZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMuZDTjI
6SilOI+j/2mfWjrXA4YTMB8GA1UdIwQYMBaAFK2yesq2Wf1OQWdFVztF17Ar2LgC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDA1Ny81N0I5MjE0OEY4
NUMxMUVEQTdFOEZFNzRDNEY5QUUwMi9yYko2eXJaWl9VNUJaMFZYTzBYWHNDdll1
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JiSjZ5clpaX1U1QlowVlhPMFhYc0N2WXVBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTAwNTcvNTdCOTIxNDhGODVDMTFFREE3RThGRTc0QzRGOUFFMDIvMUVFMjM5NDhG
OEY0MTFFRDk2NDYzMDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnEMIwDQYJKoZIhvcNAQELBQADggEBAIRSQPC8Z3ky/B2n
MihQfft0IzWlmZS8zsBN/9agAOiYIGXY3humOe/JMhBa9O+yAJCla3hU/0XHbWwb
2Mtv22TEdcrh0uS+s9/mkSCN+N6x0hkA1g2r++ZWxbHhINZurNl07dtSUl5Kvib7
I1HLIFTxPbAcuw8AZt1K7fiHvHcadnPu+zgJnGcsHpEOC4xhxvGS3Vu5Oh1Pa7lL
LNqxaagNy6p0A6ZqPeZvx08dN4wPZBRU4aNz9qEBH4rH2qWema+NQhtXBVmMWidY
Qcdro62/3hREgqQkO+XB9vvkB8aIAtUeV29LUuQdDIE5iM2ffPvGnUr+iomto4/V
ZNQRcmg=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:37 2025 by rpki-client