Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/086823BE07B911F0875CC733C4F9AE02.roa
File:                     086823BE07B911F0875CC733C4F9AE02.roa (raw, json)
Hash identifier:          a6qqO3amLPBWrWsiageKzRj9w8Ftk/NLdlmIk76Re5k=
Subject key identifier:   B2:BC:FC:20:37:B7:A3:54:D8:FD:11:1B:49:51:3F:3C:D4:76:97:6B
Certificate issuer:       /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial:       0197
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/086823BE07B911F0875CC733C4F9AE02.roa
Signing time:             Fri 25 Jul 2025 04:08:14 +0000
ROA not before:           Fri 25 Jul 2025 04:08:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.36.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
                          rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
        Validity
            Not Before: Jul 25 04:08:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6883032e-3565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:d0:a5:f3:08:26:cc:59:28:dc:6f:11:ac:
                    a8:08:4b:6b:f8:3c:b9:2f:12:7e:a1:47:df:b9:25:
                    91:44:0b:2f:cc:cd:cc:c9:5b:7a:21:07:53:a7:d2:
                    cf:6b:8e:03:f3:36:e1:df:05:55:ab:a5:0e:93:2a:
                    50:a3:c9:14:b6:73:ec:8b:0a:61:c6:2c:cb:4c:41:
                    3e:9c:b1:4a:38:79:5f:62:49:fd:67:7e:78:d7:65:
                    41:45:d2:60:38:86:5e:d0:9e:85:74:02:56:32:de:
                    e8:32:c1:0d:83:2d:36:de:ed:31:f7:3f:5e:f9:2b:
                    31:00:69:df:a9:4f:06:2c:a7:5f:ff:c5:75:b2:d8:
                    c9:4b:0c:ee:be:66:6a:70:32:9c:34:19:34:84:df:
                    88:16:ed:1a:f5:79:b1:99:60:e4:a9:ec:ac:12:24:
                    fe:b4:f5:f1:0d:76:af:40:47:c1:fe:b4:b5:4e:64:
                    55:a4:c0:66:cc:eb:f1:15:5b:4f:6f:79:64:08:b4:
                    52:97:37:05:ef:d5:2e:31:7e:62:49:2d:eb:23:c7:
                    b8:13:19:36:08:bb:d0:7a:c4:2c:48:9b:76:ce:6d:
                    fa:fc:4d:10:b3:45:ab:8f:67:ab:26:5f:ac:6c:be:
                    d1:e4:3e:66:fa:b1:ed:25:1a:21:99:10:41:4d:fe:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BC:FC:20:37:B7:A3:54:D8:FD:11:1B:49:51:3F:3C:D4:76:97:6B
            X509v3 Authority Key Identifier:
                keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/086823BE07B911F0875CC733C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:a7:69:67:48:12:ca:e2:48:77:29:b8:6b:bb:af:9e:27:
         6b:8e:85:78:38:be:3e:2c:3e:59:01:13:59:5b:1b:27:77:0e:
         20:d0:4b:71:b5:e7:84:a6:b7:99:68:a4:18:44:c2:2c:da:72:
         0e:01:80:01:3c:91:dd:3b:43:9c:d0:0f:01:82:fd:cb:0a:83:
         ac:cd:74:ee:27:ce:58:c8:ee:2c:d5:0d:4a:cb:30:f4:ba:a0:
         11:bd:a7:9c:69:e7:2b:95:1f:e4:5e:1d:f6:15:91:15:11:b7:
         99:ad:56:ae:df:78:41:55:b3:55:26:9f:ad:46:29:26:c3:72:
         ac:25:47:80:41:d5:69:7d:b1:81:e6:2c:90:15:8f:18:94:d0:
         c4:64:eb:01:1a:9d:a6:e8:fb:dd:ff:ac:89:ea:f8:6d:ff:de:
         84:7f:f2:8e:08:e4:32:f3:34:97:8f:cc:c0:8e:68:f6:9c:41:
         07:3b:06:85:1c:5a:6f:e0:c0:61:07:db:be:a4:41:99:3f:b4:
         b3:50:82:ac:88:a3:af:94:70:19:70:74:e4:7b:3f:48:48:1d:
         a0:cf:be:28:1e:21:9d:02:4c:32:00:02:11:bf:78:8b:22:4d:
         92:83:ec:c4:71:70:c9:66:4e:75:aa:0d:50:5a:14:c0:1f:2d:
         1e:39:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:17:19 2025 by rpki-client