Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/39A906E8152C11F08DC35116C4F9AE02.roa
File:                     39A906E8152C11F08DC35116C4F9AE02.roa (raw, json)
Hash identifier:          LpZGZLncTzWOvQxmXibbHB08wMwsFC9T1sCL9HoJGDA=
Subject key identifier:   FE:53:EB:48:39:76:22:B0:FC:22:9B:7E:08:8D:26:E2:49:09:0E:DE
Certificate issuer:       /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
Certificate serial:       3B
Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/39A906E8152C11F08DC35116C4F9AE02.roa
Signing time:             Sat 26 Jul 2025 10:11:15 +0000
ROA not before:           Sat 26 Jul 2025 10:11:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     147181
IP address blocks:        163.227.6.0/24 maxlen: 24
                          163.227.7.0/24 maxlen: 24
                          2401:fba0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
        Validity
            Not Before: Jul 26 10:11:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6884a9c2-fda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:03:7d:7d:29:8f:56:0b:95:69:73:27:27:
                    05:07:30:67:27:ac:4f:ec:3f:b1:ef:c0:71:dc:77:
                    57:5b:cd:27:cb:28:65:b2:23:d4:53:b4:2c:52:49:
                    8b:1b:f0:40:c2:6c:6f:8d:f2:e0:e4:f9:52:f8:66:
                    db:70:53:60:3f:74:2d:49:a4:1d:7a:91:7a:2d:7f:
                    9a:b2:46:01:43:a9:eb:0b:19:20:79:fa:c4:87:04:
                    8b:eb:fc:3b:b5:70:24:dd:51:98:81:94:f2:9f:d6:
                    c3:66:05:b9:ba:82:ca:6a:fe:eb:e6:07:49:7e:62:
                    1d:89:8a:81:55:3c:ca:62:1c:fb:72:0b:19:28:3a:
                    e1:ec:fc:7d:98:1a:47:a7:f9:0d:f9:f0:66:c9:09:
                    0e:72:08:7f:ae:ec:b3:7b:42:2d:8f:00:41:fd:6a:
                    2d:ae:25:23:1d:03:83:38:81:89:3b:87:75:3d:94:
                    23:55:b0:15:6c:1b:e0:95:04:9e:23:e3:a6:fd:4b:
                    74:d5:c2:87:a5:01:21:1f:29:50:76:70:83:22:58:
                    ae:fb:b7:43:03:45:9f:e7:e5:b2:ea:65:86:3f:78:
                    f7:a8:4d:b5:1b:ed:f0:86:1c:13:84:cf:77:19:d4:
                    f1:61:c5:7e:3f:f0:25:34:a2:d9:37:c6:8b:54:1e:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:53:EB:48:39:76:22:B0:FC:22:9B:7E:08:8D:26:E2:49:09:0E:DE
            X509v3 Authority Key Identifier:
                keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/39A906E8152C11F08DC35116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.6.0/23
                IPv6:
                  2401:fba0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:16:2f:55:5a:40:24:59:4e:94:62:1d:c2:1e:03:30:28:
         0f:8c:7f:2a:38:32:0f:eb:a1:64:fe:e7:bf:c8:cd:82:8d:4e:
         57:7f:b3:3c:b4:8a:a4:27:3b:50:ad:06:ec:13:60:b8:0c:94:
         13:ab:0d:56:04:ff:90:0e:d7:72:86:76:7f:f8:bc:e0:e5:38:
         7f:fb:a5:7e:c8:be:cf:c3:96:70:7f:e2:07:a3:77:8c:ec:26:
         52:eb:91:c9:c6:60:fd:25:04:87:f2:7f:72:64:92:bb:c5:7f:
         d8:12:7c:82:4a:b5:26:c9:35:8a:1a:15:63:72:15:7a:f9:35:
         bd:4a:f7:d7:26:7d:be:c0:87:d1:48:f7:81:66:28:a3:be:28:
         87:21:06:4d:76:32:86:23:4d:6f:36:9c:db:14:b0:3a:41:3c:
         51:af:3a:cb:7d:ce:f8:90:1f:25:97:f0:dd:33:36:fc:cc:57:
         10:6a:c7:be:b3:84:f7:4d:eb:e4:e4:39:4c:9a:ce:e1:d2:4f:
         47:67:f3:d9:a0:24:85:29:37:ca:5e:a3:7a:e9:d1:ea:36:1a:
         3f:ea:8c:b2:a0:d6:18:7b:8e:3e:ab:46:28:61:5d:44:86:08:
         04:63:fd:a3:55:7a:8e:89:0b:e3:0b:88:4a:9d:9c:24:c7:cd:
         f6:1f:cc:8b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
M0VFRTExMC8GA1UEBRMoMDE1QzgyRUY4RjE3Rjc1RDAxRjJBMzA2Nzg2ODVERkRD
MjVFMUY3QzAeFw0yNTA3MjYxMDExMTVaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4ODRhOWMyLWZkYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJhwN9fSmPVguVaXMnJwUHMGcnrE/sP7HvwHHcd1dbzSfLKGWyI9RTtCxSSYsb
8EDCbG+N8uDk+VL4ZttwU2A/dC1JpB16kXotf5qyRgFDqesLGSB5+sSHBIvr/Du1
cCTdUZiBlPKf1sNmBbm6gspq/uvmB0l+Yh2JioFVPMpiHPtyCxkoOuHs/H2YGken
+Q358GbJCQ5yCH+u7LN7Qi2PAEH9ai2uJSMdA4M4gYk7h3U9lCNVsBVsG+CVBJ4j
46b9S3TVwoelASEfKVB2cIMiWK77t0MDRZ/n5bLqZYY/ePeoTbUb7fCGHBOEz3cZ
1PFhxX4/8CU0otk3xotUHkxVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU/lPrSDl2
IrD8Ipt+CI0m4kkJDt4wHwYDVR0jBBgwFoAUAVyC748X910B8qMGeGhd/cJeH3ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRUVFL0RCQjg5RjlFMTUy
QjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEwQjhxTUdlR2hkX2NKZUgz
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQVZ5Qzc0OFg5MTBCOHFNR2VHaGRfY0plSDN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0VFRS9EQkI4OUY5RTE1MkIxMUYwODkyRkQ0ODFDNEY5QUUwMi8zOUE5MDZFODE1
MkMxMUYwOERDMzUxMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAaPjBjAPBAIAAjAJAwcAJAH7oAAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCC7xYvVVpAJFlOlGIdwh4DMCgPjH8qODIP66Fk/ue/yM2CjU5Xf7M8tIqk
JztQrQbsE2C4DJQTqw1WBP+QDtdyhnZ/+Lzg5Th/+6V+yL7Pw5Zwf+IHo3eM7CZS
65HJxmD9JQSH8n9yZJK7xX/YEnyCSrUmyTWKGhVjchV6+TW9SvfXJn2+wIfRSPeB
ZiijviiHIQZNdjKGI01vNpzbFLA6QTxRrzrLfc74kB8ll/DdMzb8zFcQase+s4T3
Tevk5DlMms7h0k9HZ/PZoCSFKTfKXqN66dHqNho/6oyyoNYYe44+q0YoYV1EhggE
Y/2jVXqOiQvjC4hKnZwkx832H8yL
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:54 2025 by rpki-client