Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/F67BB6E890AB11ECAB81252FC4F9AE02.roa
File:                     F67BB6E890AB11ECAB81252FC4F9AE02.roa (raw, json)
Hash identifier:          2seh0qxAc2BF9PqaOJpWiLsBwQeqToRGwKWIaD/PtHs=
Subject key identifier:   29:18:44:89:63:9C:55:43:09:98:76:C3:C6:27:5A:F7:7F:4B:A1:AC
Certificate issuer:       /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial:       03D1
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/F67BB6E890AB11ECAB81252FC4F9AE02.roa
Signing time:             Thu 10 Jul 2025 20:50:26 +0000
ROA not before:           Thu 10 Jul 2025 20:50:26 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     148968
IP address blocks:        103.182.40.0/23 maxlen: 24
                          203.19.132.0/24 maxlen: 24
                          2400:5be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
                          rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
        Validity
            Not Before: Jul 10 20:50:26 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68702792-691b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:51:84:cd:f3:20:80:c1:ea:b2:87:1a:d6:
                    b6:c0:39:74:6b:bd:47:47:64:8d:c9:9d:75:ad:1a:
                    44:97:a7:5c:b5:75:f9:11:e5:09:8a:dc:03:7e:d4:
                    a7:e1:1f:cf:7d:8c:1f:ec:2e:75:af:60:91:e4:62:
                    41:56:e4:f2:af:35:80:15:41:83:fb:6a:7e:0f:5d:
                    55:63:43:e1:85:26:c9:f2:6f:d7:af:89:47:be:e1:
                    fb:f3:fc:c6:d2:a8:bd:85:43:0b:5e:ec:bf:88:51:
                    23:c7:b1:e7:01:d2:5e:d8:25:b5:5a:34:a5:cc:46:
                    eb:63:92:32:16:e1:4f:4d:95:46:2b:24:12:b9:4e:
                    78:83:30:8c:ec:9f:24:42:94:90:8c:a1:07:ca:e4:
                    67:3c:df:e5:87:75:d1:23:b4:ff:3c:f5:22:2c:ba:
                    11:95:3d:72:ae:77:71:17:60:2d:5d:5f:8e:be:06:
                    78:84:32:09:81:fd:88:9a:6a:fd:f3:f3:43:53:2a:
                    e2:bb:10:0b:c5:67:6f:22:de:26:05:4b:ad:81:b2:
                    83:41:1d:39:0d:95:ec:00:8f:32:9a:83:98:68:d6:
                    0f:d0:32:dc:e8:c0:0a:6d:88:b4:94:78:71:91:28:
                    00:bb:c5:8b:bd:f6:9b:5c:a5:28:1a:c4:d0:2f:96:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:18:44:89:63:9C:55:43:09:98:76:C3:C6:27:5A:F7:7F:4B:A1:AC
            X509v3 Authority Key Identifier:
                keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/F67BB6E890AB11ECAB81252FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.40.0/23
                  203.19.132.0/24
                IPv6:
                  2400:5be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:c1:18:c7:4d:1b:aa:78:19:8d:8d:3a:5e:9f:4a:a9:03:ae:
         b1:93:8c:48:c4:73:12:ef:d0:c9:79:4b:cb:b6:8e:e0:0d:a4:
         0e:f0:d0:5c:2c:ee:fa:a2:e3:cb:67:a9:49:d1:0a:90:83:67:
         a6:d2:f0:1c:f8:c1:bb:82:20:e5:ff:10:93:a4:06:a0:c2:c2:
         ff:79:f5:1a:c8:c1:05:f4:a9:3b:b9:dc:b4:7c:e1:ec:ea:b4:
         6c:a8:11:f0:b5:4e:41:63:52:a2:dd:51:87:4a:16:4f:42:83:
         57:53:f0:85:59:69:e1:04:05:aa:1d:46:0d:a0:05:08:ae:d8:
         e1:d1:39:7e:47:6f:28:eb:ba:69:a9:65:30:83:4c:11:11:69:
         10:48:7c:ac:0c:b5:eb:28:77:8f:0c:9f:5c:d1:5c:fb:b5:ee:
         ff:1e:17:0b:f6:f2:df:97:3e:d2:60:7d:a6:ec:9a:5b:c8:89:
         87:3d:97:c0:3e:94:84:1c:d2:79:bc:15:e3:5b:95:c3:3f:5a:
         f6:1a:90:45:d7:2b:32:46:82:37:5d:22:c4:60:22:5c:fd:2d:
         b8:dc:14:5e:0d:52:70:3c:4e:78:80:50:ee:d2:cd:9c:cc:05:
         02:bd:fe:0a:68:57:d4:14:b1:a0:35:15:3f:b0:07:80:4d:80:
         73:1c:7b:73
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB
QUI3QUZCOTYwHhcNMjUwNzEwMjA1MDI2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODcwMjc5Mi02OTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA27NRhM3zIIDB6rKHGta2wDl0a71HR2SNyZ11rRpEl6dctXX5EeUJitwDftSn
4R/PfYwf7C51r2CR5GJBVuTyrzWAFUGD+2p+D11VY0PhhSbJ8m/Xr4lHvuH78/zG
0qi9hUMLXuy/iFEjx7HnAdJe2CW1WjSlzEbrY5IyFuFPTZVGKyQSuU54gzCM7J8k
QpSQjKEHyuRnPN/lh3XRI7T/PPUiLLoRlT1yrndxF2AtXV+OvgZ4hDIJgf2Immr9
8/NDUyriuxALxWdvIt4mBUutgbKDQR05DZXsAI8ymoOYaNYP0DLc6MAKbYi0lHhx
kSgAu8WLvfabXKUoGsTQL5Z/DwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCkYRIlj
nFVDCZh2w8YnWvd/S6GsMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw
QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZCQTEvNjNCNEVBOTg5MEE5MTFFQzk3NjVCMjJEQzRGOUFFMDIvRjY3QkI2RTg5
MEFCMTFFQ0FCODEyNTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFntigDBADLE4QwDQQCAAIwBwMFACQAW+AwDQYJKoZIhvcN
AQELBQADggEBALzBGMdNG6p4GY2NOl6fSqkDrrGTjEjEcxLv0Ml5S8u2juANpA7w
0Fws7vqi48tnqUnRCpCDZ6bS8Bz4wbuCIOX/EJOkBqDCwv959RrIwQX0qTu53LR8
4ezqtGyoEfC1TkFjUqLdUYdKFk9Cg1dT8IVZaeEEBaodRg2gBQiu2OHROX5Hbyjr
ummpZTCDTBERaRBIfKwMtesod48Mn1zRXPu17v8eFwv28t+XPtJgfabsmlvIiYc9
l8A+lIQc0nm8FeNblcM/WvYakEXXKzJGgjddIsRgIlz9LbjcFF4NUnA8TniAUO7S
zZzMBQK9/gpoV9QUsaA1FT+wB4BNgHMce3M=
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:38:29 2025 by rpki-client