Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
File:                     166B5FEA727711EEA4209110C4F9AE02.roa (raw, json)
Hash identifier:          6XI21Rbox6GrvQ2XIiLWLaxiZEN511Ja5aYkWDlWtkc=
Subject key identifier:   FB:44:E2:9E:46:29:DD:56:00:C3:9B:AF:AD:0D:80:9F:A8:0E:AB:5F
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       0147
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
Signing time:             Thu 17 Jul 2025 04:41:15 +0000
ROA not before:           Thu 17 Jul 2025 04:41:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132227
IP address blocks:        103.214.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Jul 17 04:41:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68787eeb-88e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:6b:83:ce:b6:ad:99:03:d7:2c:4c:35:1c:
                    75:9e:4a:01:9c:33:2c:d4:8f:16:23:99:85:5f:38:
                    f3:e6:55:be:32:96:0a:d3:d2:4a:bb:3c:ea:3f:0f:
                    ce:61:0a:05:8e:7d:0b:1c:1f:9b:d8:aa:e4:7e:06:
                    5a:e0:f1:d8:ef:cf:b7:25:fe:4c:d2:2d:d5:c0:b6:
                    b7:ad:2f:b1:c2:67:de:7e:42:e1:b4:df:64:11:70:
                    82:e2:18:24:72:17:34:8a:29:17:cd:98:a0:1b:6e:
                    a5:14:a7:a5:1b:e3:d6:e0:cb:d6:2f:0a:24:89:61:
                    0a:55:81:98:61:ae:aa:d3:be:cd:02:c5:9d:b7:ca:
                    e9:7b:fa:99:17:8f:c0:a8:ad:6d:05:a6:24:2c:bd:
                    67:50:c5:7d:cc:33:58:d8:57:90:65:1c:0d:4b:95:
                    42:cb:52:fe:bd:9d:cd:e9:e1:d6:0e:67:46:63:71:
                    90:98:46:1e:84:1f:9e:88:0b:3d:07:b7:bb:58:0a:
                    0b:3f:23:b4:eb:e4:e0:ed:4c:12:90:f3:cc:47:4f:
                    11:ab:27:f2:1f:c1:96:49:ef:e2:ac:ac:d4:75:b7:
                    90:b1:9f:db:b3:b5:db:8a:62:33:f6:c2:b1:fb:05:
                    b8:df:02:b3:22:21:29:30:db:be:83:a5:0e:36:06:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:44:E2:9E:46:29:DD:56:00:C3:9B:AF:AD:0D:80:9F:A8:0E:AB:5F
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:8e:aa:45:11:de:d3:fe:a7:f0:d6:c0:73:6f:3e:02:b1:d7:
         7d:d2:5a:dd:6f:e8:f2:62:28:88:8a:28:29:da:61:27:9d:c7:
         9d:c8:6f:a6:f6:26:8d:71:73:ff:75:d6:62:95:fd:15:94:5f:
         2f:23:00:f3:55:9f:01:05:2d:d6:f4:b4:f9:f2:e6:c2:37:f2:
         f9:02:96:00:21:6c:9f:79:91:48:50:04:a3:57:87:fa:12:a1:
         88:49:2b:ae:33:56:45:24:ee:b3:89:ea:d2:7a:d1:98:c3:ff:
         ea:42:28:b3:b4:d1:14:63:9f:3a:05:05:40:3e:2e:4b:14:0b:
         5a:25:63:87:48:87:04:2b:44:c7:72:ff:6f:1c:76:96:64:e7:
         9c:36:4f:ec:ef:de:3b:6b:fd:33:62:44:e6:af:b5:7b:59:8b:
         05:77:7b:70:52:e4:31:4b:f4:6f:7c:18:a8:56:6c:58:f5:71:
         bf:a4:f6:6a:3d:31:a4:05:9a:5a:7e:df:ff:3e:8a:b3:04:65:
         89:2e:0e:1d:07:3f:d1:4a:9f:e9:ea:c4:6a:7e:c5:30:28:c6:
         3e:6c:7e:2c:a7:84:ea:42:c6:65:0e:c5:81:a9:90:b7:d9:43:
         de:ea:df:1a:c7:49:bd:e0:f7:91:01:83:ec:d1:81:91:64:af:
         40:7a:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:54:29 2025 by rpki-client