Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/836F1D0AE0FB11EEB861CD40C4F9AE02.roa
File:                     836F1D0AE0FB11EEB861CD40C4F9AE02.roa (raw, json)
Hash identifier:          TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=
Subject key identifier:   01:B3:33:3B:5C:DA:74:F5:91:75:DF:A4:D6:54:1B:94:8F:FB:BA:1B
Certificate issuer:       /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial:       049A
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/836F1D0AE0FB11EEB861CD40C4F9AE02.roa
Signing time:             Sat 17 May 2025 00:55:15 +0000
ROA not before:           Sat 17 May 2025 00:55:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141990
IP address blocks:        103.164.8.0/24 maxlen: 24
                          103.164.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
                          rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
        Validity
            Not Before: May 17 00:55:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6827de73-2004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:25:fd:fa:81:79:39:ae:f2:b6:41:fd:06:
                    cb:e5:96:46:c5:3d:fe:78:9b:52:83:98:33:3e:eb:
                    ca:61:c7:ea:ff:18:ed:b1:5b:ed:4a:ce:1c:40:b0:
                    68:ff:39:ec:f6:ae:1e:e4:a2:2b:10:67:1f:89:65:
                    45:4f:d0:46:1d:a9:29:0d:6c:86:ee:a2:ad:5f:7b:
                    8c:08:d7:0e:28:d7:3d:b2:8d:e7:d2:f7:74:fe:55:
                    77:62:c2:e0:2e:21:ef:4b:b6:9e:f9:7b:d4:38:04:
                    ee:fe:d4:a1:cb:d6:81:9c:09:28:d3:ac:1b:1e:72:
                    39:d4:59:45:1b:0f:7a:94:0d:66:5a:5c:33:f8:9f:
                    f9:ce:7f:83:79:12:1c:2d:67:9b:c7:25:de:af:c7:
                    ff:5d:da:f4:c9:66:8b:a8:c3:d4:27:6a:c8:92:88:
                    e1:44:b1:6e:35:cf:69:23:77:73:ed:19:93:c8:0a:
                    9e:46:1f:7d:4a:98:bd:3b:48:7a:4d:9f:bd:57:ae:
                    29:82:2e:6a:f8:88:4d:e2:fc:3a:9c:62:11:54:cc:
                    85:72:99:70:66:64:e2:c5:e1:82:29:5d:9f:49:15:
                    a4:cb:a5:e2:a9:46:04:9a:66:6b:cb:93:21:f4:6c:
                    97:79:46:92:22:13:a9:4b:3c:eb:5b:0e:4d:8f:d9:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:33:3B:5C:DA:74:F5:91:75:DF:A4:D6:54:1B:94:8F:FB:BA:1B
            X509v3 Authority Key Identifier:
                keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/836F1D0AE0FB11EEB861CD40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:c6:c0:ba:b4:b8:f4:0e:48:61:f0:15:82:46:b8:73:b5:54:
         56:45:6b:4e:f0:a6:82:08:74:2d:35:2c:96:79:70:e0:8a:86:
         61:a3:06:61:cf:61:bf:63:d8:b8:c4:63:54:8d:39:fb:07:ec:
         80:ea:75:cd:86:1d:59:71:a4:0a:f6:45:c8:e0:cb:cd:c3:da:
         e4:5b:b1:57:b6:33:37:4f:24:48:dd:15:76:17:89:13:bc:7e:
         22:54:92:15:81:3a:1d:a8:81:1d:52:05:10:4e:0b:f9:fd:5b:
         ee:e8:07:51:5e:5a:4d:43:7e:da:e2:68:51:16:af:82:0b:fd:
         4e:34:e5:ba:46:4a:aa:75:9a:56:d3:5d:f6:9c:fe:57:fa:65:
         a0:90:b0:d1:62:f9:5d:ca:a5:15:9e:13:95:44:6c:00:fb:bc:
         52:7b:ca:5d:41:c8:8c:0f:34:8c:81:7e:78:72:9d:f8:1e:15:
         7c:a8:3e:f6:69:2e:49:65:9f:8e:6c:2a:69:cc:01:0f:8d:4d:
         d5:51:97:7f:09:80:cc:0e:e6:85:70:f9:03:2f:f7:fc:1f:9d:
         d2:1e:79:3d:b5:1a:6f:cd:e6:df:5d:05:b3:4f:89:d8:b1:8b:
         69:df:c2:57:16:57:e9:75:6c:6c:bc:ff:60:07:bc:f6:86:92:
         f9:18:2c:7c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwRTQxMTAvBgNVBAUTKDBBOEY5NDdFOUNBMEZGQTQ1NDc4RUM2MkE3RUJBRDky
N0IwNDE5MzAwHhcNMjUwNTE3MDA1NTE1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI3ZGU3My0yMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RQl/fqBeTmu8rZB/QbL5ZZGxT3+eJtSg5gzPuvKYcfq/xjtsVvtSs4cQLBo
/zns9q4e5KIrEGcfiWVFT9BGHakpDWyG7qKtX3uMCNcOKNc9so3n0vd0/lV3YsLg
LiHvS7ae+XvUOATu/tShy9aBnAko06wbHnI51FlFGw96lA1mWlwz+J/5zn+DeRIc
LWebxyXer8f/Xdr0yWaLqMPUJ2rIkojhRLFuNc9pI3dz7RmTyAqeRh99Spi9O0h6
TZ+9V64pgi5q+IhN4vw6nGIRVMyFcplwZmTixeGCKV2fSRWky6XiqUYEmmZry5Mh
9GyXeUaSIhOpSzzrWw5Nj9kV5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAGzMztc
2nT1kXXfpNZUG5SP+7obMB8GA1UdIwQYMBaAFAqPlH6coP+kVHjsYqfrrZJ7BBkw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjBFNC82MkQ0OENDRTNC
QUQxMUVDOUIzQ0VDMUNDNEY5QUUwMi9Dby1VZnB5Z182UlVlT3hpcC11dGtuc0VH
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NvLVVmcHlnXzZSVWVPeGlwLXV0a25zRUdUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTYwRTQvNjJENDhDQ0UzQkFEMTFFQzlCM0NFQzFDQzRGOUFFMDIvODM2RjFEMEFF
MEZCMTFFRUI4NjFDRDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpAgwDQYJKoZIhvcNAQELBQADggEBAM3GwLq0uPQOSGHw
FYJGuHO1VFZFa07wpoIIdC01LJZ5cOCKhmGjBmHPYb9j2LjEY1SNOfsH7IDqdc2G
HVlxpAr2Rcjgy83D2uRbsVe2MzdPJEjdFXYXiRO8fiJUkhWBOh2ogR1SBRBOC/n9
W+7oB1FeWk1DftriaFEWr4IL/U405bpGSqp1mlbTXfac/lf6ZaCQsNFi+V3KpRWe
E5VEbAD7vFJ7yl1ByIwPNIyBfnhynfgeFXyoPvZpLklln45sKmnMAQ+NTdVRl38J
gMwO5oVw+QMv9/wfndIeeT21Gm/N5t9dBbNPidixi2nfwlcWV+l1bGy8/2AHvPaG
kvkYLHw=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:56:28 2025 by rpki-client