Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/C4B41888CF3911EFBA26F564C4F9AE02.roa
File:                     C4B41888CF3911EFBA26F564C4F9AE02.roa (raw, json)
Hash identifier:          GeuC23bQErzKdp21604gyKYVikutfo5J7NTb8XiSV2k=
Subject key identifier:   14:A6:F1:87:8C:BF:17:D2:5E:66:FE:02:96:5C:4A:13:78:C6:24:58
Certificate issuer:       /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial:       7B
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/C4B41888CF3911EFBA26F564C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 07:54:47 +0000
ROA not before:           Sun 31 Aug 2025 07:54:47 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     55933
IP address blocks:        103.212.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
                          rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
        Validity
            Not Before: Aug 31 07:54:47 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b3ffc7-04e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:a5:72:19:0e:3f:dc:5d:99:6f:fc:13:6d:
                    65:95:89:ce:30:cb:29:3a:d3:ed:c8:f6:d3:80:68:
                    81:a7:55:1a:9c:a3:55:9a:f1:9c:7e:da:b7:88:24:
                    9d:c6:11:e3:b4:ef:30:41:bd:a5:8f:96:57:91:b1:
                    7d:2a:f1:bd:30:f9:ea:2c:dc:c8:12:5a:2b:07:ef:
                    5e:0a:ad:00:c2:2e:55:11:5d:5f:fb:62:c6:ff:45:
                    af:39:3b:dd:e2:d8:35:63:19:df:d6:ab:b1:8c:6f:
                    31:2e:d9:61:d6:9a:c0:45:b9:3f:83:ba:90:71:8e:
                    23:0e:7a:4b:2c:92:01:db:83:ed:0e:5f:87:77:48:
                    9d:d0:c1:2f:e7:f0:44:51:82:44:82:d2:d3:33:14:
                    e4:a1:40:bc:d9:2a:08:d2:a7:25:70:e8:2c:a5:99:
                    b1:0d:ca:02:21:0c:20:82:c7:0d:a9:94:ac:98:bb:
                    ca:82:a6:b7:24:b8:fc:57:67:50:2a:7f:85:82:f0:
                    b8:44:6e:88:35:17:4d:17:6b:17:7a:c1:0a:3a:e8:
                    e9:4e:98:d1:33:aa:29:6b:f5:9c:38:0c:b9:e3:e4:
                    66:73:06:de:88:34:6a:71:73:d1:6c:b1:ca:a4:a7:
                    64:1f:ac:e9:60:9e:60:b8:80:93:86:70:e4:62:8a:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A6:F1:87:8C:BF:17:D2:5E:66:FE:02:96:5C:4A:13:78:C6:24:58
            X509v3 Authority Key Identifier:
                keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/C4B41888CF3911EFBA26F564C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:7c:be:4e:99:be:e6:4d:7d:78:2e:59:99:64:ec:67:e9:
         7b:4b:de:d1:db:3e:a9:bf:66:e6:48:75:05:f3:f6:39:64:30:
         0e:a5:29:89:cd:ef:1b:70:dd:d5:2f:17:a8:ec:17:ac:54:59:
         f9:ae:4a:3f:07:03:5d:81:4b:a2:ee:69:ed:e2:06:dc:ec:f6:
         c9:9c:f5:aa:cf:24:ad:1b:e6:b0:0f:bc:cc:b2:da:cc:0c:79:
         9e:57:e9:2b:6a:47:8b:d4:25:47:17:aa:27:37:c9:bf:77:7d:
         7f:b4:b7:bf:7c:5b:d6:23:e6:1b:de:d0:ca:4b:16:81:e2:b7:
         e5:eb:e9:c3:2e:66:46:55:32:c6:61:06:69:a3:bd:42:35:f1:
         eb:98:38:37:73:8b:fc:7f:3e:8a:52:83:f8:b7:ca:7d:f2:65:
         28:62:dc:88:98:38:27:af:12:77:2f:70:f3:cc:b4:9e:53:47:
         eb:26:7f:c8:2c:1b:5b:fe:27:1e:e7:19:06:6d:2b:11:8d:02:
         c3:8b:e7:66:ab:34:17:43:5e:fe:c2:da:9b:b6:a6:cd:62:0d:
         f3:fe:fb:43:bf:89:ae:e5:33:c7:53:29:5e:39:48:9b:81:67:
         a2:cf:39:5c:cc:ad:7d:79:49:68:c2:74:fa:77:39:36:d0:97:
         ae:65:81:7f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
N0I0QjExMC8GA1UEBRMoQzg3N0NERjIyRDI1QjZFMzNGQzVFNDk1QkU1NUU1OUQw
QTk0OTg3RTAeFw0yNTA4MzEwNzU0NDdaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4YjNmZmM3LTA0ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDARqVyGQ4/3F2Zb/wTbWWVic4wyyk60+3I9tOAaIGnVRqco1Wa8Zx+2reIJJ3G
EeO07zBBvaWPlleRsX0q8b0w+eos3MgSWisH714KrQDCLlURXV/7Ysb/Ra85O93i
2DVjGd/Wq7GMbzEu2WHWmsBFuT+DupBxjiMOeksskgHbg+0OX4d3SJ3QwS/n8ERR
gkSC0tMzFOShQLzZKgjSpyVw6CylmbENygIhDCCCxw2plKyYu8qCprckuPxXZ1Aq
f4WC8LhEbog1F00Xaxd6wQo66OlOmNEzqilr9Zw4DLnj5GZzBt6INGpxc9Fsscqk
p2QfrOlgnmC4gJOGcORiig5ZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFKbxh4y/
F9JeZv4CllxKE3jGJFgwHwYDVR0jBBgwFoAUyHfN8i0ltuM/xeSVvlXlnQqUmH4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QjRCL0UxNTZBMDRDQ0Yz
ODExRUY4NDg0RTkyRkM0RjlBRTAyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1I
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveUhmTjhpMGx0dU1feGVTVnZsWGxuUXFVbUg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi9DNEI0MTg4OENG
MzkxMUVGQkEyNkY1NjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWfUujANBgkqhkiG9w0BAQsFAAOCAQEATWB8vk6ZvuZNfXgu
WZlk7Gfpe0ve0ds+qb9m5kh1BfP2OWQwDqUpic3vG3Dd1S8XqOwXrFRZ+a5KPwcD
XYFLou5p7eIG3Oz2yZz1qs8krRvmsA+8zLLazAx5nlfpK2pHi9QlRxeqJzfJv3d9
f7S3v3xb1iPmG97QyksWgeK35evpwy5mRlUyxmEGaaO9QjXx65g4N3OL/H8+ilKD
+LfKffJlKGLciJg4J68Sdy9w88y0nlNH6yZ/yCwbW/4nHucZBm0rEY0Cw4vnZqs0
F0Ne/sLam7amzWIN8/77Q7+JruUzx1MpXjlIm4Fnos85XMytfXlJaMJ0+nc5NtCX
rmWBfw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 08:57:13 2025 by rpki-client