Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
File:                     86B5983C582111EC8035E069C4F9AE02.roa (raw, json)
Hash identifier:          WLb6sKT1RvHFd2+7J5uhH2a45QLoTLj3p8VO5Tkw9qE=
Subject key identifier:   25:32:67:51:B6:2A:FB:13:36:6B:1B:66:D0:BE:3E:34:3D:8C:6C:44
Certificate issuer:       /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial:       04B0
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 00:44:56 +0000
ROA not before:           Wed 03 Sep 2025 00:44:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142645
IP address blocks:        103.171.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
                          rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200 (0x4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
        Validity
            Not Before: Sep  3 00:44:56 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b78f88-c051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:09:d0:ed:2f:6a:0d:13:2f:39:d3:37:65:
                    cb:1d:36:a8:84:5b:33:84:34:c5:ca:8e:12:5a:3e:
                    18:e7:37:c9:bf:0b:70:58:6b:3b:e4:60:e7:0b:3d:
                    6d:80:ae:b0:11:0a:c2:77:36:2d:16:6f:62:55:57:
                    26:cb:c7:53:19:d0:3a:5f:52:68:64:ba:a0:1a:0f:
                    97:19:ae:fd:a6:30:e0:7a:0b:86:24:13:5e:17:00:
                    f1:c8:0f:48:7e:4a:0b:52:8c:aa:81:8b:71:e6:bf:
                    f7:dd:ab:6f:d9:ab:3e:1a:c4:21:75:f8:e5:97:fb:
                    e6:14:a5:c0:c2:bc:69:5d:1d:dc:d3:b4:5e:78:8a:
                    db:87:b9:4d:12:ad:06:4f:20:9d:90:52:35:e8:0d:
                    f2:49:f6:f6:7a:9e:54:6b:34:d8:ff:63:c2:b9:20:
                    53:24:55:43:56:09:ea:4f:f1:62:f2:c0:d2:67:c6:
                    f5:b0:91:1d:80:31:b8:7a:65:1d:65:e6:50:21:d6:
                    21:51:c7:0b:d9:be:d7:4a:1d:39:63:70:31:de:75:
                    01:21:71:de:b5:32:45:f4:13:e2:e5:f7:1b:15:f1:
                    4a:67:38:aa:8a:47:84:97:8b:72:55:5f:f7:25:9e:
                    20:59:40:bc:3f:45:c9:b6:cd:c2:4d:8e:e3:b4:45:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:32:67:51:B6:2A:FB:13:36:6B:1B:66:D0:BE:3E:34:3D:8C:6C:44
            X509v3 Authority Key Identifier:
                keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:e9:98:b2:7e:9b:72:6b:6b:81:0d:aa:27:d1:5f:68:61:
         44:b4:5f:d9:c7:a9:6b:d4:d9:4e:95:f1:89:13:bb:9e:35:a2:
         3f:0b:98:99:7d:3c:6a:d4:47:7e:91:fd:13:5b:83:29:bd:c6:
         f8:f2:90:5d:8d:72:bc:57:5e:52:8c:b0:2f:4f:6c:88:a6:8f:
         fe:3f:88:7b:c8:d4:11:0f:7a:e4:48:6d:50:01:2d:f4:f9:37:
         bb:81:d7:fa:e4:26:83:d0:38:27:ec:d5:76:dc:c0:8e:a2:98:
         94:93:0c:a7:30:fd:fa:da:bf:82:96:18:34:30:4e:aa:da:01:
         74:e9:0e:15:f6:f5:8d:1d:99:20:41:89:42:1b:b7:58:93:1f:
         f2:1d:33:0a:29:4b:28:a1:b4:7e:fd:97:f3:18:2c:75:51:bc:
         5f:a7:02:98:eb:b0:8c:25:cb:bb:ef:69:29:8d:5b:32:01:41:
         64:99:b1:74:f5:c5:e3:74:50:9c:b9:ce:8d:64:fe:0b:36:ae:
         4c:30:d6:8e:f3:b6:3d:ba:8b:1e:ae:a5:5c:66:9c:65:5a:aa:
         98:55:72:1c:82:ec:8b:42:1f:e5:f0:f6:2b:08:27:de:cc:b5:
         ec:c9:10:9b:f9:6e:fe:d1:04:26:5d:29:e3:9e:a7:a2:2a:53:
         81:fd:8f:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0MzcxMTAvBgNVBAUTKEFGMEJFMEIyNEExMTlEM0IzRTkzRkQwQ0QzQjM0MTVB
MkMwRDAxQjgwHhcNMjUwOTAzMDA0NDU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3OGY4OC1jMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVQJ0O0vag0TLznTN2XLHTaohFszhDTFyo4SWj4Y5zfJvwtwWGs75GDnCz1t
gK6wEQrCdzYtFm9iVVcmy8dTGdA6X1JoZLqgGg+XGa79pjDgeguGJBNeFwDxyA9I
fkoLUoyqgYtx5r/33atv2as+GsQhdfjll/vmFKXAwrxpXR3c07ReeIrbh7lNEq0G
TyCdkFI16A3ySfb2ep5UazTY/2PCuSBTJFVDVgnqT/Fi8sDSZ8b1sJEdgDG4emUd
ZeZQIdYhUccL2b7XSh05Y3Ax3nUBIXHetTJF9BPi5fcbFfFKZziqikeEl4tyVV/3
JZ4gWUC8P0XJts3CTY7jtEVDawIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUyZ1G2
KvsTNmsbZtC+PjQ9jGxEMB8GA1UdIwQYMBaAFK8L4LJKEZ07PpP9DNOzQVosDQG4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzNy9ERUIwRkJDNjQ4
OUExMUVDODFBMkQ1MTRDNEY5QUUwMi9yd3Znc2tvUm5Ucy1rXzBNMDdOQldpd05B
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3dmdza29SblRzLWtfME0wN05CV2l3TkFiZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODE0MzcvREVCMEZCQzY0ODlBMTFFQzgxQTJENTE0QzRGOUFFMDIvODZCNTk4M0M1
ODIxMTFFQzgwMzVFMDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnq7AwDQYJKoZIhvcNAQELBQADggEBAKMx6Ziyfptya2uB
Daon0V9oYUS0X9nHqWvU2U6V8YkTu541oj8LmJl9PGrUR36R/RNbgym9xvjykF2N
crxXXlKMsC9PbIimj/4/iHvI1BEPeuRIbVABLfT5N7uB1/rkJoPQOCfs1XbcwI6i
mJSTDKcw/frav4KWGDQwTqraAXTpDhX29Y0dmSBBiUIbt1iTH/IdMwopSyihtH79
l/MYLHVRvF+nApjrsIwly7vvaSmNWzIBQWSZsXT1xeN0UJy5zo1k/gs2rkww1o7z
tj26ix6upVxmnGVaqphVchyC7ItCH+Xw9isIJ97MtezJEJv5bv7RBCZdKeOep6Iq
U4H9j5U=
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:39:55 2025 by rpki-client