Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/A7F88866489611EFA3CACC09C4F9AE02.roa
File:                     A7F88866489611EFA3CACC09C4F9AE02.roa (raw, json)
Hash identifier:          t7eknxpJ+dZ+sJQnSi245edufycu6QV4awrd/RTcAXE=
Subject key identifier:   1C:FE:86:D6:A3:71:2A:40:02:DB:2C:51:C5:6E:18:F1:99:D5:70:D7
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       058A
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/A7F88866489611EFA3CACC09C4F9AE02.roa
Signing time:             Fri 16 May 2025 23:34:00 +0000
ROA not before:           Fri 16 May 2025 23:34:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.166.60.0/24 maxlen: 24
                          103.166.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: May 16 23:34:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6827cb68-30e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:50:4c:f0:44:ba:fd:77:85:55:c3:cc:db:
                    54:98:51:14:62:3f:07:da:42:6e:34:f6:50:9d:eb:
                    cd:6e:ed:1c:56:ce:8f:d7:7a:dc:ef:47:56:fd:b9:
                    57:43:19:bc:45:9f:48:bf:bb:a0:ea:1c:41:6b:27:
                    b6:90:66:80:36:b3:c2:0a:2d:9a:de:39:4a:23:b2:
                    1a:f5:01:c7:b5:dc:2d:2b:f9:24:e2:2d:08:68:20:
                    77:79:9a:d3:9b:52:dd:4d:89:41:6b:56:fe:6f:1a:
                    ba:72:66:07:d1:fd:13:06:46:40:e3:34:a5:ca:86:
                    57:6d:6a:d9:4c:17:4c:ff:99:7c:79:4e:f6:a8:82:
                    23:96:5f:ae:af:80:93:eb:53:ab:87:8b:16:25:ed:
                    90:b2:9f:a0:17:cb:b1:c3:bd:75:83:4e:0e:ad:2c:
                    41:4a:02:0c:2a:2d:9d:d7:96:b9:fc:40:e8:59:2d:
                    ba:a5:df:36:c3:97:33:c2:e1:d6:ff:62:04:a0:59:
                    e1:67:c5:0c:f3:a0:a6:e7:ed:cd:b2:d9:7c:75:60:
                    82:f3:2d:b2:93:06:3f:c2:37:71:39:76:a2:da:0d:
                    1f:d4:85:17:5a:cc:44:8a:37:62:82:5a:a5:11:26:
                    19:d1:31:22:d5:3c:16:cd:61:23:f5:4f:5e:53:8e:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FE:86:D6:A3:71:2A:40:02:DB:2C:51:C5:6E:18:F1:99:D5:70:D7
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/A7F88866489611EFA3CACC09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:98:39:d3:8c:18:6a:98:fe:78:90:bf:1b:fb:9a:3b:ea:79:
         d4:bf:67:a4:8b:e1:0a:06:0c:e9:15:e7:7a:1a:c5:a7:ae:6c:
         5c:65:b7:9d:a4:a9:1c:06:64:a3:ec:2c:23:c9:2a:c9:77:10:
         80:25:32:5b:0f:d2:6a:43:ee:9e:69:96:7f:94:64:d9:ae:7e:
         07:a2:12:2f:d2:0c:fd:c7:e6:bf:12:43:b4:96:12:8f:89:31:
         67:91:01:41:aa:4a:df:6d:8a:2c:75:7a:cb:65:c6:a6:f9:71:
         35:43:bd:bb:a5:84:90:8b:26:df:6c:8f:88:d1:fc:06:6c:56:
         4f:8a:c2:0d:4d:c6:53:c5:5c:76:9b:e2:9c:28:39:e4:8d:a8:
         9f:6c:4f:ff:57:3d:ee:be:52:59:3f:32:7d:8c:6b:4f:34:3a:
         14:91:7a:34:fc:4a:91:7e:de:a6:ff:39:1a:1d:e1:39:69:2e:
         ab:23:ac:c5:27:1d:dc:22:da:de:54:ea:99:a2:65:10:58:df:
         f2:03:d5:f9:36:ad:ba:2d:d9:9f:f9:1c:2a:58:65:5f:d2:8f:
         1e:4c:47:f4:da:7d:26:8f:04:eb:ce:f0:91:4d:eb:51:9b:86:
         cf:c9:d7:e8:46:3d:54:a7:d0:22:3e:7b:1d:eb:ae:86:a2:f4:
         57:c6:cb:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw
QzhGQzQ1RTIwHhcNMjUwNTE2MjMzNDAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI3Y2I2OC0zMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkZQTPBEuv13hVXDzNtUmFEUYj8H2kJuNPZQnevNbu0cVs6P13rc70dW/blX
Qxm8RZ9Iv7ug6hxBaye2kGaANrPCCi2a3jlKI7Ia9QHHtdwtK/kk4i0IaCB3eZrT
m1LdTYlBa1b+bxq6cmYH0f0TBkZA4zSlyoZXbWrZTBdM/5l8eU72qIIjll+ur4CT
61Orh4sWJe2Qsp+gF8uxw711g04OrSxBSgIMKi2d15a5/EDoWS26pd82w5czwuHW
/2IEoFnhZ8UM86Cm5+3Nstl8dWCC8y2ykwY/wjdxOXai2g0f1IUXWsxEijdiglql
ESYZ0TEi1TwWzWEj9U9eU47ZHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBz+htaj
cSpAAtssUcVuGPGZ1XDXMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5
NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODRGMkQvQ0ZCRUQzNzBEOTREMTFFQkJFNUQzMTJGQzRGOUFFMDIvQTdGODg4NjY0
ODk2MTFFRkEzQ0FDQzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpjwwDQYJKoZIhvcNAQELBQADggEBAGOYOdOMGGqY/niQ
vxv7mjvqedS/Z6SL4QoGDOkV53oaxaeubFxlt52kqRwGZKPsLCPJKsl3EIAlMlsP
0mpD7p5pln+UZNmufgeiEi/SDP3H5r8SQ7SWEo+JMWeRAUGqSt9tiix1estlxqb5
cTVDvbulhJCLJt9sj4jR/AZsVk+Kwg1NxlPFXHab4pwoOeSNqJ9sT/9XPe6+Ulk/
Mn2Ma080OhSRejT8SpF+3qb/ORod4TlpLqsjrMUnHdwi2t5U6pmiZRBY3/ID1fk2
rbot2Z/5HCpYZV/Sjx5MR/TafSaPBOvO8JFN61Gbhs/J1+hGPVSn0CI+ex3rroai
9FfGy8M=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:46:40 2025 by rpki-client