Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
File:                     807F931E2B4011F092798182C4F9AE02.roa (raw, json)
Hash identifier:          INx4bVdYMvSHghZ0xdqhGXOwcG2dcHCpKPSYAkk1Aqs=
Subject key identifier:   BD:00:3F:0C:32:3C:A3:43:2B:2F:29:DA:6E:B2:4C:A9:FE:41:93:FB
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       35B3
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
Signing time:             Wed 07 May 2025 12:40:48 +0000
ROA not before:           Wed 07 May 2025 12:40:48 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139949
IP address blocks:        103.147.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13747 (0x35b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: May  7 12:40:48 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=681b54d0-fbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:71:e2:bb:b8:8b:02:57:c2:a3:31:0a:c5:
                    10:90:8f:0f:6b:39:68:a2:17:29:05:ca:e1:06:69:
                    d9:ec:af:b9:68:f3:57:11:f4:87:29:19:8a:35:e3:
                    29:85:29:fd:42:2d:51:b4:75:76:ad:07:60:5b:54:
                    9b:e1:bf:2b:e1:2b:13:26:57:72:20:1e:04:ce:f7:
                    c5:7e:04:8d:84:84:fa:b1:c3:ee:28:7a:fd:44:84:
                    e1:02:e9:7b:69:7a:3d:a9:66:b8:f4:96:d5:2b:c7:
                    e4:48:cb:95:d9:f8:81:ad:c7:af:ba:bf:9d:20:be:
                    e6:16:86:a8:de:cf:37:b2:8e:12:e3:5e:9b:ab:2e:
                    32:82:58:93:b1:bd:d3:b6:6a:4f:0b:49:03:1d:1a:
                    03:10:35:ef:48:67:1f:0f:51:0f:2f:74:99:f5:c5:
                    e5:1d:22:d2:2f:20:31:63:e1:c1:4e:e2:2d:e8:67:
                    00:57:5f:4c:b0:4e:0d:25:99:bd:07:29:3c:cb:f3:
                    f1:b1:4d:74:c4:78:35:da:38:f6:f7:10:aa:b9:15:
                    f6:25:21:d7:56:a9:e5:0e:26:83:ad:65:e0:6d:31:
                    88:d2:66:db:07:ff:fa:33:8c:e2:18:10:89:c1:09:
                    b7:a6:c3:48:47:e6:64:77:22:bb:89:93:f5:85:2c:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:00:3F:0C:32:3C:A3:43:2B:2F:29:DA:6E:B2:4C:A9:FE:41:93:FB
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:9e:5a:0e:27:cf:a6:bf:1b:38:a7:17:3f:e8:ad:c4:93:
         31:ce:c0:21:e5:a4:bc:db:e2:d1:6e:22:08:bc:d8:98:ad:ed:
         c3:36:df:76:aa:78:ea:80:99:39:c6:85:78:13:5a:24:6d:9e:
         d0:49:19:90:d6:97:35:d3:f1:88:5b:f9:fa:99:e7:22:35:7c:
         f0:97:cd:24:94:b5:c4:74:cc:59:67:88:0c:25:23:31:31:03:
         8b:06:4a:7b:e1:51:cd:41:35:02:85:6f:4f:83:b7:dd:e7:0f:
         15:99:8b:b7:95:86:6a:fe:9c:c2:bd:97:27:58:87:7a:96:c7:
         54:ff:86:34:0f:4d:bc:9b:9f:f1:d5:b2:eb:e7:42:5c:5e:f8:
         65:54:3e:a7:3d:c3:a4:8e:ce:45:d3:1d:f4:53:99:07:dc:ab:
         32:d8:b4:57:4b:92:15:8a:37:1f:dd:80:bb:ce:48:30:48:2b:
         68:69:2f:bb:4d:26:19:ee:1a:b1:84:dd:b3:0e:8e:fa:7e:46:
         74:ae:0b:6f:dd:83:e5:14:81:13:9f:e8:df:96:91:24:18:48:
         4b:01:06:ca:40:64:77:9b:3e:6b:d9:b4:d2:48:90:bf:d1:dd:
         01:1c:06:41:f1:04:14:98:9e:b8:97:4c:5d:c2:19:d3:23:1d:
         9a:7d:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:47:03 2025 by rpki-client