Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/AF9BA1D2717111ED8518666EC4F9AE02.roa
File:                     AF9BA1D2717111ED8518666EC4F9AE02.roa (raw, json)
Hash identifier:          ArJFnlnVhsrJcFwhi1wglVXIencAnedBRPQm/FHkems=
Subject key identifier:   EE:DF:DF:FB:81:FE:6D:EF:11:0E:26:25:A1:64:16:84:EF:42:27:8E
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       01FF
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/AF9BA1D2717111ED8518666EC4F9AE02.roa
Signing time:             Thu 03 Jul 2025 02:37:30 +0000
ROA not before:           Thu 03 Jul 2025 02:37:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137230
IP address blocks:        103.167.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
                          rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 02:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: Jul  3 02:37:30 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6865ecea-11ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:70:98:f3:c2:ca:2e:dd:3d:50:32:17:05:
                    8e:5d:49:b4:db:ab:27:7f:01:d5:49:0a:e7:4a:ec:
                    ed:f7:62:5f:78:46:44:3a:74:2f:33:80:a1:8d:5e:
                    b5:28:78:44:83:da:99:bc:96:5f:41:27:17:c1:68:
                    c9:4a:89:b9:99:a3:5e:4f:13:6e:a6:10:38:af:2e:
                    f9:d0:be:48:20:08:7d:ff:12:65:2e:97:7c:75:0f:
                    05:cd:d8:ef:13:cd:56:eb:a6:52:db:11:f5:7d:9a:
                    b8:cc:74:6e:99:85:c5:f7:d0:cd:92:9c:96:f2:85:
                    f3:70:89:83:ce:50:b6:ef:de:4a:dd:c5:c0:de:02:
                    b7:6f:ad:3d:50:38:de:2e:d6:a2:6a:d3:e0:9b:c8:
                    88:12:c2:d2:4b:f5:f2:33:12:e5:fb:ae:54:b9:a0:
                    2e:b3:9f:ab:cf:62:22:04:4b:56:1f:be:25:5c:26:
                    2e:f3:7b:d8:89:89:87:82:b5:92:e9:47:31:a5:4b:
                    6d:4f:49:ba:68:54:2d:35:fb:4d:fe:16:98:4b:db:
                    27:09:cf:0a:91:c2:13:95:e3:a0:2f:ca:21:7e:2e:
                    15:ee:4e:b8:79:b3:09:61:57:94:71:2b:3b:d4:dd:
                    e6:82:ff:b4:a0:4a:e3:35:5f:04:71:72:5e:25:de:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DF:DF:FB:81:FE:6D:EF:11:0E:26:25:A1:64:16:84:EF:42:27:8E
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/AF9BA1D2717111ED8518666EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:92:d4:14:1f:9b:51:a5:de:3e:d0:32:28:d5:93:22:a9:8a:
         71:b1:d6:fd:07:28:86:8d:24:32:e4:ec:8c:53:8e:be:ff:d1:
         b0:1a:78:2a:5f:41:6e:d7:d5:f8:0e:b7:93:fb:dd:f8:4a:72:
         bd:c0:ef:d8:4a:b1:15:18:bc:54:82:29:b1:4d:fb:67:7a:99:
         a0:b1:96:dc:9e:6b:fd:dc:a3:f8:33:05:23:ad:15:21:06:94:
         df:10:4c:d9:89:e0:bf:d5:a1:a1:15:ce:2a:fa:c5:77:a1:c5:
         b7:39:0b:61:9d:16:53:d1:a2:1d:c1:09:08:59:58:9e:b6:ba:
         a9:6d:73:54:e8:16:fd:2d:6e:ce:25:70:47:69:dd:ce:f3:ca:
         dc:ee:e3:30:6e:35:f4:f1:29:b0:e3:fc:bd:6e:08:ee:ad:b9:
         49:e7:68:b4:cb:fe:86:22:86:2b:4e:8b:ee:2e:95:60:0f:4a:
         d8:89:fb:f4:09:a7:7d:70:2c:d0:99:60:f0:70:24:ee:47:43:
         d7:29:2b:c2:9e:27:e5:b9:d0:9b:e7:b6:42:da:86:6c:c3:f1:
         c7:0b:44:4a:8a:0a:8e:60:f2:5c:f1:fc:31:cc:74:bb:56:54:
         e1:e0:09:1e:a2:4a:65:45:b0:e3:30:bd:65:5c:30:04:24:40:
         36:65:4a:0f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF
OTAzMDdBRjcwHhcNMjUwNzAzMDIzNzMwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY1ZWNlYS0xMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZJwmPPCyi7dPVAyFwWOXUm026snfwHVSQrnSuzt92JfeEZEOnQvM4ChjV61
KHhEg9qZvJZfQScXwWjJSom5maNeTxNuphA4ry750L5IIAh9/xJlLpd8dQ8Fzdjv
E81W66ZS2xH1fZq4zHRumYXF99DNkpyW8oXzcImDzlC2795K3cXA3gK3b609UDje
LtaiatPgm8iIEsLSS/XyMxLl+65UuaAus5+rz2IiBEtWH74lXCYu83vYiYmHgrWS
6UcxpUttT0m6aFQtNftN/haYS9snCc8KkcITleOgL8ohfi4V7k64ebMJYVeUcSs7
1N3mgv+0oErjNV8EcXJeJd6GfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO7f3/uB
/m3vEQ4mJaFkFoTvQieOMB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1
QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTAyMjYvQjU4RUJBMzA1NUI0MTFFREEwNzk1MDUzQzRGOUFFMDIvQUY5QkExRDI3
MTcxMTFFRDg1MTg2NjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnp0MwDQYJKoZIhvcNAQELBQADggEBAGeS1BQfm1Gl3j7Q
MijVkyKpinGx1v0HKIaNJDLk7IxTjr7/0bAaeCpfQW7X1fgOt5P73fhKcr3A79hK
sRUYvFSCKbFN+2d6maCxltyea/3co/gzBSOtFSEGlN8QTNmJ4L/VoaEVzir6xXeh
xbc5C2GdFlPRoh3BCQhZWJ62uqltc1ToFv0tbs4lcEdp3c7zytzu4zBuNfTxKbDj
/L1uCO6tuUnnaLTL/oYihitOi+4ulWAPStiJ+/QJp31wLNCZYPBwJO5HQ9cpK8Ke
J+W50JvntkLahmzD8ccLREqKCo5g8lzx/DHMdLtWVOHgCR6iSmVFsOMwvWVcMAQk
QDZlSg8=
-----END CERTIFICATE-----
Generated at Fri Aug 22 18:57:20 2025 by rpki-client