Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/E905CD5808F111EA8E4F1D51C4F9AE02.roa
File:                     E905CD5808F111EA8E4F1D51C4F9AE02.roa (raw, json)
Hash identifier:          I2P5GKiYO+A0JWj3FCOtq5Wyspf+9wzs4i0nVaTxKFM=
Subject key identifier:   A0:BB:93:D8:27:D9:50:9B:BA:B1:3A:15:2E:AF:73:61:1B:87:3F:71
Certificate issuer:       /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Certificate serial:       0C4C
Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/E905CD5808F111EA8E4F1D51C4F9AE02.roa
Signing time:             Mon 16 Jun 2025 18:42:14 +0000
ROA not before:           Mon 16 Jun 2025 18:42:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137467
IP address blocks:        103.244.184.0/22 maxlen: 22
                          103.244.184.0/24 maxlen: 24
                          103.244.185.0/24 maxlen: 24
                          103.244.186.0/24 maxlen: 24
                          103.244.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
                          rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
        Validity
            Not Before: Jun 16 18:42:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68506585-7ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:74:e7:aa:72:3b:83:78:a3:4d:8c:d6:3a:
                    90:aa:4e:83:1b:08:4c:80:51:41:82:dd:af:b1:e0:
                    41:5c:49:45:31:48:d0:3c:a5:e6:9e:2b:91:bb:80:
                    47:c1:37:90:bd:6e:78:22:4e:8c:6c:49:23:43:f9:
                    23:e1:66:46:64:8d:d6:d3:37:65:35:a2:de:1e:ee:
                    9e:d7:11:d3:0d:6b:08:23:f3:0a:51:40:2a:0d:98:
                    00:f4:40:3b:5e:0d:39:d4:b0:56:12:c3:19:e2:d4:
                    ae:44:0c:53:af:3e:19:89:1e:52:db:bf:2a:a2:84:
                    5f:38:56:a5:06:e7:ee:e6:38:8e:bf:6f:bd:a0:b4:
                    24:29:a5:8d:72:d7:1c:1e:a0:ef:4f:59:3c:46:d9:
                    18:83:71:15:4c:3b:20:4d:62:dd:a7:17:46:d7:d8:
                    5b:bb:b3:91:cb:bb:72:8e:21:ef:75:34:8c:0d:e0:
                    c4:e7:87:fe:f7:df:e1:fb:e5:82:4e:0f:f9:b6:cb:
                    38:7e:a5:9e:b6:7b:14:2c:9b:55:5d:a7:fc:8a:39:
                    86:4f:0b:78:40:97:7c:b0:05:ff:0c:be:cc:9e:0d:
                    b9:bc:ee:2c:43:55:5e:e4:f7:3c:cb:ce:d1:96:5d:
                    b7:dd:df:04:0c:48:f3:e4:5d:53:f7:ff:d7:d8:e4:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:93:D8:27:D9:50:9B:BA:B1:3A:15:2E:AF:73:61:1B:87:3F:71
            X509v3 Authority Key Identifier:
                keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/E905CD5808F111EA8E4F1D51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:25:ca:46:94:9a:ef:e1:1e:09:7d:12:94:ca:35:d4:fb:
         5d:ed:00:de:71:9c:9c:a6:a4:13:ce:74:3a:11:21:63:65:45:
         1b:bc:0d:5c:3b:ed:cc:86:fb:3a:bb:05:14:ba:61:2f:be:b8:
         b0:27:1b:ec:55:e4:8c:fb:5e:50:bd:e9:1a:68:e3:1e:14:bc:
         f0:37:fd:7d:2c:68:07:41:03:9a:99:3f:34:9d:b8:c8:6d:f6:
         65:45:25:ce:ce:29:75:30:4f:00:82:c4:41:25:9e:6f:61:77:
         e3:84:22:bf:ec:b5:40:7d:0c:66:bf:bd:e5:f6:29:be:98:90:
         44:2e:2c:6a:5c:d7:0f:a9:f4:5f:93:09:a0:af:c7:51:85:ea:
         d5:ae:87:d7:da:2f:8e:27:b2:49:89:83:b2:52:6e:d0:c5:a7:
         89:c6:33:97:3e:ee:aa:7b:d7:4a:03:40:50:c3:a6:47:4f:5e:
         eb:a3:af:86:00:46:f7:7a:42:30:e4:9d:07:cd:bb:47:c2:a8:
         c2:9c:18:e2:fa:a8:81:ab:26:35:d4:2b:7a:66:32:44:41:fb:
         4d:48:95:a6:32:78:31:52:1b:6c:b4:ad:70:d6:ad:cf:11:dc:
         25:0d:2f:54:be:06:52:be:70:95:71:4b:71:07:de:87:ff:ea:
         d3:22:37:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx
NUJEMjc0REYwHhcNMjUwNjE2MTg0MjE0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODUwNjU4NS03ZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxx056pyO4N4o02M1jqQqk6DGwhMgFFBgt2vseBBXElFMUjQPKXmniuRu4BH
wTeQvW54Ik6MbEkjQ/kj4WZGZI3W0zdlNaLeHu6e1xHTDWsII/MKUUAqDZgA9EA7
Xg051LBWEsMZ4tSuRAxTrz4ZiR5S278qooRfOFalBufu5jiOv2+9oLQkKaWNctcc
HqDvT1k8RtkYg3EVTDsgTWLdpxdG19hbu7ORy7tyjiHvdTSMDeDE54f+99/h++WC
Tg/5tss4fqWetnsULJtVXaf8ijmGTwt4QJd8sAX/DL7Mng25vO4sQ1Ve5Pc8y87R
ll233d8EDEjz5F1T9//X2ORWXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKC7k9gn
2VCburE6FS6vc2Ebhz9xMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2
Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTI2OTYvNzI1Q0ExRDQwNkNEMTFFQUFFNUU3OTM0QzRGOUFFMDIvRTkwNUNENTgw
OEYxMTFFQThFNEYxRDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn9LgwDQYJKoZIhvcNAQELBQADggEBAE0xJcpGlJrv4R4J
fRKUyjXU+13tAN5xnJympBPOdDoRIWNlRRu8DVw77cyG+zq7BRS6YS++uLAnG+xV
5Iz7XlC96Rpo4x4UvPA3/X0saAdBA5qZPzSduMht9mVFJc7OKXUwTwCCxEElnm9h
d+OEIr/stUB9DGa/veX2Kb6YkEQuLGpc1w+p9F+TCaCvx1GF6tWuh9faL44nskmJ
g7JSbtDFp4nGM5c+7qp710oDQFDDpkdPXuujr4YARvd6QjDknQfNu0fCqMKcGOL6
qIGrJjXUK3pmMkRB+01IlaYyeDFSG2y0rXDWrc8R3CUNL1S+BlK+cJVxS3EH3of/
6tMiN84=
-----END CERTIFICATE-----
Generated at Thu Jul 3 17:08:48 2025 by rpki-client