Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/86D13B7E571C11EC81276481C4F9AE02.roa
File:                     86D13B7E571C11EC81276481C4F9AE02.roa (raw, json)
Hash identifier:          MOs76+y2ZzpmyQheXk3mTC95IHPkn0FNf96cGXOiX14=
Subject key identifier:   A9:1F:CE:AE:C6:91:B2:56:7E:33:C4:A4:E6:34:59:1F:C3:2F:9C:A0
Certificate issuer:       /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial:       264F
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/86D13B7E571C11EC81276481C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 16:22:54 +0000
ROA not before:           Fri 04 Jul 2025 16:22:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132138
IP address blocks:        202.156.10.14/31 maxlen: 32
                          202.156.10.72/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
                          rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9807 (0x264f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
        Validity
            Not Before: Jul  4 16:22:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6867ffde-e422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:f8:01:5e:a8:b4:59:d8:7d:d2:d6:b1:61:
                    74:4b:34:03:2f:b0:42:93:d8:99:61:d0:ad:ab:68:
                    fb:2d:d3:eb:6a:e8:a1:3c:98:f8:7a:ed:d2:c2:fa:
                    35:9d:65:5d:c3:b3:51:59:2a:7b:a1:f6:02:f6:27:
                    6c:1d:98:f6:a5:df:a2:44:e9:c1:4b:aa:2e:79:2b:
                    f4:f3:cc:8b:23:1e:16:97:5c:80:46:e7:e5:c0:6e:
                    db:54:11:2c:47:56:62:21:f2:7e:71:82:f1:4f:87:
                    e2:cb:fa:1a:f4:93:91:d7:69:ac:2e:ab:f5:37:32:
                    7d:d5:ed:7a:ee:05:22:05:b0:b5:44:2d:b0:9d:d3:
                    08:bb:ac:82:e4:44:d1:00:da:ea:da:ae:ff:79:fd:
                    f9:28:1a:d2:7f:ee:6e:97:e7:ed:3f:6a:4d:03:a2:
                    1a:7e:9c:48:2b:bf:8f:e3:75:44:36:cc:d4:d7:e9:
                    aa:5e:d7:18:86:f6:8b:5b:e6:db:77:b5:85:f9:fb:
                    fe:b3:f0:8e:56:bd:1e:64:ce:3f:9b:4b:7d:a1:6a:
                    71:9d:3d:65:b8:dc:14:bc:54:ee:ae:74:b0:42:8b:
                    b9:c4:a8:f2:18:b8:61:27:1a:3f:6f:23:d9:3f:ee:
                    14:08:3b:36:db:ea:73:9d:24:85:d0:04:0c:0a:63:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:CE:AE:C6:91:B2:56:7E:33:C4:A4:E6:34:59:1F:C3:2F:9C:A0
            X509v3 Authority Key Identifier:
                keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/86D13B7E571C11EC81276481C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.156.10.14/31
                  202.156.10.72/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:87:05:92:92:c6:35:63:e4:83:7b:9c:1f:7e:b6:db:62:86:
         29:52:96:70:79:c5:28:68:14:bf:0f:14:6b:ec:12:5d:97:29:
         c7:22:a5:84:49:15:3d:a3:98:88:c0:63:48:4d:01:38:d7:2d:
         4a:b8:b9:2f:2f:5a:86:d6:f6:0f:44:19:2c:80:7f:73:62:05:
         26:58:a0:b3:4c:3b:8c:13:eb:c4:1e:b4:57:f8:01:70:23:82:
         ee:9d:76:6c:3b:c9:a3:78:0e:c8:46:82:98:2f:ee:68:ba:fd:
         3f:18:e1:3d:d6:d1:f5:b6:3c:5d:4a:1a:85:45:9e:83:e2:09:
         2a:2c:47:1f:bf:94:ca:57:72:06:cd:99:98:5d:47:f6:25:a3:
         6a:a7:24:f6:17:33:01:0d:91:1a:20:99:b7:b0:ad:0f:8e:e6:
         f6:97:74:34:6d:f3:f4:e1:56:2d:6d:36:fa:84:7b:fa:b1:5f:
         68:97:c0:43:d4:d7:a5:15:8f:b5:db:64:f7:62:e4:96:94:b1:
         8b:d4:67:44:4d:ed:2b:49:74:93:d9:40:d2:f9:b2:5f:7e:c6:
         89:0e:f7:07:3e:51:52:20:93:85:c9:52:88:b0:37:74:6a:0d:
         4f:a9:25:ce:52:3f:6b:a6:3b:6a:e2:7b:b8:d3:50:c0:1f:14:
         99:a9:cf:01
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICJk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy
NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY3ZmZkZS1lNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mf4AV6otFnYfdLWsWF0SzQDL7BCk9iZYdCtq2j7LdPrauihPJj4eu3Swvo1
nWVdw7NRWSp7ofYC9idsHZj2pd+iROnBS6oueSv088yLIx4Wl1yARuflwG7bVBEs
R1ZiIfJ+cYLxT4fiy/oa9JOR12msLqv1NzJ91e167gUiBbC1RC2wndMIu6yC5ETR
ANrq2q7/ef35KBrSf+5ul+ftP2pNA6IafpxIK7+P43VENszU1+mqXtcYhvaLW+bb
d7WF+fv+s/COVr0eZM4/m0t9oWpxnT1luNwUvFTurnSwQou5xKjyGLhhJxo/byPZ
P+4UCDs22+pznSSF0AQMCmNvmwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFKkfzq7G
kbJWfjPEpOY0WR/DL5ygMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1
ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvODZEMTNCN0U1
NzFDMTFFQzgxMjc2NDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4DBQHKnAoOAwUDypwKSDANBgkqhkiG9w0BAQsFAAOCAQEAiocF
kpLGNWPkg3ucH36222KGKVKWcHnFKGgUvw8Ua+wSXZcpxyKlhEkVPaOYiMBjSE0B
ONctSri5Ly9ahtb2D0QZLIB/c2IFJligs0w7jBPrxB60V/gBcCOC7p12bDvJo3gO
yEaCmC/uaLr9PxjhPdbR9bY8XUoahUWeg+IJKixHH7+UyldyBs2ZmF1H9iWjaqck
9hczAQ2RGiCZt7CtD47m9pd0NG3z9OFWLW02+oR7+rFfaJfAQ9TXpRWPtdtk92Lk
lpSxi9RnRE3tK0l0k9lA0vmyX37GiQ73Bz5RUiCThclSiLA3dGoNT6klzlI/a6Y7
auJ7uNNQwB8UmanPAQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:13:58 2025 by rpki-client