Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
File:                     1F820766D66F11EAB2766134C4F9AE02.roa (raw, json)
Hash identifier:          FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=
Subject key identifier:   A9:96:F8:EE:04:0D:0F:91:22:BD:CE:BC:C8:6C:A4:FB:FA:9B:CA:1E
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       0849
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
Signing time:             Wed 20 Aug 2025 21:01:52 +0000
ROA not before:           Wed 20 Aug 2025 21:01:52 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58456
IP address blocks:        103.5.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Aug 20 21:01:52 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a637c0-4983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:da:c8:40:7b:fe:6f:62:26:a6:62:0e:78:
                    ec:ca:7a:30:08:c8:64:0e:4c:85:a0:1f:72:a1:c6:
                    a8:e7:f5:c8:ae:b2:e1:61:46:42:6e:94:18:94:8b:
                    68:a6:f6:80:7a:8b:49:86:32:80:b2:36:9b:dd:71:
                    40:09:a5:36:0a:54:23:7b:83:79:39:56:4f:00:ca:
                    55:46:9f:9d:63:a1:b2:f8:68:2e:08:d7:8f:bd:ff:
                    ef:3e:73:d6:48:ca:3d:25:e8:73:73:7e:10:46:ec:
                    0b:52:6a:f9:29:96:de:75:de:69:ee:7f:7a:da:71:
                    f9:0d:88:fd:91:42:ba:cd:78:7a:e2:35:fa:31:18:
                    b3:0a:eb:c2:33:e3:14:34:62:f8:5d:ae:5e:99:98:
                    28:66:0d:d0:42:f0:0b:a0:5a:b7:3e:55:25:91:69:
                    ff:18:01:88:2f:57:0e:11:74:6d:73:ca:72:7b:8c:
                    65:46:13:f1:c1:44:6b:cc:96:de:58:35:7d:b4:07:
                    78:67:35:c6:0c:39:23:a1:c7:6a:eb:c4:9f:24:29:
                    2e:9f:05:cd:21:1f:09:a2:8d:68:12:e4:5b:dd:06:
                    5b:07:37:a4:f2:84:be:03:71:e1:67:96:8c:cd:00:
                    ef:65:2b:92:5c:64:a4:24:ec:82:22:19:8e:03:3f:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:F8:EE:04:0D:0F:91:22:BD:CE:BC:C8:6C:A4:FB:FA:9B:CA:1E
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:02:e8:b3:d5:40:01:83:e3:f4:0a:2f:0b:7e:1d:02:de:88:
         34:6e:d8:bf:ad:c9:98:81:8e:dd:43:31:a6:d3:12:30:cf:72:
         c1:37:f0:a8:63:5b:5f:03:d5:90:1f:4f:a6:d1:4d:14:88:3a:
         32:e2:5d:2d:44:1c:5f:b4:6d:9f:87:82:12:36:2a:f9:7d:32:
         f0:3d:30:fc:c7:04:ef:56:c4:84:b5:e3:3f:01:fa:ab:d3:fb:
         92:91:e8:cf:08:50:f3:3f:50:b3:49:a5:26:7a:74:7d:61:30:
         72:a5:90:c5:41:b3:03:56:c0:f5:3c:0b:84:ce:a9:37:1a:ca:
         ba:76:d9:90:cd:ef:60:06:97:76:c6:7a:db:ff:bb:98:16:aa:
         cc:87:32:41:ff:74:12:d7:12:ec:40:c2:44:08:62:a5:4b:b9:
         9e:fe:8c:58:b0:4b:79:4c:7c:71:a2:f9:63:45:5d:26:77:b6:
         f3:9c:63:7a:f4:5a:ad:55:44:46:9a:a5:23:2e:fe:72:15:c4:
         2b:fe:f5:05:fb:47:5e:84:6d:14:3f:49:e6:f6:40:76:9c:fb:
         dd:77:f9:4a:01:ec:71:da:06:bd:dd:6b:57:6e:fe:5f:34:34:
         1f:6b:e8:79:a7:b6:0c:e5:2b:57:2b:ee:8e:b7:9b:38:6e:47:
         91:27:fc:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1ODQxMTAvBgNVBAUTKDMxRjUwNDE5RUYxOUIwRkRBNjFCNjYzOTBDMTJFRUFG
NkVDQkU3NDEwHhcNMjUwODIwMjEwMTUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE2MzdjMC00OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5rnayEB7/m9iJqZiDnjsynowCMhkDkyFoB9yocao5/XIrrLhYUZCbpQYlIto
pvaAeotJhjKAsjab3XFACaU2ClQje4N5OVZPAMpVRp+dY6Gy+GguCNePvf/vPnPW
SMo9Jehzc34QRuwLUmr5KZbedd5p7n962nH5DYj9kUK6zXh64jX6MRizCuvCM+MU
NGL4Xa5emZgoZg3QQvALoFq3PlUlkWn/GAGIL1cOEXRtc8pye4xlRhPxwURrzJbe
WDV9tAd4ZzXGDDkjocdq68SfJCkunwXNIR8Joo1oEuRb3QZbBzek8oS+A3HhZ5aM
zQDvZSuSXGSkJOyCIhmOAz//cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKmW+O4E
DQ+RIr3OvMhspPv6m8oeMB8GA1UdIwQYMBaAFDH1BBnvGbD9phtmOQwS7q9uy+dB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjU4NC81M0YwRkVFMEQ2
NkUxMUVBQjdGMzM1MzRDNEY5QUUwMi9NZlVFR2U4WnNQMm1HMlk1REJMdXIyN0w1
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01mVUVHZThac1AybUcyWTVEQkx1cjI3TDUwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODY1ODQvNTNGMEZFRTBENjZFMTFFQUI3RjMzNTM0QzRGOUFFMDIvMUY4MjA3NjZE
NjZGMTFFQUIyNzY2MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnBZYwDQYJKoZIhvcNAQELBQADggEBAIUC6LPVQAGD4/QK
Lwt+HQLeiDRu2L+tyZiBjt1DMabTEjDPcsE38KhjW18D1ZAfT6bRTRSIOjLiXS1E
HF+0bZ+HghI2Kvl9MvA9MPzHBO9WxIS14z8B+qvT+5KR6M8IUPM/ULNJpSZ6dH1h
MHKlkMVBswNWwPU8C4TOqTcayrp22ZDN72AGl3bGetv/u5gWqsyHMkH/dBLXEuxA
wkQIYqVLuZ7+jFiwS3lMfHGi+WNFXSZ3tvOcY3r0Wq1VREaapSMu/nIVxCv+9QX7
R16EbRQ/Seb2QHac+913+UoB7HHaBr3da1du/l80NB9r6HmntgzlK1cr7o63mzhu
R5En/OI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:52 2025 by rpki-client