Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B285AC807CA911F09D442F15C4F9AE02.roa
File:                     B285AC807CA911F09D442F15C4F9AE02.roa (raw, json)
Hash identifier:          UX2zMGfv+WxZ0voK+QDzKZn1ZKk782a4iAXgqqE0IQo=
Subject key identifier:   16:19:4E:91:35:3A:B7:DD:1C:A0:31:04:CF:B2:A1:13:41:FB:67:89
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0B51
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B285AC807CA911F09D442F15C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 03:07:54 +0000
ROA not before:           Tue 19 Aug 2025 03:07:54 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     15412
IP address blocks:        103.23.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Aug 19 03:07:54 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68a3ea89-1640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:ca:23:7f:3d:62:9f:cf:2a:d7:96:40:32:
                    e2:08:78:19:d1:7f:0b:e0:6b:63:1c:48:c0:42:54:
                    70:96:6a:87:93:11:a9:07:fc:9a:ab:37:d6:6a:b8:
                    81:ae:da:2e:18:7b:67:49:04:0f:ed:c6:bb:5f:8d:
                    0b:05:18:a4:19:83:2b:b3:fa:0b:bc:76:17:82:61:
                    8b:f9:ad:82:2e:da:0f:6b:52:1c:6c:97:e3:5c:2c:
                    79:73:8e:c3:d6:6b:3c:78:c8:50:d7:a1:55:c1:96:
                    5c:07:02:d7:21:7e:5a:b2:e2:d4:ea:cd:8e:ed:a0:
                    6a:a4:16:db:8c:15:25:56:e0:da:7b:ba:c5:48:11:
                    7f:d3:28:71:2e:fd:ec:b3:5b:13:62:c1:c6:4a:4b:
                    b2:04:87:a9:1f:bc:01:f1:c7:6e:33:84:3c:ea:ff:
                    67:38:3b:52:9c:60:66:3e:e9:87:51:28:b6:b2:fc:
                    b2:6d:ac:0d:1b:2c:eb:c6:cc:e1:01:df:66:fc:41:
                    42:57:d6:99:56:03:ee:42:aa:68:a7:02:e0:ac:47:
                    97:ec:f8:fd:a6:ac:d7:b1:cf:b8:c7:4c:08:73:32:
                    dc:19:b8:8f:ef:47:46:40:f0:61:e9:0a:1a:c9:fa:
                    b8:0c:ee:22:42:18:41:e1:ab:45:92:97:97:46:42:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:4E:91:35:3A:B7:DD:1C:A0:31:04:CF:B2:A1:13:41:FB:67:89
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B285AC807CA911F09D442F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:de:1e:86:71:67:ca:ee:20:25:55:57:aa:6b:af:59:f6:
         0e:27:02:b2:a9:74:84:34:ab:45:45:cb:a5:a1:96:fe:ff:02:
         bf:b9:48:61:1d:6a:cf:1d:94:9e:28:4b:4b:e6:6d:d6:7e:d4:
         4b:c3:82:6a:7e:68:b9:16:8c:3b:e1:bd:82:85:5c:25:20:8f:
         c4:ab:68:85:ee:36:7c:cd:7e:09:66:73:70:50:38:a0:9d:23:
         94:10:eb:c1:5a:fe:e5:4d:be:bf:71:e5:e9:9e:a0:8b:50:c4:
         ed:62:6b:8c:62:b6:7e:56:51:72:f8:b2:a1:cc:cc:f3:56:1e:
         13:61:f4:9a:9e:07:7b:65:e8:02:43:f9:e4:a1:ce:6b:31:dd:
         44:2e:30:99:17:db:da:ee:6d:13:89:27:bd:ee:b4:d9:e4:9e:
         22:bf:88:e0:b1:76:8a:53:77:86:69:5f:76:b7:16:5c:f2:ea:
         50:48:24:61:f6:5d:3a:d8:a2:67:66:5c:75:97:db:6b:4d:39:
         7c:e1:67:9c:8e:fa:ed:73:88:96:4f:74:7c:b6:3e:f0:ea:14:
         4e:48:bd:82:11:6a:4f:6a:06:3f:5f:8a:44:be:03:4a:74:96:
         39:5f:a2:9f:2f:21:32:a7:03:cb:91:80:6f:3a:5f:1b:50:1f:
         b5:cd:98:e5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF
M0RBRDE1NzEwHhcNMjUwODE5MDMwNzU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGEzZWE4OS0xNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwyXKI389Yp/PKteWQDLiCHgZ0X8L4GtjHEjAQlRwlmqHkxGpB/yaqzfWariB
rtouGHtnSQQP7ca7X40LBRikGYMrs/oLvHYXgmGL+a2CLtoPa1IcbJfjXCx5c47D
1ms8eMhQ16FVwZZcBwLXIX5asuLU6s2O7aBqpBbbjBUlVuDae7rFSBF/0yhxLv3s
s1sTYsHGSkuyBIepH7wB8cduM4Q86v9nODtSnGBmPumHUSi2svyybawNGyzrxszh
Ad9m/EFCV9aZVgPuQqpopwLgrEeX7Pj9pqzXsc+4x0wIczLcGbiP70dGQPBh6Qoa
yfq4DO4iQhhB4atFkpeXRkJK8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBYZTpE1
OrfdHKAxBM+yoRNB+2eJMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw
RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvQjI4NUFDODA3
Q0E5MTFGMDlENDQyRjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnF0gwDQYJKoZIhvcNAQELBQADggEBAEMq3h6GcWfK7iAl
VVeqa69Z9g4nArKpdIQ0q0VFy6Whlv7/Ar+5SGEdas8dlJ4oS0vmbdZ+1EvDgmp+
aLkWjDvhvYKFXCUgj8SraIXuNnzNfglmc3BQOKCdI5QQ68Fa/uVNvr9x5emeoItQ
xO1ia4xitn5WUXL4sqHMzPNWHhNh9JqeB3tl6AJD+eShzmsx3UQuMJkX29rubROJ
J73utNnkniK/iOCxdopTd4ZpX3a3Flzy6lBIJGH2XTrYomdmXHWX22tNOXzhZ5yO
+u1ziJZPdHy2PvDqFE5IvYIRak9qBj9fikS+A0p0ljlfop8vITKnA8uRgG86XxtQ
H7XNmOU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:22 2025 by rpki-client