Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/AF9BA1D2717111ED8518666EC4F9AE02.roa
File:                     AF9BA1D2717111ED8518666EC4F9AE02.roa (raw, json)
Hash identifier:          2QMRFKDUHGT6cD67qmmuYgfb3su7HsLCpg7b2sGi5x8=
Subject key identifier:   D3:EE:57:7C:19:A1:CE:44:CB:1A:C6:30:B7:5C:3F:75:52:73:4C:19
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       01FB
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/AF9BA1D2717111ED8518666EC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 03:09:20 +0000
ROA not before:           Tue 01 Jul 2025 03:09:20 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     137230
IP address blocks:        103.167.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
                          rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: Jul  1 03:09:20 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=68635160-b94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:3d:62:3d:46:88:15:3e:69:d1:8e:1f:fd:
                    5f:87:91:c5:57:b4:7a:3a:de:62:11:e6:db:67:50:
                    f8:db:19:8f:fe:01:0b:fe:e5:55:d1:05:ee:ae:e9:
                    51:31:c0:31:9d:80:e1:e4:5a:37:9c:02:3d:03:66:
                    16:b5:af:60:6d:69:b9:a3:3e:13:bd:2a:7f:c8:ca:
                    e8:c5:98:29:e4:7e:ee:8d:f7:59:f3:76:a3:02:7d:
                    d5:e5:25:ad:45:a5:d0:10:db:29:e4:3e:1b:f8:32:
                    16:e5:4c:90:43:0b:72:a0:21:6d:a3:8d:0d:d0:5b:
                    e9:76:ab:6c:3e:10:89:ff:e0:2a:72:0c:9f:6b:ac:
                    de:d7:3b:72:60:35:53:82:03:49:4b:31:3c:5a:c2:
                    55:30:77:63:94:3d:c1:ba:02:52:a6:df:e4:e9:62:
                    24:a9:e2:00:58:c2:36:fd:eb:82:a6:67:3c:05:d3:
                    7a:2c:0f:be:1c:6f:00:fb:62:f6:ce:c9:cd:7e:06:
                    a3:80:f0:43:bc:fd:31:62:0b:d4:1e:e1:96:a0:9e:
                    22:bd:e9:13:f5:2f:bd:bc:27:79:99:a4:03:8e:3c:
                    d2:94:f1:79:80:8c:65:92:ec:50:12:4e:d4:5d:55:
                    92:61:44:54:d7:ab:28:5d:b4:17:17:e8:23:f2:57:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:57:7C:19:A1:CE:44:CB:1A:C6:30:B7:5C:3F:75:52:73:4C:19
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/AF9BA1D2717111ED8518666EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:1b:74:8a:d6:d9:c1:19:3c:71:82:15:8b:eb:12:41:0c:
         cf:74:a3:91:ab:af:a0:8e:00:73:95:e9:c0:13:94:41:50:0d:
         13:b4:d3:8a:3b:95:59:51:1f:00:bf:a5:25:32:05:c5:94:cc:
         21:a6:c2:18:54:de:a6:3f:fc:ee:75:63:d5:f9:40:78:31:c9:
         8b:ca:41:26:37:34:d6:dd:ba:02:42:9f:27:29:e7:a7:fe:90:
         08:91:08:fb:52:de:53:fc:1e:49:83:92:ad:ee:67:cb:5b:05:
         bf:b3:74:13:95:72:4d:e5:d8:c7:6e:64:f4:56:62:dd:71:b8:
         42:0c:12:11:2c:46:75:47:15:b3:a4:55:98:e6:24:14:39:c6:
         2f:9a:44:59:37:40:ff:5e:9a:2d:3c:29:76:e0:c5:60:55:66:
         65:26:68:46:b0:a8:e2:5f:22:f8:d8:dd:cb:32:7e:30:bc:d0:
         ea:ee:62:19:b5:2a:a9:c4:72:b5:c0:97:19:35:a7:ef:51:9f:
         86:b2:23:da:1e:76:36:47:83:c6:4f:2b:d6:2d:81:2a:65:74:
         08:90:22:09:9d:ab:8a:66:64:49:a8:ed:5a:8b:45:14:9c:48:
         de:94:d6:54:f3:9a:1f:06:7c:f3:5a:c2:23:6e:e4:27:f5:b4:
         82:d6:7f:a6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF
OTAzMDdBRjcwHhcNMjUwNzAxMDMwOTIwWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODYzNTE2MC1iOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7g9Yj1GiBU+adGOH/1fh5HFV7R6Ot5iEebbZ1D42xmP/gEL/uVV0QXurulR
McAxnYDh5Fo3nAI9A2YWta9gbWm5oz4TvSp/yMroxZgp5H7ujfdZ83ajAn3V5SWt
RaXQENsp5D4b+DIW5UyQQwtyoCFto40N0FvpdqtsPhCJ/+Aqcgyfa6ze1ztyYDVT
ggNJSzE8WsJVMHdjlD3BugJSpt/k6WIkqeIAWMI2/euCpmc8BdN6LA++HG8A+2L2
zsnNfgajgPBDvP0xYgvUHuGWoJ4ivekT9S+9vCd5maQDjjzSlPF5gIxlkuxQEk7U
XVWSYURU16soXbQXF+gj8lfLzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNPuV3wZ
oc5EyxrGMLdcP3VSc0wZMB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1
QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTAyMjYvQjU4RUJBMzA1NUI0MTFFREEwNzk1MDUzQzRGOUFFMDIvQUY5QkExRDI3
MTcxMTFFRDg1MTg2NjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnp0MwDQYJKoZIhvcNAQELBQADggEBAKVnG3SK1tnBGTxx
ghWL6xJBDM90o5Grr6COAHOV6cATlEFQDRO004o7lVlRHwC/pSUyBcWUzCGmwhhU
3qY//O51Y9X5QHgxyYvKQSY3NNbdugJCnycp56f+kAiRCPtS3lP8HkmDkq3uZ8tb
Bb+zdBOVck3l2MduZPRWYt1xuEIMEhEsRnVHFbOkVZjmJBQ5xi+aRFk3QP9emi08
KXbgxWBVZmUmaEawqOJfIvjY3csyfjC80OruYhm1KqnEcrXAlxk1p+9Rn4ayI9oe
djZHg8ZPK9YtgSpldAiQIgmdq4pmZEmo7VqLRRScSN6U1lTzmh8GfPNawiNu5Cf1
tILWf6Y=
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:54:05 2025 by rpki-client