Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
File:                     9EE7FBDA678511F0999A252DC4F9AE02.roa (raw, json)
Hash identifier:          MAMH/RfGTdfLAKhMj8K5M9K9RZlTteEx+MyB1nmAYi8=
Subject key identifier:   7F:FD:71:E3:67:50:2E:65:A5:17:43:E4:88:9C:FB:A6:88:E8:62:2D
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       1B
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
Signing time:             Fri 29 Aug 2025 08:59:14 +0000
ROA not before:           Fri 29 Aug 2025 08:59:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.141.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Aug 29 08:59:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b16be2-035f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:60:87:85:2c:1e:67:d8:81:39:7d:d8:af:
                    17:be:ad:b9:48:1b:12:64:0f:4d:af:87:3e:5b:95:
                    01:1b:17:27:58:25:61:ff:46:13:4d:7a:9b:67:8e:
                    78:a2:14:7b:06:54:49:34:e8:d3:b7:cb:a5:0a:dc:
                    98:cd:c0:16:5a:eb:4d:da:82:6e:1b:3e:7b:d6:89:
                    6f:e6:57:19:1e:7a:a0:dc:94:74:f1:65:90:9e:89:
                    77:0d:ea:b1:6f:19:73:fb:e2:9b:6c:7b:89:7b:9b:
                    d3:29:6d:cd:2e:9e:92:7c:52:3b:dd:c2:11:75:a4:
                    fa:77:ec:76:b1:4f:af:ea:ec:d1:5b:88:b5:58:32:
                    e4:da:ab:0e:1c:b9:ed:87:11:41:57:62:e3:9b:10:
                    e3:6a:08:92:ff:cb:c3:11:8c:bd:77:4f:22:30:fb:
                    9f:52:51:7c:c0:c3:a2:20:cb:34:52:39:c6:99:92:
                    3f:02:80:bd:33:c0:fb:89:0b:05:b1:38:a4:f5:03:
                    35:b0:e4:9b:68:6e:b9:d1:39:88:53:0c:2b:53:cb:
                    59:a2:02:8c:35:f4:f9:36:b2:40:3a:d2:c5:5f:49:
                    61:59:17:7e:ed:41:2c:38:e3:8f:e5:5e:bd:ac:ef:
                    60:af:47:08:86:10:7e:65:bb:90:3f:43:7f:b7:31:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:71:E3:67:50:2E:65:A5:17:43:E4:88:9C:FB:A6:88:E8:62:2D
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:4d:41:a5:54:ff:18:be:a7:46:b8:e7:4a:1a:8a:47:09:
         35:42:b6:fe:ab:27:64:c7:89:cc:52:37:87:c6:fd:7a:d6:49:
         09:15:dd:be:f2:79:15:72:db:72:10:38:ea:ea:72:d9:0e:bc:
         f8:30:78:f1:9b:9a:5a:d3:44:fb:65:8e:d9:e7:2f:93:b3:6c:
         04:cf:76:3a:0f:c4:4e:10:12:e3:17:ed:eb:60:54:06:63:1c:
         3d:9f:58:ae:1a:13:f7:b0:59:af:c3:03:10:23:bb:f3:c1:d1:
         df:e8:f7:c7:b3:20:32:ae:02:97:2e:f7:e9:32:78:c8:40:a7:
         03:1c:fc:ee:af:26:d7:9a:86:8e:b2:d1:7c:bb:12:0d:19:87:
         68:b3:8b:92:75:cb:6c:86:17:9d:41:59:f7:ba:94:e1:62:e2:
         30:e4:c7:8b:88:18:c2:03:9a:f1:4e:43:c4:97:2b:b9:35:54:
         98:e2:17:90:f3:d5:cc:c3:b2:f7:1a:eb:54:9e:b4:e0:46:05:
         83:02:85:e1:7f:3d:4f:71:bd:14:87:ce:4c:05:45:a2:20:57:
         0d:f7:30:0c:83:de:d1:72:90:1b:5b:60:b0:8f:a0:5c:52:a4:
         60:c6:51:06:14:ed:6d:1f:9e:a3:fd:b2:81:e0:bb:4a:54:53:
         8c:35:ae:d3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MkEyMjExMC8GA1UEBRMoQzIzREVFQjQ3OUU3MEY2MEVGQ0E3Qzg4NDYyQjk1QjlE
QzIyQzlEMDAeFw0yNTA4MjkwODU5MTRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4YjE2YmUyLTAzNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDY9mCHhSweZ9iBOX3Yrxe+rblIGxJkD02vhz5blQEbFydYJWH/RhNNeptnjnii
FHsGVEk06NO3y6UK3JjNwBZa603agm4bPnvWiW/mVxkeeqDclHTxZZCeiXcN6rFv
GXP74ptse4l7m9Mpbc0unpJ8UjvdwhF1pPp37HaxT6/q7NFbiLVYMuTaqw4cue2H
EUFXYuObEONqCJL/y8MRjL13TyIw+59SUXzAw6IgyzRSOcaZkj8CgL0zwPuJCwWx
OKT1AzWw5JtobrnROYhTDCtTy1miAow19Pk2skA60sVfSWFZF37tQSw444/lXr2s
72CvRwiGEH5lu5A/Q3+3MavjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUf/1x42dQ
LmWlF0PkiJz7pojoYi0wHwYDVR0jBBgwFoAUwj3utHnnD2DvynyIRiuVudwiydAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTIyL0ZENURFOUIyNjYw
MDExRjA5OTg2QzkxN0M0RjlBRTAyL3dqM3V0SG5uRDJEdnlueUlSaXVWdWR3aXlk
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd2ozdXRIbm5EMkR2eW55SVJpdVZ1ZHdpeWRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkEyMi9GRDVERTlCMjY2MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi85RUU3RkJEQTY3
ODUxMUYwOTk5QTI1MkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeNKjANBgkqhkiG9w0BAQsFAAOCAQEAZ+tNQaVU/xi+p0a4
50oaikcJNUK2/qsnZMeJzFI3h8b9etZJCRXdvvJ5FXLbchA46upy2Q68+DB48Zua
WtNE+2WO2ecvk7NsBM92Og/EThAS4xft62BUBmMcPZ9YrhoT97BZr8MDECO788HR
3+j3x7MgMq4Cly736TJ4yECnAxz87q8m15qGjrLRfLsSDRmHaLOLknXLbIYXnUFZ
97qU4WLiMOTHi4gYwgOa8U5DxJcruTVUmOIXkPPVzMOy9xrrVJ604EYFgwKF4X89
T3G9FIfOTAVFoiBXDfcwDIPe0XKQG1tgsI+gXFKkYMZRBhTtbR+eo/2ygeC7SlRT
jDWu0w==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:19 2025 by rpki-client