Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
File:                     874D690486F911F0AEE9D81BC4F9AE02.roa (raw, json)
Hash identifier:          d/YokLZlSeyNxo7/k+XKoCvVYm4Hgi7kRhirRzPKQaU=
Subject key identifier:   33:34:54:6C:B1:0D:16:D1:C1:17:3D:FB:7D:90:47:B2:B6:FC:9D:E3
Certificate issuer:       /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial:       45
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
Signing time:             Mon 01 Sep 2025 06:04:32 +0000
ROA not before:           Mon 01 Sep 2025 06:04:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
                          rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
        Validity
            Not Before: Sep  1 06:04:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68b53770-01e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:89:ec:a3:e6:f6:e9:64:bd:1d:f4:4b:d1:
                    0b:ee:c1:40:7b:55:e6:97:e3:6e:8c:33:0f:57:82:
                    30:86:49:f8:33:8d:8f:c7:fb:2f:7f:0e:b4:2c:c4:
                    a8:0f:ca:ac:48:ca:72:50:cf:0f:30:c8:1b:1a:f4:
                    2b:a4:f5:e7:f9:b6:3c:3e:68:4a:c7:70:47:ee:9e:
                    72:b5:a5:d8:88:e6:2d:2d:ef:7c:ab:88:5b:87:7e:
                    34:d0:f7:3e:6f:17:ba:7f:0c:ef:aa:93:6c:75:74:
                    b0:8c:b0:5e:44:fc:00:52:1c:cd:4e:ad:d4:0a:c6:
                    f6:39:b5:f4:61:f3:46:0e:e9:d5:9d:38:05:c3:74:
                    62:83:6d:ae:aa:34:f4:86:03:9b:57:fb:99:b8:16:
                    a0:c3:f4:1d:f9:2b:90:40:c0:36:2f:44:89:88:e4:
                    c4:48:12:5c:14:7c:52:aa:7f:a0:ac:fa:3e:94:35:
                    52:db:5a:61:cf:fd:54:f1:7f:fa:0e:69:8b:a7:f3:
                    65:8f:9b:22:f4:06:d0:78:cf:f3:e2:e9:3d:b8:ef:
                    35:35:97:dc:18:af:46:ee:33:07:db:0f:93:a6:e7:
                    d0:36:5b:be:76:1c:a3:af:f0:24:1e:b7:95:fa:b9:
                    11:2b:27:4f:d0:b3:88:21:4f:6d:e2:29:28:a5:8a:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:54:6C:B1:0D:16:D1:C1:17:3D:FB:7D:90:47:B2:B6:FC:9D:E3
            X509v3 Authority Key Identifier:
                keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:5d:ea:fc:17:a5:f1:08:bf:9d:65:cb:d0:d8:a6:d5:e8:
         55:4e:f9:de:15:fe:72:69:0d:81:1e:97:7c:62:54:34:eb:bc:
         47:11:51:2a:e7:3c:6a:cf:a0:15:7a:7b:db:95:b3:01:3a:2a:
         bd:b5:45:c8:47:e8:69:40:ab:90:cb:42:d0:7e:a5:c0:18:bf:
         3a:1a:1b:59:be:dd:f9:1f:79:99:8c:eb:46:9a:02:7b:d6:5e:
         0e:60:32:6d:ac:4a:48:61:23:75:0b:ca:6a:88:d3:9e:a1:42:
         1f:e0:51:af:6e:3e:ee:c2:9e:a7:ea:c4:39:ed:9a:d7:d7:cf:
         f7:ea:79:ce:dd:85:7e:6f:c1:ed:b2:7a:2f:bb:07:0c:21:47:
         ae:77:31:16:cc:bd:98:44:91:0f:a1:7c:af:1e:cb:3b:16:7f:
         d7:96:72:ae:a4:4d:73:e4:4d:a9:67:27:72:ba:5e:d5:1d:b3:
         d1:ea:32:7b:62:76:da:13:d1:69:87:f5:8e:c4:57:1b:66:32:
         6f:a0:2f:1b:05:23:87:a2:13:5f:5b:5b:14:57:e5:96:c9:3b:
         c4:02:36:e2:5c:fd:de:fd:84:5e:2a:5b:0c:a2:a0:67:ff:a1:
         19:54:96:ed:98:53:57:ea:58:c8:97:e6:7d:1b:f4:fe:32:52:
         66:85:1b:b6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OUI5RDExMC8GA1UEBRMoMjI1ODdDQzJDQjZGMzUxMDYzNzgzRkIxQ0ZEQTY2RTQ0
RTJFQ0FDMTAeFw0yNTA5MDEwNjA0MzJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4YjUzNzcwLTAxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDczInso+b26WS9HfRL0QvuwUB7VeaX426MMw9XgjCGSfgzjY/H+y9/DrQsxKgP
yqxIynJQzw8wyBsa9Cuk9ef5tjw+aErHcEfunnK1pdiI5i0t73yriFuHfjTQ9z5v
F7p/DO+qk2x1dLCMsF5E/ABSHM1OrdQKxvY5tfRh80YO6dWdOAXDdGKDba6qNPSG
A5tX+5m4FqDD9B35K5BAwDYvRImI5MRIElwUfFKqf6Cs+j6UNVLbWmHP/VTxf/oO
aYun82WPmyL0BtB4z/Pi6T247zU1l9wYr0buMwfbD5Om59A2W752HKOv8CQet5X6
uRErJ0/Qs4ghT23iKSililjpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMzRUbLEN
FtHBFz37fZBHsrb8neMwHwYDVR0jBBgwFoAUIlh8wstvNRBjeD+xz9pm5E4uysEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5QjlELzI0MDJGQjA4MUU2
MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJCamVELXh6OXBtNUU0dXlz
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWxoOHdzdHZOUkJqZUQteHo5cG01RTR1eXNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUI5RC8yNDAyRkIwODFFNjExMUYwQUREM0QxNzNDNEY5QUUwMi84NzRENjkwNDg2
RjkxMUYwQUVFOUQ4MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaPjDDANBgkqhkiG9w0BAQsFAAOCAQEAKY5d6vwXpfEIv51l
y9DYptXoVU753hX+cmkNgR6XfGJUNOu8RxFRKuc8as+gFXp725WzAToqvbVFyEfo
aUCrkMtC0H6lwBi/OhobWb7d+R95mYzrRpoCe9ZeDmAybaxKSGEjdQvKaojTnqFC
H+BRr24+7sKep+rEOe2a19fP9+p5zt2Ffm/B7bJ6L7sHDCFHrncxFsy9mESRD6F8
rx7LOxZ/15ZyrqRNc+RNqWcncrpe1R2z0eoye2J22hPRaYf1jsRXG2Yyb6AvGwUj
h6ITX1tbFFfllsk7xAI24lz93v2EXipbDKKgZ/+hGVSW7ZhTV+pYyJfmfRv0/jJS
ZoUbtg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:29:54 2025 by rpki-client