Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
File:                     7AA7B416E01011EEA1CA127CC4F9AE02.roa (raw, json)
Hash identifier:          Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=
Subject key identifier:   81:EF:CE:E7:D2:A4:E9:CF:E1:F3:F1:A3:57:F1:01:14:C1:21:49:5E
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       07AD
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
Signing time:             Fri 06 Jun 2025 21:41:03 +0000
ROA not before:           Fri 06 Jun 2025 21:41:03 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23926
IP address blocks:        27.123.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 21:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: Jun  6 21:41:03 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6843606f-b0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0c:3a:f2:c5:8e:eb:93:5d:29:c7:ac:89:1f:
                    31:be:d4:2e:3b:85:de:a9:28:a8:50:0e:4c:4e:07:
                    df:15:db:a8:7d:e0:f1:80:27:df:22:dd:ba:85:4e:
                    f0:f3:5f:6b:79:61:fd:16:50:4a:40:a4:72:d5:86:
                    21:29:18:cc:8c:0d:9e:f8:c0:91:2d:7e:55:a7:d9:
                    29:b1:ac:ae:3f:5a:0b:91:23:5a:2b:af:0e:d4:8e:
                    3a:e5:5c:7b:c1:30:99:ee:48:b2:c8:bd:54:e3:5f:
                    74:f5:74:6f:72:7a:ee:f2:8d:76:70:da:85:8e:22:
                    27:59:91:59:94:38:69:66:8a:4b:e7:b1:8b:05:cf:
                    6c:9b:60:a9:d8:ef:b0:bf:da:25:78:f1:89:aa:b2:
                    a5:a4:6b:d3:85:0f:7a:ad:fb:fa:b6:3f:58:7a:ae:
                    33:47:13:38:c1:28:e5:3c:42:f3:90:99:24:0e:51:
                    62:be:5c:6a:7c:0d:8c:4c:b2:46:ef:26:c0:19:21:
                    71:16:a9:18:3d:78:51:85:10:0c:53:0a:86:f4:5e:
                    f4:12:66:d8:83:7f:02:54:83:ab:82:a0:da:7d:9b:
                    c2:0d:e6:18:c5:ca:f0:83:43:6f:c0:73:2c:17:9b:
                    be:79:15:3c:eb:74:47:06:6f:e4:c5:16:90:d3:f2:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:CE:E7:D2:A4:E9:CF:E1:F3:F1:A3:57:F1:01:14:C1:21:49:5E
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:14:6e:41:ee:89:84:ee:d8:1a:ff:6d:81:e1:3d:10:64:
         8a:ab:cb:7c:2f:7a:bf:9c:43:a7:4a:f0:9b:39:cf:69:07:98:
         05:5f:0e:66:c6:b9:92:91:83:9a:3a:ea:5e:35:e7:69:fb:c3:
         a7:e0:25:30:b0:15:38:6f:ec:0c:99:f3:79:ff:07:1a:ea:43:
         27:c9:4f:49:e6:3a:8b:a7:63:43:19:36:3c:3e:86:11:e5:3d:
         d3:3b:d9:35:86:4e:1b:5f:c1:eb:55:43:05:3d:9d:86:24:72:
         ec:78:c4:f5:65:da:dc:d1:7c:76:90:b5:17:6b:04:fe:e8:9e:
         22:c8:02:1b:7a:c0:12:33:08:6e:4e:1a:38:33:31:c3:04:14:
         08:e5:17:88:58:e8:2b:5b:6f:27:00:2e:32:f3:67:58:1c:a3:
         83:a7:2e:c0:35:d5:5f:ba:f2:25:5f:50:f7:1e:b9:d8:e6:4e:
         43:d7:fb:5f:bb:3d:59:80:6f:0a:11:7c:13:be:2e:72:23:43:
         82:97:8c:ab:7c:2c:b4:96:cb:74:13:57:29:8f:b0:c6:a5:88:
         68:2d:65:03:cf:62:c2:17:56:ea:82:fe:a7:ba:f2:e2:ea:25:
         2e:1a:96:b8:7d:99:ec:80:cc:9e:25:1e:31:9e:ba:84:ad:7d:
         8a:db:58:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjUwNjA2MjE0MTAzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQzNjA2Zi1iMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Qw68sWO65NdKcesiR8xvtQuO4XeqSioUA5MTgffFduofeDxgCffIt26hU7w
819reWH9FlBKQKRy1YYhKRjMjA2e+MCRLX5Vp9kpsayuP1oLkSNaK68O1I465Vx7
wTCZ7kiyyL1U41909XRvcnru8o12cNqFjiInWZFZlDhpZopL57GLBc9sm2Cp2O+w
v9olePGJqrKlpGvThQ96rfv6tj9Yeq4zRxM4wSjlPELzkJkkDlFivlxqfA2MTLJG
7ybAGSFxFqkYPXhRhRAMUwqG9F70EmbYg38CVIOrgqDafZvCDeYYxcrwg0NvwHMs
F5u+eRU863RHBm/kxRaQ0/IlywIDAQABo4IClTCCApEwHQYDVR0OBBYEFIHvzufS
pOnP4fPxo1fxARTBIUleMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTlEQ0IvRTRDMEY1NkMxODdGMTFFQkFFMjk2OTJFQzRGOUFFMDIvN0FBN0I0MTZF
MDEwMTFFRUExQ0ExMjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAbeyswDQYJKoZIhvcNAQELBQADggEBAEPVFG5B7omE7tga
/22B4T0QZIqry3wver+cQ6dK8Js5z2kHmAVfDmbGuZKRg5o66l4152n7w6fgJTCw
FThv7AyZ83n/BxrqQyfJT0nmOounY0MZNjw+hhHlPdM72TWGThtfwetVQwU9nYYk
cux4xPVl2tzRfHaQtRdrBP7oniLIAht6wBIzCG5OGjgzMcMEFAjlF4hY6CtbbycA
LjLzZ1gco4OnLsA11V+68iVfUPceudjmTkPX+1+7PVmAbwoRfBO+LnIjQ4KXjKt8
LLSWy3QTVymPsMaliGgtZQPPYsIXVuqC/qe68uLqJS4alrh9meyAzJ4lHjGeuoSt
fYrbWPc=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:07 2025 by rpki-client