Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/637BE5B0407C11EFBB872A45C4F9AE02.roa
File:                     637BE5B0407C11EFBB872A45C4F9AE02.roa (raw, json)
Hash identifier:          w1yfyWSTFZ2T3mamuS/YlpEjcUFBj5Vw4U9ZO7o84Xw=
Subject key identifier:   38:78:E4:9C:1B:3C:1D:A7:A9:89:F0:57:BB:D6:88:B8:92:31:5C:14
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       0198
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/637BE5B0407C11EFBB872A45C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 04:22:45 +0000
ROA not before:           Wed 03 Sep 2025 04:22:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7488
IP address blocks:        103.248.48.0/23 maxlen: 23
                          2001:df2:c740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 03:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Sep  3 04:22:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7c295-8137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:2e:ee:63:d9:09:d4:ff:f8:f5:d7:74:bc:
                    12:73:00:13:20:e9:a2:18:e6:98:1c:1b:15:28:45:
                    b1:ec:87:6f:ec:1f:7d:f5:9f:00:4e:7c:6f:b2:d0:
                    d6:a7:ae:90:16:45:c6:6a:62:ea:77:d8:50:f7:f9:
                    d1:24:0e:ec:2f:c0:b8:7c:a5:1b:71:90:47:e4:17:
                    37:4e:a5:5c:e5:87:e6:da:45:c0:5e:32:4f:ca:22:
                    d5:cc:72:01:f0:01:03:e3:ef:a6:29:66:08:e0:e7:
                    f1:81:5f:e1:2d:33:c2:68:33:74:c5:51:52:93:e0:
                    6e:ce:79:33:d7:c1:1b:e3:03:28:58:4c:74:9a:dc:
                    88:50:21:1f:be:91:a2:8f:60:5e:c8:32:19:5c:c9:
                    9e:3d:20:57:eb:f6:7e:43:c0:a9:0f:0f:11:11:37:
                    dd:28:d8:7a:a8:8e:22:40:be:c7:91:00:c2:6c:d7:
                    a0:d5:bf:27:4f:2c:d7:6b:cd:fa:2a:2d:80:2d:fa:
                    8b:79:1a:1a:0d:9a:e0:38:25:3c:c9:97:0d:1f:56:
                    d1:49:5d:a0:42:26:0f:e6:56:47:5b:f9:f5:b5:b5:
                    35:be:72:7b:29:ac:d3:04:f2:76:38:77:24:6f:e0:
                    df:32:ee:be:23:e6:ca:68:bd:08:2a:77:84:3d:3b:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:78:E4:9C:1B:3C:1D:A7:A9:89:F0:57:BB:D6:88:B8:92:31:5C:14
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/637BE5B0407C11EFBB872A45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.48.0/23
                IPv6:
                  2001:df2:c740::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:01:07:cf:bf:80:80:49:6c:9b:0e:86:38:d0:f3:9b:4a:
         79:8b:5c:17:e3:61:d4:45:b9:17:1c:2d:29:2e:54:7a:5a:3d:
         5c:1d:bf:3b:c6:e1:d3:a9:a5:fd:c8:11:8d:03:11:5b:8e:92:
         41:56:d7:0d:ba:8c:e3:c3:d7:e1:11:db:73:0c:d0:0a:9d:0b:
         d0:8f:a5:6c:4b:5d:c6:b1:1e:d6:65:aa:d2:81:c2:77:1f:94:
         b2:30:4f:a5:06:b5:05:c4:30:a8:37:6b:99:b7:49:cc:e5:a4:
         44:ef:6d:44:d7:32:16:83:35:c8:22:62:85:bc:51:9b:2c:64:
         9e:90:08:55:6a:2b:f5:d9:5c:49:ad:09:1b:48:26:08:2f:c9:
         e1:98:68:13:3c:0e:51:62:4a:a4:c8:1b:38:65:1f:df:78:ab:
         06:b3:1e:ee:59:a6:a8:ee:90:78:5d:da:2b:b7:19:03:bc:62:
         dc:d4:be:8c:61:85:c7:53:03:a4:6f:56:67:ab:8f:18:41:de:
         de:9c:5f:5c:85:e9:15:cf:6c:e4:bd:5e:e4:6b:ba:9f:05:03:
         34:6d:05:49:4c:af:fe:5a:84:8e:d4:37:03:5e:93:de:49:79:
         87:99:81:be:7a:2f:4f:29:b1:d1:f1:db:1b:9f:ab:c3:33:c3:
         69:9d:44:0f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQxQTkxMTAvBgNVBAUTKDc0MjE3NEYzMkU2Q0M2RThEMUY5NjVCRkExRDQwQTEw
RDZFM0U3QzkwHhcNMjUwOTAzMDQyMjQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3YzI5NS04MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Wgu7mPZCdT/+PXXdLwScwATIOmiGOaYHBsVKEWx7Idv7B999Z8ATnxvstDW
p66QFkXGamLqd9hQ9/nRJA7sL8C4fKUbcZBH5Bc3TqVc5Yfm2kXAXjJPyiLVzHIB
8AED4++mKWYI4OfxgV/hLTPCaDN0xVFSk+Buznkz18Eb4wMoWEx0mtyIUCEfvpGi
j2BeyDIZXMmePSBX6/Z+Q8CpDw8RETfdKNh6qI4iQL7HkQDCbNeg1b8nTyzXa836
Ki2ALfqLeRoaDZrgOCU8yZcNH1bRSV2gQiYP5lZHW/n1tbU1vnJ7KazTBPJ2OHck
b+DfMu6+I+bKaL0IKneEPTvUOwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDh45Jwb
PB2nqYnwV7vWiLiSMVwUMB8GA1UdIwQYMBaAFHQhdPMubMbo0fllv6HUChDW4+fJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDFBOS84RjkxNjk0ODMy
ODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1alItV1dfb2RRS0VOYmo1
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUQxQTkvOEY5MTY5NDgzMjg4MTFFRUIyOUQzMDQyQzRGOUFFMDIvNjM3QkU1QjA0
MDdDMTFFRkJCODcyQTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFn+DAwDwQCAAIwCQMHACABDfLHQDANBgkqhkiG9w0BAQsF
AAOCAQEADOcBB8+/gIBJbJsOhjjQ85tKeYtcF+Nh1EW5FxwtKS5Uelo9XB2/O8bh
06ml/cgRjQMRW46SQVbXDbqM48PX4RHbcwzQCp0L0I+lbEtdxrEe1mWq0oHCdx+U
sjBPpQa1BcQwqDdrmbdJzOWkRO9tRNcyFoM1yCJihbxRmyxknpAIVWor9dlcSa0J
G0gmCC/J4ZhoEzwOUWJKpMgbOGUf33irBrMe7lmmqO6QeF3aK7cZA7xi3NS+jGGF
x1MDpG9WZ6uPGEHe3pxfXIXpFc9s5L1e5Gu6nwUDNG0FSUyv/lqEjtQ3A16T3kl5
h5mBvnovTymx0fHbG5+rwzPDaZ1EDw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:01:09 2025 by rpki-client