Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/D94F8742B58811F091229E53C4F9AE02.roa
File:                     D94F8742B58811F091229E53C4F9AE02.roa (raw, json)
Hash identifier:          Mr+/4/FtMx1UeLYPbgbLjrv6pPKctIBiSp3IkHkxYAk=
Subject key identifier:   69:9E:B3:83:62:07:4C:33:BB:E7:52:C0:1C:13:32:46:1E:20:81:29
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       0275
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/D94F8742B58811F091229E53C4F9AE02.roa
Signing time:             Thu 30 Oct 2025 12:06:21 +0000
ROA not before:           Thu 30 Oct 2025 12:06:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141448
IP address blocks:        103.7.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Oct 30 12:06:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=690354bd-ccd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:43:04:2c:48:23:45:2b:53:84:a9:d6:ae:
                    ca:70:94:e0:78:5d:ee:c4:60:a6:b6:df:fa:57:ca:
                    a7:0a:3e:49:ee:e8:f3:d2:c7:fa:73:83:7c:f5:24:
                    86:96:75:56:91:8f:9a:71:87:6b:44:d2:c1:e9:50:
                    c8:9d:f0:39:a5:55:24:c3:08:5e:38:da:21:86:81:
                    17:ec:54:44:01:b6:59:75:15:0f:08:20:e5:1d:97:
                    ce:0d:19:8a:49:39:09:07:64:99:25:a5:d6:cb:40:
                    0d:d9:6a:e9:25:29:95:3e:e1:36:2e:42:9d:1f:c2:
                    aa:f2:44:6e:18:23:97:cf:e4:f1:c1:1c:d3:7c:6a:
                    b8:24:c9:b1:31:51:5a:ef:fe:ad:8f:c5:f7:dc:90:
                    6c:12:ef:3d:79:11:e3:72:4c:02:9e:d6:31:4a:63:
                    83:f4:9e:9f:ac:80:cd:87:63:a4:c9:03:d5:d5:f3:
                    64:2f:dc:87:79:1d:fd:01:41:19:d6:e8:0f:a9:67:
                    26:f6:6b:52:59:d8:d7:30:ef:c1:45:12:eb:c5:5e:
                    cd:c8:2e:74:c7:77:6d:16:a3:fc:15:e0:d6:74:64:
                    b0:f7:77:c6:20:69:7c:dd:af:9d:92:21:31:24:4b:
                    27:86:b6:91:1d:d4:9a:b4:61:fe:0b:db:b2:ec:02:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9E:B3:83:62:07:4C:33:BB:E7:52:C0:1C:13:32:46:1E:20:81:29
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/D94F8742B58811F091229E53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:10:ce:ba:e5:58:3e:ff:76:a7:33:90:f7:40:70:36:86:
         93:96:d9:11:dc:fe:9f:1b:ca:c3:2d:a6:01:bd:be:05:62:82:
         5d:b3:39:a4:b4:e5:a8:35:76:73:51:6c:53:c2:ac:d4:c8:56:
         bb:78:62:ae:a2:87:eb:0e:e1:26:38:9b:ac:77:26:5c:c0:f6:
         35:05:0e:fd:f9:0b:12:ec:f1:37:09:52:32:35:f4:eb:a5:f7:
         3c:cc:f7:24:bc:90:4f:6d:25:78:b8:a1:86:5f:f5:6b:86:e5:
         a0:a0:70:a6:f2:38:68:9f:99:ef:6e:e9:b5:73:88:be:56:dd:
         fd:d4:c8:c7:59:be:da:6e:be:bf:3e:62:d9:38:7b:94:19:19:
         5a:10:0b:e5:40:3f:5c:d4:18:f6:e0:08:e5:32:c6:3d:d7:c2:
         d9:f2:e2:29:cf:06:ea:fc:d9:95:64:21:ee:b0:b4:38:65:cd:
         b7:82:e2:1d:49:a1:d4:48:b1:96:ca:78:3a:25:a1:c6:83:9f:
         a4:53:df:d2:2c:f7:56:4a:a5:9e:cf:42:56:74:ae:78:c2:ea:
         28:c9:4d:df:a1:f3:a0:8c:a2:05:2a:46:b9:eb:e0:49:58:98:
         df:f7:e7:86:f1:5e:7b:49:33:ed:96:57:0b:18:fa:0c:39:be:
         ca:17:53:bf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy
OUNDNzZCNjUwHhcNMjUxMDMwMTIwNjIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzNTRiZC1jY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHVDBCxII0UrU4Sp1q7KcJTgeF3uxGCmtt/6V8qnCj5J7ujz0sf6c4N89SSG
lnVWkY+acYdrRNLB6VDInfA5pVUkwwheONohhoEX7FREAbZZdRUPCCDlHZfODRmK
STkJB2SZJaXWy0AN2WrpJSmVPuE2LkKdH8Kq8kRuGCOXz+TxwRzTfGq4JMmxMVFa
7/6tj8X33JBsEu89eRHjckwCntYxSmOD9J6frIDNh2OkyQPV1fNkL9yHeR39AUEZ
1ugPqWcm9mtSWdjXMO/BRRLrxV7NyC50x3dtFqP8FeDWdGSw93fGIGl83a+dkiEx
JEsnhraRHdSatGH+C9uy7AJEVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGmes4Ni
B0wzu+dSwBwTMkYeIIEpMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4
M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcxNDIvOTY2MTg1QkEzODNDMTFFREIwOUYwMjE0QzRGOUFFMDIvRDk0Rjg3NDJC
NTg4MTFGMDkxMjI5RTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnB3swDQYJKoZIhvcNAQELBQADggEBAAi5EM665Vg+/3an
M5D3QHA2hpOW2RHc/p8bysMtpgG9vgVigl2zOaS05ag1dnNRbFPCrNTIVrt4Yq6i
h+sO4SY4m6x3JlzA9jUFDv35CxLs8TcJUjI19Oul9zzM9yS8kE9tJXi4oYZf9WuG
5aCgcKbyOGifme9u6bVziL5W3f3UyMdZvtpuvr8+Ytk4e5QZGVoQC+VAP1zUGPbg
COUyxj3Xwtny4inPBur82ZVkIe6wtDhlzbeC4h1JodRIsZbKeDolocaDn6RT39Is
91ZKpZ7PQlZ0rnjC6ijJTd+h86CMogUqRrnr4ElYmN/354bxXntJM+2WVwsY+gw5
vsoXU78=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:56:24 2025 by rpki-client