Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/E2212D2A7B1411F0A9C4F31FC4F9AE02.roa
File:                     E2212D2A7B1411F0A9C4F31FC4F9AE02.roa (raw, json)
Hash identifier:          RJ4fwJ9GTpo+NUrJVgDVg1EFpmLawJIxs8RgkCH3GcI=
Subject key identifier:   93:19:D5:A4:FF:F9:2C:34:FC:A3:CC:8E:B8:40:A5:83:C7:E6:44:B1
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       81
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/E2212D2A7B1411F0A9C4F31FC4F9AE02.roa
Signing time:             Sun 17 Aug 2025 02:50:07 +0000
ROA not before:           Sun 17 Aug 2025 02:50:07 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     206150
IP address blocks:        103.49.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 07:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Aug 17 02:50:07 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68a1435f-bfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:1b:e8:11:35:1e:a4:88:71:b1:45:8d:0e:
                    43:01:02:f7:46:50:b2:02:a2:b9:c7:fb:9b:71:7e:
                    92:ca:70:e2:69:73:d1:3b:52:f0:13:0c:d0:da:3a:
                    d3:7e:f4:5b:87:d4:18:a8:88:10:0d:2d:79:ce:2e:
                    0a:20:93:2e:b4:d2:43:d4:08:3a:8c:1b:46:62:d5:
                    e7:1a:16:82:39:6f:3c:42:2e:7d:51:97:b5:58:3d:
                    0e:4a:6c:32:35:69:19:41:0a:8a:bd:99:81:46:dd:
                    89:dd:14:22:23:5d:c1:26:49:7a:a2:b9:ae:43:f3:
                    24:51:26:f2:10:16:2a:9a:8c:12:7d:8e:1d:33:5d:
                    63:1e:68:69:55:d5:e1:67:49:1b:3c:db:01:ca:c5:
                    1b:0f:04:59:6b:9c:09:44:6d:ea:93:70:53:06:cb:
                    a8:76:11:7a:7c:ec:d4:e7:e8:84:82:b8:ea:8d:6f:
                    78:1f:8f:23:e9:9e:9e:e7:93:00:37:cc:34:c2:47:
                    08:95:34:3c:87:44:64:d9:da:63:a0:ff:9b:a8:3e:
                    2f:64:a8:4a:7b:5b:96:d8:1a:52:63:53:36:35:5c:
                    bf:6c:f0:cd:6d:c1:84:d6:bc:29:55:ae:f9:9b:a6:
                    d4:0d:e1:81:20:55:0f:73:b8:48:20:89:e3:e5:14:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:19:D5:A4:FF:F9:2C:34:FC:A3:CC:8E:B8:40:A5:83:C7:E6:44:B1
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/E2212D2A7B1411F0A9C4F31FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:2e:03:5b:80:7a:cb:f4:79:3a:82:63:9e:28:3d:e3:1f:
         79:d7:15:fa:82:9d:c5:4a:ff:f7:f6:20:d4:1f:5b:34:05:ed:
         c0:7e:ff:32:f8:81:6e:cb:15:dc:fa:6d:d4:42:bc:93:d6:65:
         70:ec:2b:ad:80:1e:23:15:61:39:50:79:8a:71:15:c0:c2:71:
         ba:7f:36:44:15:1a:ea:0c:d8:76:8b:da:63:91:d2:4b:95:9d:
         4c:a5:a4:4c:80:b5:30:1b:39:43:08:c3:55:f5:ae:8d:da:3a:
         f7:e1:1e:78:02:cf:cd:05:d8:34:6f:2b:e3:e6:8d:1d:62:95:
         b8:73:e2:9b:66:59:98:be:f0:a9:68:82:3d:e7:e7:b6:4c:2c:
         00:58:85:75:aa:c0:56:3a:5c:6c:28:4c:b1:a4:f8:cd:7b:03:
         7e:46:50:69:86:3e:4e:f4:bb:1f:5b:29:50:c3:8a:26:1d:af:
         6b:be:21:4b:69:46:32:c2:23:f9:8b:26:89:cd:45:65:57:8d:
         61:c6:a6:f0:8f:ae:cc:8b:46:4d:bb:d0:54:c9:9b:bd:32:49:
         f9:97:da:10:96:de:9b:5d:98:80:76:13:36:e3:8e:64:d2:80:
         2c:5f:b0:13:ba:14:6b:54:01:75:04:53:64:0d:a6:b0:6a:b2:
         bf:9c:dc:dd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4
QTZFRENGQjkwHhcNMjUwODE3MDI1MDA3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGExNDM1Zi1iZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGAb6BE1HqSIcbFFjQ5DAQL3RlCyAqK5x/ubcX6SynDiaXPRO1LwEwzQ2jrT
fvRbh9QYqIgQDS15zi4KIJMutNJD1Ag6jBtGYtXnGhaCOW88Qi59UZe1WD0OSmwy
NWkZQQqKvZmBRt2J3RQiI13BJkl6ormuQ/MkUSbyEBYqmowSfY4dM11jHmhpVdXh
Z0kbPNsBysUbDwRZa5wJRG3qk3BTBsuodhF6fOzU5+iEgrjqjW94H48j6Z6e55MA
N8w0wkcIlTQ8h0Rk2dpjoP+bqD4vZKhKe1uW2BpSY1M2NVy/bPDNbcGE1rwpVa75
m6bUDeGBIFUPc7hIIInj5RT7cwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJMZ1aT/
+Sw0/KPMjrhApYPH5kSxMB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz
QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjdFRUIvRjU3Qzk0QjBEM0JBMTFFRjk0N0IwNTgwQzRGOUFFMDIvRTIyMTJEMkE3
QjE0MTFGMEE5QzRGMzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnMSkwDQYJKoZIhvcNAQELBQADggEBAKRELgNbgHrL9Hk6
gmOeKD3jH3nXFfqCncVK//f2INQfWzQF7cB+/zL4gW7LFdz6bdRCvJPWZXDsK62A
HiMVYTlQeYpxFcDCcbp/NkQVGuoM2HaL2mOR0kuVnUylpEyAtTAbOUMIw1X1ro3a
OvfhHngCz80F2DRvK+PmjR1ilbhz4ptmWZi+8Klogj3n57ZMLABYhXWqwFY6XGwo
TLGk+M17A35GUGmGPk70ux9bKVDDiiYdr2u+IUtpRjLCI/mLJonNRWVXjWHGpvCP
rsyLRk270FTJm70ySfmX2hCW3ptdmIB2EzbjjmTSgCxfsBO6FGtUAXUEU2QNprBq
sr+c3N0=
-----END CERTIFICATE-----
Generated at Thu Aug 21 12:14:24 2025 by rpki-client