Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
File:                     2E280FE4839511F0A13CF851C4F9AE02.roa (raw, json)
Hash identifier:          zEBjfoQwXFCRqmcCi9TKLIMgOj/YRKNGcpGBE+X3MUc=
Subject key identifier:   33:92:E1:D1:B0:15:09:60:6F:60:BA:F4:A7:C1:B0:D6:48:49:07:48
Certificate issuer:       /CN=A9134E06/serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
Certificate serial:       03
Authority key identifier: B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 22:28:39 +0000
ROA not before:           Wed 27 Aug 2025 22:28:39 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        203.17.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl
                          rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 08:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E06, serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
        Validity
            Not Before: Aug 27 22:28:39 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68af8697-6794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:e5:d6:96:e7:c8:10:c5:32:74:24:89:f4:
                    aa:32:b3:73:3a:76:17:5a:9b:df:07:e5:d1:cc:49:
                    7d:0f:4a:ce:41:61:b6:70:88:de:87:15:8f:4b:cf:
                    dc:98:e9:18:a8:cd:63:0f:37:ec:af:2a:74:ae:46:
                    29:48:78:b3:67:b5:1c:d5:f9:b1:e5:a5:6e:b8:00:
                    13:15:c6:7a:a8:49:4d:fb:9a:8d:65:95:34:c0:bf:
                    08:7f:39:9e:9f:f2:10:24:09:c0:a1:1e:f7:15:22:
                    97:7a:93:76:ee:e4:b6:87:3f:d5:25:b5:e2:c4:ee:
                    62:93:47:3c:2c:2f:8e:09:2b:d6:9c:7a:21:e1:ea:
                    99:50:10:b7:d7:21:bd:81:56:e2:f7:2b:00:7c:a3:
                    90:05:43:77:be:59:7d:7d:fe:17:40:76:bc:fd:29:
                    ef:f8:d9:cf:11:47:2b:64:1d:3c:ce:c1:80:bd:68:
                    72:62:c8:0d:e7:74:85:de:b7:c4:f0:ee:81:a0:4e:
                    30:c9:01:32:b0:5a:a5:9a:7e:44:32:b5:95:a5:33:
                    b6:b7:7c:1d:93:62:35:53:1c:b2:69:86:a7:7b:dd:
                    af:63:54:c7:95:3f:ee:d7:2c:57:61:1f:09:9b:ab:
                    38:69:48:7d:61:d4:cf:67:75:f1:6d:34:43:bb:79:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:E1:D1:B0:15:09:60:6F:60:BA:F4:A7:C1:B0:D6:48:49:07:48
            X509v3 Authority Key Identifier:
                keyid:B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:29:83:54:43:7a:d5:a9:54:ef:a8:cf:ac:25:07:ee:12:
         09:0c:fb:c6:39:2e:e3:c4:ab:79:00:e7:fc:8b:f0:d6:0f:db:
         03:d8:33:e0:f6:5d:41:31:1f:c0:ae:4d:2b:ec:f2:85:23:63:
         e6:1c:12:67:b6:6b:64:d7:a0:43:b1:a1:f1:3f:b5:ab:f4:b4:
         c4:10:d5:32:bc:29:51:cd:86:a2:b1:e6:4a:b3:79:b3:d7:74:
         db:67:b6:3d:52:b4:9a:8b:d0:da:a7:6c:8b:6e:fa:f8:b8:11:
         f9:f9:43:b7:fe:77:e1:10:6d:16:12:8b:5e:a9:e1:ff:06:b5:
         0e:47:48:77:e0:6a:a1:8b:73:61:2f:07:42:70:1e:24:93:84:
         46:aa:5a:bb:20:a7:f2:24:6d:88:bd:cf:3f:cc:ea:5f:8f:6b:
         13:0f:fe:d9:f9:03:34:5e:8f:58:82:40:f3:f6:09:98:1e:0f:
         31:d1:7d:d6:eb:02:63:13:b2:26:85:be:e0:38:14:37:01:61:
         9d:0d:ca:cc:f7:34:e9:c0:94:e6:9b:20:58:ef:d6:9c:23:03:
         b0:9c:e3:ed:ac:fd:a5:a1:18:da:36:7d:09:ad:c6:8c:3d:8d:
         21:ce:77:f0:b1:98:05:a2:e2:14:79:69:7b:15:ab:d4:ed:56:
         82:6b:bf:82
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NEUwNjExMC8GA1UEBRMoQjI0MEJDNzA3MEYxQkRENzY0QUIwMEIyMjY4QjI4OTc1
QjM1MUY4MTAeFw0yNTA4MjcyMjI4MzlaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4YWY4Njk3LTY3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDP9+XWlufIEMUydCSJ9Koys3M6dhdam98H5dHMSX0PSs5BYbZwiN6HFY9Lz9yY
6RiozWMPN+yvKnSuRilIeLNntRzV+bHlpW64ABMVxnqoSU37mo1llTTAvwh/OZ6f
8hAkCcChHvcVIpd6k3bu5LaHP9UlteLE7mKTRzwsL44JK9aceiHh6plQELfXIb2B
VuL3KwB8o5AFQ3e+WX19/hdAdrz9Ke/42c8RRytkHTzOwYC9aHJiyA3ndIXet8Tw
7oGgTjDJATKwWqWafkQytZWlM7a3fB2TYjVTHLJphqd73a9jVMeVP+7XLFdhHwmb
qzhpSH1h1M9ndfFtNEO7eduzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUM5Lh0bAV
CWBvYLr0p8Gw1khJB0gwHwYDVR0jBBgwFoAUskC8cHDxvddkqwCyJosol1s1H4Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RTA2L0YwOEZDOEZBODM5
MTExRjA4QjY0MjA4NEM0RjlBRTAyL3NrQzhjSER4dmRka3F3Q3lKb3NvbDFzMUg0
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc2tDOGNIRHh2ZGRrcXdDeUpvc29sMXMxSDRFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEUwNi9GMDhGQzhGQTgzOTExMUYwOEI2NDIwODRDNEY5QUUwMi8yRTI4MEZFNDgz
OTUxMUYwQTEzQ0Y4NTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcsR3DANBgkqhkiG9w0BAQsFAAOCAQEAf6Ipg1RDetWpVO+o
z6wlB+4SCQz7xjku48SreQDn/Ivw1g/bA9gz4PZdQTEfwK5NK+zyhSNj5hwSZ7Zr
ZNegQ7Gh8T+1q/S0xBDVMrwpUc2GorHmSrN5s9d022e2PVK0movQ2qdsi276+LgR
+flDt/534RBtFhKLXqnh/wa1DkdId+BqoYtzYS8HQnAeJJOERqpauyCn8iRtiL3P
P8zqX49rEw/+2fkDNF6PWIJA8/YJmB4PMdF91usCYxOyJoW+4DgUNwFhnQ3KzPc0
6cCU5psgWO/WnCMDsJzj7az9paEY2jZ9Ca3GjD2NIc538LGYBaLiFHlpexWr1O1W
gmu/gg==
-----END CERTIFICATE-----
Generated at Thu Sep 4 00:00:02 2025 by rpki-client