Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
File:                     74D88B52FF6511EB95D39078C4F9AE02.roa (raw, json)
Hash identifier:          CXE6fUMqll/lf0w/Ba+vnDTzs/7KktNMTcHauEAgToY=
Subject key identifier:   F0:3D:DB:98:88:69:9F:A4:23:65:15:BE:B4:5B:8C:C3:54:34:89:2A
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       1528
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 17:06:14 +0000
ROA not before:           Tue 02 Sep 2025 17:06:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142437
IP address blocks:        203.159.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5416 (0x1528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Sep  2 17:06:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b72406-e4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:c0:97:89:f8:05:31:aa:33:dd:2d:80:85:
                    7d:21:d3:8c:8a:d1:1e:69:f3:94:12:46:7e:84:78:
                    59:3e:59:78:6e:b3:7b:0a:de:31:63:4a:b7:ed:e1:
                    c9:6e:bc:a6:dc:b2:c1:ae:99:9c:db:0c:b3:23:e8:
                    83:73:4e:5c:9c:bf:83:df:ef:5c:fd:95:72:e7:f1:
                    d4:9f:57:dd:73:5b:b5:f4:0a:b9:08:f7:3c:ec:10:
                    af:99:21:1d:a8:1d:1e:2e:aa:e5:4e:e7:a8:4b:48:
                    50:f3:a3:cd:96:0f:04:74:3a:b8:38:2a:bb:59:f4:
                    0f:e0:8d:e4:db:a2:a0:c6:af:70:77:69:88:26:8e:
                    71:ea:97:54:16:21:2b:87:2f:2f:16:d5:ff:33:8e:
                    0b:37:a6:8e:2a:91:dc:e2:89:b7:4d:eb:74:00:44:
                    87:c8:0d:b0:bf:21:16:51:2a:35:6f:29:c9:01:04:
                    45:c8:75:3e:b6:da:95:96:9f:37:2e:2e:5a:e0:3a:
                    69:1a:7c:70:65:ea:d8:df:a7:ab:1f:5f:4c:30:90:
                    f8:97:e5:80:42:0a:4f:60:e0:00:25:15:9a:2f:10:
                    53:83:c3:20:3e:73:0a:6b:50:f0:31:f8:55:16:c3:
                    19:04:80:ab:cd:3b:09:b0:d4:52:f1:4e:2e:59:58:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3D:DB:98:88:69:9F:A4:23:65:15:BE:B4:5B:8C:C3:54:34:89:2A
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:88:8f:f0:f3:d4:3a:34:50:35:b1:40:bf:05:a4:e6:79:56:
         6f:bf:5b:04:f7:20:03:65:db:d8:77:07:18:d4:65:30:66:2f:
         7a:1c:f6:ca:62:0a:4b:c1:93:3c:e7:d5:c6:52:79:ec:a8:7c:
         20:a3:fe:d6:5f:a9:f9:6b:ef:59:f5:9a:20:0a:db:5f:9b:93:
         b1:79:f3:5f:12:de:bb:7a:6c:f9:69:ed:49:7e:c7:19:32:ef:
         35:28:e9:25:bb:73:b6:a5:16:17:1d:15:ea:b4:e1:e2:b1:5a:
         b4:f8:e9:f6:b0:39:3f:dd:37:1e:91:4e:dd:62:de:5f:fb:67:
         11:e6:77:97:f3:07:d6:ba:a8:15:d3:9f:cf:5f:81:cf:f0:01:
         7c:cc:e1:dd:74:9e:04:a4:b3:cf:66:94:91:61:8a:f5:f2:53:
         3d:8f:0f:a1:3a:56:6e:fa:a9:67:09:d5:00:2f:59:eb:67:c1:
         eb:3b:db:45:03:c5:8f:ce:33:46:d4:7f:80:49:07:5b:c4:ed:
         e7:5f:48:2e:5c:95:62:ca:b8:28:0e:3e:46:af:95:f7:80:9f:
         67:94:29:89:1c:92:be:e5:e5:20:e6:c3:88:d2:3b:c7:29:ca:
         e4:15:73:31:e6:3d:f8:a2:61:bc:23:b4:b5:19:3e:f9:e2:b1:
         2e:dd:f6:74
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2
MTE5QzM0QTYwHhcNMjUwOTAyMTcwNjE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3MjQwNi1lNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0m3Al4n4BTGqM90tgIV9IdOMitEeafOUEkZ+hHhZPll4brN7Ct4xY0q37eHJ
brym3LLBrpmc2wyzI+iDc05cnL+D3+9c/ZVy5/HUn1fdc1u19Aq5CPc87BCvmSEd
qB0eLqrlTueoS0hQ86PNlg8EdDq4OCq7WfQP4I3k26Kgxq9wd2mIJo5x6pdUFiEr
hy8vFtX/M44LN6aOKpHc4om3Tet0AESHyA2wvyEWUSo1bynJAQRFyHU+ttqVlp83
Li5a4DppGnxwZerY36erH19MMJD4l+WAQgpPYOAAJRWaLxBTg8MgPnMKa1DwMfhV
FsMZBICrzTsJsNRS8U4uWVjr7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPA925iI
aZ+kI2UVvrRbjMNUNIkqMB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB
NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTA4NDUvREM3MTAwRUE1QTU1MTFFOEJFM0UwQjY4QzRGOUFFMDIvNzREODhCNTJG
RjY1MTFFQjk1RDM5MDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLn0AwDQYJKoZIhvcNAQELBQADggEBAIGIj/Dz1Do0UDWx
QL8FpOZ5Vm+/WwT3IANl29h3BxjUZTBmL3oc9spiCkvBkzzn1cZSeeyofCCj/tZf
qflr71n1miAK21+bk7F5818S3rt6bPlp7Ul+xxky7zUo6SW7c7alFhcdFeq04eKx
WrT46fawOT/dNx6RTt1i3l/7ZxHmd5fzB9a6qBXTn89fgc/wAXzM4d10ngSks89m
lJFhivXyUz2PD6E6Vm76qWcJ1QAvWetnwes720UDxY/OM0bUf4BJB1vE7edfSC5c
lWLKuCgOPkavlfeAn2eUKYkckr7l5SDmw4jSO8cpyuQVczHmPfiiYbwjtLUZPvni
sS7d9nQ=
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:15:12 2025 by rpki-client