Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/249BA23C364D11F0AECC3986C4F9AE02.roa
File:                     249BA23C364D11F0AECC3986C4F9AE02.roa (raw, json)
Hash identifier:          4/mG+lweyXgrZC5mzJqWhB3/c7ZZHmvm4qvTx8E454E=
Subject key identifier:   09:DC:9B:33:A0:A1:DA:57:B1:3B:31:83:5E:0F:96:1A:42:8F:37:7B
Certificate issuer:       /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial:       033E
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/249BA23C364D11F0AECC3986C4F9AE02.roa
Signing time:             Wed 21 May 2025 14:09:00 +0000
ROA not before:           Wed 21 May 2025 14:09:00 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     132742
IP address blocks:        103.63.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
                          rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830 (0x33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
        Validity
            Not Before: May 21 14:09:00 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=682dde7c-f742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:c6:8a:9f:0c:ee:68:91:75:d7:92:4f:63:
                    e4:18:7c:4a:90:22:dc:eb:d4:d7:39:1a:11:b3:48:
                    51:47:d6:35:ce:c4:6e:6b:53:ab:1e:27:d8:0b:6d:
                    a7:e9:92:c9:c5:b2:23:98:bf:2f:cc:f5:e5:78:38:
                    d5:62:8d:9f:c2:27:53:21:82:f7:ed:e7:72:a4:86:
                    57:85:84:88:80:7d:9c:1e:a3:66:3b:a3:30:0e:08:
                    58:3b:c0:06:75:c9:c0:ff:f0:ca:30:c1:d4:24:0d:
                    68:ae:b5:ec:8a:07:48:37:7b:d2:ad:51:c0:3e:c2:
                    b6:25:c8:35:31:9d:df:7f:26:aa:57:81:40:40:c6:
                    fe:e1:ee:c4:79:9b:55:17:97:b3:19:5b:3f:d7:77:
                    4a:e0:98:d3:a1:46:13:00:0d:40:ca:9a:6e:e8:75:
                    ad:36:1a:2f:88:81:93:b2:20:03:e6:14:d9:4b:9c:
                    07:f4:50:6d:85:00:75:bc:40:96:a0:3f:89:11:b6:
                    d6:ca:72:2e:61:88:62:7a:fd:fd:2f:ed:ca:93:2e:
                    ba:7a:8e:7d:e4:af:e5:0c:51:71:78:77:e8:2b:40:
                    80:c8:cc:5b:94:93:58:f5:59:a1:81:79:a1:8a:96:
                    e6:f3:83:ba:49:61:3b:ee:8c:41:df:40:96:6f:0b:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DC:9B:33:A0:A1:DA:57:B1:3B:31:83:5E:0F:96:1A:42:8F:37:7B
            X509v3 Authority Key Identifier:
                keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/249BA23C364D11F0AECC3986C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:ae:a7:18:30:e3:8a:c4:d7:82:c5:0c:1a:ec:bd:be:db:
         4a:90:95:23:4b:0f:bd:27:ff:47:6e:aa:0b:d9:fe:1b:b4:51:
         50:07:44:df:37:91:07:5e:33:79:f0:1c:79:38:bb:ac:6b:d3:
         c0:7d:ba:a7:47:2a:8a:6d:d5:7a:a2:b8:d1:b9:fe:e7:bd:05:
         c3:e8:f2:c7:fe:a8:02:1e:88:b7:f5:f7:bd:8a:07:54:17:cb:
         4e:42:0a:ad:83:9c:44:4f:64:13:4c:ab:1d:58:9f:d6:d3:b5:
         96:2b:87:1c:59:d4:e6:b5:b0:23:5f:5e:6e:d5:80:b1:49:b9:
         ff:16:0e:05:c5:d5:68:35:2c:85:77:fd:da:48:21:56:72:5c:
         c0:d0:52:6b:35:3a:04:1e:47:22:28:e3:94:a3:83:e9:cd:a1:
         cf:c5:7b:c4:1d:07:dc:64:42:07:a8:9f:d1:ab:ec:1e:2f:e5:
         b5:ff:d3:33:ff:2d:4c:f6:25:8d:a3:c5:62:ab:dc:b3:a3:4d:
         ea:ad:83:03:d7:b5:5f:40:0f:7d:6d:45:3a:82:09:f9:6f:97:
         d7:f8:a8:da:6d:32:de:74:83:88:45:0c:b1:d9:f5:47:bd:63:
         0f:d3:da:9b:80:47:23:a5:4c:72:08:16:6a:1f:4a:de:6e:08:
         80:c3:2f:79
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB
NUNDNzcyQzAwHhcNMjUwNTIxMTQwOTAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJkZGU3Yy1mNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbTGip8M7miRddeST2PkGHxKkCLc69TXORoRs0hRR9Y1zsRua1OrHifYC22n
6ZLJxbIjmL8vzPXleDjVYo2fwidTIYL37edypIZXhYSIgH2cHqNmO6MwDghYO8AG
dcnA//DKMMHUJA1orrXsigdIN3vSrVHAPsK2Jcg1MZ3ffyaqV4FAQMb+4e7EeZtV
F5ezGVs/13dK4JjToUYTAA1Ayppu6HWtNhoviIGTsiAD5hTZS5wH9FBthQB1vECW
oD+JEbbWynIuYYhiev39L+3Kky66eo595K/lDFFxeHfoK0CAyMxblJNY9VmhgXmh
ipbm84O6SWE77oxB30CWbwvaSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAncmzOg
odpXsTsxg14PlhpCjzd7MB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2
MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTFFMDgvOUVDNjMxRUNDNjA5MTFFQ0I0NjBFQzU3QzRGOUFFMDIvMjQ5QkEyM0Mz
NjREMTFGMEFFQ0MzOTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnPwQwDQYJKoZIhvcNAQELBQADggEBAFDcrqcYMOOKxNeC
xQwa7L2+20qQlSNLD70n/0duqgvZ/hu0UVAHRN83kQdeM3nwHHk4u6xr08B9uqdH
Kopt1XqiuNG5/ue9BcPo8sf+qAIeiLf1972KB1QXy05CCq2DnERPZBNMqx1Yn9bT
tZYrhxxZ1Oa1sCNfXm7VgLFJuf8WDgXF1Wg1LIV3/dpIIVZyXMDQUms1OgQeRyIo
45Sjg+nNoc/Fe8QdB9xkQgeon9Gr7B4v5bX/0zP/LUz2JY2jxWKr3LOjTeqtgwPX
tV9AD31tRTqCCflvl9f4qNptMt50g4hFDLHZ9Ue9Yw/T2puARyOlTHIIFmofSt5u
CIDDL3k=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:22:19 2025 by rpki-client