Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa
File:                     823433125F0C11EC8C2C2820C4F9AE02.roa (raw, json)
Hash identifier:          iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=
Subject key identifier:   65:A9:A5:84:C5:45:BB:BC:6E:A2:14:08:A9:1E:34:A7:D5:0A:6C:94
Certificate issuer:       /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial:       0AD8
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa
Signing time:             Fri 06 Jun 2025 20:05:48 +0000
ROA not before:           Fri 06 Jun 2025 20:05:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.115.193.0/24 maxlen: 24
                          2001:de9:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
                          rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 19:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2776 (0xad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
        Validity
            Not Before: Jun  6 20:05:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68434a1c-8c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:de:aa:6c:c0:7e:53:96:a5:fd:8a:e7:35:
                    f6:ee:37:ac:ad:8c:65:46:58:9e:c3:8c:6b:47:82:
                    94:a4:ee:3c:0b:ff:26:17:0e:84:db:c8:5b:60:4c:
                    7b:0c:76:74:b0:ff:bd:f0:53:bb:46:c1:4d:d6:6e:
                    79:73:b5:55:18:58:9e:75:15:ac:63:42:19:f8:5b:
                    d5:83:70:55:af:37:8c:12:0f:a5:0d:ee:b0:ce:72:
                    97:07:ec:3a:60:af:bb:a4:c5:d4:cc:bb:07:48:31:
                    98:64:18:81:47:c9:9b:50:b0:a5:1c:54:06:01:c6:
                    a8:8f:ce:99:39:9e:fa:67:e9:b3:19:12:c9:59:c3:
                    f0:a9:e5:c4:29:6a:19:3d:c7:05:e1:15:a2:73:af:
                    c3:ff:f4:8c:ee:1b:a7:a9:74:64:c6:68:ad:b9:e3:
                    0d:e3:32:9f:a0:3e:fa:61:de:a6:76:c8:d3:9f:60:
                    97:1d:93:db:91:29:e7:60:f4:a5:47:c4:f5:e8:a9:
                    cd:02:84:a8:b8:21:0d:3a:b3:87:2c:75:f2:37:6a:
                    2a:fa:6e:42:ee:ab:e5:32:57:75:51:cf:15:a0:c4:
                    97:24:eb:4e:3e:ad:9c:eb:95:5f:87:52:f8:e2:a7:
                    b7:4c:a3:2a:f5:fd:47:1e:69:22:eb:14:2d:d5:b9:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A9:A5:84:C5:45:BB:BC:6E:A2:14:08:A9:1E:34:A7:D5:0A:6C:94
            X509v3 Authority Key Identifier:
                keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.193.0/24
                IPv6:
                  2001:de9:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:3b:0d:7d:36:ee:29:46:bb:90:b6:02:06:10:35:f5:ab:9b:
         7a:fa:c1:f1:d0:85:12:f0:65:d7:ce:2c:fc:85:5b:af:86:f7:
         4e:b2:7a:5e:2e:c6:be:27:70:85:c9:88:7c:22:12:98:4b:cd:
         40:a2:39:86:bd:3f:00:74:c4:76:65:5e:b6:35:c6:24:a5:a9:
         97:2c:a2:0f:92:25:8d:25:d0:de:a5:b1:f7:08:e0:9a:49:40:
         a0:a7:50:e2:79:80:70:b5:62:46:30:8b:00:1b:a7:89:48:6e:
         36:5f:cd:cb:2a:81:eb:0c:f9:e3:ce:38:7c:29:77:8f:cd:2c:
         64:88:d5:84:70:61:1b:1f:2b:97:27:81:b0:e7:ae:20:26:ec:
         68:e1:49:7c:66:8c:ff:65:7f:e4:11:2a:39:cc:73:88:9e:7b:
         a8:c3:a6:86:fc:57:c8:ea:48:e3:4b:88:68:f3:d9:51:28:93:
         63:d1:f9:ec:ac:e7:ef:cf:ba:26:f9:08:cf:e2:45:93:3d:26:
         d4:a1:6c:89:4c:a0:af:c1:a8:07:6d:4f:23:c7:c4:3c:19:18:
         d4:ef:2e:71:18:17:51:62:82:94:01:59:5d:f0:12:9a:e8:85:
         48:be:67:ae:78:1e:09:d4:75:57:49:ea:58:51:cc:e0:a8:20:
         df:f4:eb:cc
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE
N0Y3NjYwNTUwHhcNMjUwNjA2MjAwNTQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQzNGExYy04YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7TveqmzAflOWpf2K5zX27jesrYxlRliew4xrR4KUpO48C/8mFw6E28hbYEx7
DHZ0sP+98FO7RsFN1m55c7VVGFiedRWsY0IZ+FvVg3BVrzeMEg+lDe6wznKXB+w6
YK+7pMXUzLsHSDGYZBiBR8mbULClHFQGAcaoj86ZOZ76Z+mzGRLJWcPwqeXEKWoZ
PccF4RWic6/D//SM7hunqXRkxmitueMN4zKfoD76Yd6mdsjTn2CXHZPbkSnnYPSl
R8T16KnNAoSouCENOrOHLHXyN2oq+m5C7qvlMld1Uc8VoMSXJOtOPq2c65Vfh1L4
4qe3TKMq9f1HHmki6xQt1blYJwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGWppYTF
Rbu8bqIUCKkeNKfVCmyUMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx
MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ
RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTREMkUvMEZFMTlDNkM1MTFFMTFFQUI4MTgyNTgwQzRGOUFFMDIvODIzNDMzMTI1
RjBDMTFFQzhDMkMyODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnc8EwDwQCAAIwCQMHACABDelAADANBgkqhkiG9w0BAQsF
AAOCAQEAqDsNfTbuKUa7kLYCBhA19aubevrB8dCFEvBl184s/IVbr4b3TrJ6Xi7G
vidwhcmIfCISmEvNQKI5hr0/AHTEdmVetjXGJKWplyyiD5IljSXQ3qWx9wjgmklA
oKdQ4nmAcLViRjCLABuniUhuNl/NyyqB6wz54844fCl3j80sZIjVhHBhGx8rlyeB
sOeuICbsaOFJfGaM/2V/5BEqOcxziJ57qMOmhvxXyOpI40uIaPPZUSiTY9H57Kzn
78+6JvkIz+JFkz0m1KFsiUygr8GoB21PI8fEPBkY1O8ucRgXUWKClAFZXfASmuiF
SL5nrngeCdR1V0nqWFHM4Kgg3/TrzA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 18:19:04 2025 by rpki-client