Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/0FA62A50214011EA90EFFE63C4F9AE02.roa
File:                     0FA62A50214011EA90EFFE63C4F9AE02.roa (raw, json)
Hash identifier:          ea5pQ154Qvp0SJ7Us+DBRZX79LxrjMjlZoLuAw0uaMY=
Subject key identifier:   35:FF:02:E1:5C:79:EC:F6:83:5D:5A:43:8B:93:52:7E:A9:5D:B7:53
Certificate issuer:       /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial:       0D9C
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/0FA62A50214011EA90EFFE63C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 18:07:07 +0000
ROA not before:           Tue 04 Nov 2025 18:07:07 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136972
IP address blocks:        103.100.224.0/22 maxlen: 24
                          2401:c3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
                          rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Nov 2025 17:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3484 (0xd9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
        Validity
            Not Before: Nov  4 18:07:07 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690a40cb-1016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:06:60:63:10:b3:a1:8e:df:ec:82:41:93:
                    50:1b:f6:ee:b7:cf:c9:cf:a9:ae:57:86:2c:c5:77:
                    b3:1a:90:2c:a6:f1:c3:8c:ed:de:06:7d:3b:71:c6:
                    e7:9b:f7:54:0e:dc:6a:18:0a:10:5b:a1:b3:5d:ff:
                    ae:9d:c9:a6:0f:5e:b0:4e:5d:73:df:d6:36:a1:f6:
                    d1:e3:28:57:3f:e2:57:88:e5:3a:96:de:5b:89:62:
                    42:61:90:c7:d8:92:3d:23:b0:39:05:e8:b0:de:fa:
                    8e:42:32:86:e8:a9:bd:9f:8f:8e:3b:2f:0c:bf:2e:
                    25:17:1d:89:5c:a0:69:fa:ea:04:6b:1f:19:1e:1f:
                    4e:33:98:de:f7:ef:3a:41:42:2f:b4:3f:09:2b:75:
                    a8:67:ff:cf:96:89:5e:38:21:79:1b:90:90:c4:ac:
                    6b:88:73:f9:fe:9e:8d:f4:29:09:42:9d:a0:53:2e:
                    5f:72:d1:9d:c4:80:12:b3:87:99:87:17:6d:33:84:
                    9e:aa:e4:a6:1d:78:4a:5b:60:ec:3e:40:23:15:e1:
                    39:f1:fa:db:d5:e3:f9:c8:34:0b:91:b9:0c:46:81:
                    dc:be:ac:b7:c7:56:88:19:c5:bf:96:8f:e0:d6:2c:
                    d4:a8:90:35:db:d6:89:d7:e7:32:a7:ac:9b:37:e8:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FF:02:E1:5C:79:EC:F6:83:5D:5A:43:8B:93:52:7E:A9:5D:B7:53
            X509v3 Authority Key Identifier:
                keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/0FA62A50214011EA90EFFE63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.224.0/22
                IPv6:
                  2401:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:6f:dc:b6:88:3b:21:e7:df:69:bc:14:ed:b1:74:f7:49:
         7e:65:a9:3b:c6:fb:86:b4:b5:01:65:61:11:7d:fb:8f:1a:69:
         2c:e7:53:6b:49:94:0d:73:8a:97:35:e1:90:b6:37:33:56:91:
         51:14:20:47:b4:38:00:d3:9f:cf:51:df:b2:e2:e7:68:1e:80:
         32:04:6e:6d:81:dd:ad:08:24:e4:48:39:22:72:23:a2:57:c5:
         2a:28:40:ba:b4:c0:99:2b:8a:12:99:f4:84:79:08:55:09:d1:
         fb:e5:86:45:02:3b:93:8b:99:ac:e5:8a:ca:da:52:1d:2f:8b:
         8c:a0:71:11:b9:e0:9b:3a:28:53:07:88:4d:68:6e:29:38:f9:
         89:48:a6:aa:96:3c:cb:80:ab:9d:3b:01:66:d6:4b:b7:99:ca:
         b9:c8:0b:24:57:db:e8:f7:a6:a3:2f:03:28:c7:f5:8e:91:16:
         31:31:9e:3a:dd:f7:8c:79:b9:71:41:2b:6e:8e:75:21:4a:e6:
         a7:1d:b0:b2:9c:fd:1a:df:33:84:ae:26:b0:cf:8f:04:7f:fb:
         c3:c2:31:57:9f:7e:1e:84:59:a5:e4:dc:1c:c0:c3:ba:92:4f:
         c6:63:cc:e4:c3:df:05:6f:f2:0a:3e:fd:f1:fe:0e:18:b9:72:
         3e:40:22:9b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2
MkZDODFGQkQwHhcNMjUxMTA0MTgwNzA3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhNDBjYi0xMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnnEGYGMQs6GO3+yCQZNQG/but8/Jz6muV4YsxXezGpAspvHDjO3eBn07ccbn
m/dUDtxqGAoQW6GzXf+uncmmD16wTl1z39Y2ofbR4yhXP+JXiOU6lt5biWJCYZDH
2JI9I7A5Beiw3vqOQjKG6Km9n4+OOy8Mvy4lFx2JXKBp+uoEax8ZHh9OM5je9+86
QUIvtD8JK3WoZ//PloleOCF5G5CQxKxriHP5/p6N9CkJQp2gUy5fctGdxIASs4eZ
hxdtM4SequSmHXhKW2DsPkAjFeE58frb1eP5yDQLkbkMRoHcvqy3x1aIGcW/lo/g
1izUqJA129aJ1+cyp6ybN+h5lQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDX/AuFc
eez2g11aQ4uTUn6pXbdTMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0
NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk2MjQvM0Q0QTVBODRENDREMTFFOUEzODNBMzVCQzRGOUFFMDIvMEZBNjJBNTAy
MTQwMTFFQTkwRUZGRTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnZOAwDQQCAAIwBwMFACQBw8AwDQYJKoZIhvcNAQELBQAD
ggEBAIQbb9y2iDsh599pvBTtsXT3SX5lqTvG+4a0tQFlYRF9+48aaSznU2tJlA1z
ipc14ZC2NzNWkVEUIEe0OADTn89R37Li52gegDIEbm2B3a0IJORIOSJyI6JXxSoo
QLq0wJkrihKZ9IR5CFUJ0fvlhkUCO5OLmazlisraUh0vi4ygcRG54Js6KFMHiE1o
bik4+YlIpqqWPMuAq507AWbWS7eZyrnICyRX2+j3pqMvAyjH9Y6RFjExnjrd94x5
uXFBK26OdSFK5qcdsLKc/RrfM4SuJrDPjwR/+8PCMVeffh6EWaXk3BzAw7qST8Zj
zOTD3wVv8go+/fH+Dhi5cj5AIps=
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:26:59 2025 by rpki-client