Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
File:                     CD34C770739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          rPDc7wA9YBNlcWlKBr0IYLRQFab23zFVZPlqITK1zkE=
Subject key identifier:   6D:8F:38:13:73:8A:B5:AE:59:69:02:08:62:53:48:CC:C9:6F:10:73
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0152
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 05:42:48 +0000
ROA not before:           Fri 01 Aug 2025 05:42:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45447
IP address blocks:        103.22.144.0/22 maxlen: 22
                          2401:3900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug  1 05:42:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688c53d8-93b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:39:a9:bc:8a:a6:28:82:17:d6:7e:d3:57:
                    05:c8:49:a9:4e:76:a0:67:c4:ba:28:47:2c:84:cb:
                    d9:68:6e:7f:a7:58:5c:72:32:5c:f8:2b:63:5d:73:
                    a2:6c:e1:88:b7:3f:3c:01:6f:42:80:32:4d:39:79:
                    19:16:79:0d:03:42:49:de:5a:48:83:cc:2e:be:e7:
                    3a:81:fc:84:9f:d3:a2:96:cd:4b:66:19:05:43:0b:
                    50:c4:57:b3:2a:3e:97:7a:1b:ef:43:69:de:9d:6f:
                    5b:b5:9f:c6:10:b0:10:46:47:86:fb:07:da:51:92:
                    b2:8d:af:74:f4:4d:be:ec:cf:2b:82:a7:75:fe:6e:
                    b0:dd:41:03:e8:eb:cb:00:f6:f2:a9:50:73:7b:df:
                    6c:78:a6:83:7d:d6:b5:4a:b4:66:b7:b6:3e:18:6f:
                    72:ac:9f:ac:e0:40:1a:b0:56:ae:30:f1:23:93:23:
                    1b:ea:30:df:0f:5a:f7:6f:b5:a1:29:56:8d:6a:87:
                    68:43:3e:02:14:c4:62:7e:f3:fb:3d:79:25:bd:ad:
                    22:9e:77:1a:d2:73:8f:99:14:ae:3d:d6:90:0e:e0:
                    66:ad:85:55:40:68:e3:56:e9:40:15:f7:ca:a2:e0:
                    a2:4b:4e:38:58:f3:d7:77:35:88:21:cc:ab:37:14:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:38:13:73:8A:B5:AE:59:69:02:08:62:53:48:CC:C9:6F:10:73
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.144.0/22
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:35:43:a4:da:d2:d5:1d:18:b7:f4:26:e3:d8:11:b4:4e:47:
         04:db:83:07:76:a9:e3:7f:6c:50:0d:f7:ae:d2:16:ed:e4:e0:
         94:ae:40:62:f4:2b:97:c6:d7:6d:1d:fe:16:7b:4e:df:45:89:
         a5:4d:ef:8a:9e:da:a1:75:a2:bf:21:e9:c4:bd:8e:8b:10:8f:
         14:7e:1d:b4:51:81:b9:7b:34:42:eb:23:53:78:ea:34:57:c7:
         ef:bd:ab:3f:3b:8e:6f:3b:82:60:1f:05:3f:e6:55:7e:0c:45:
         39:d6:5a:17:19:4a:d5:e9:ff:38:54:64:04:4b:ce:0f:1f:a4:
         1b:ec:53:33:32:7e:f6:59:59:b6:4d:ad:6b:73:e2:0a:23:ce:
         a2:1e:cf:e5:f4:bd:92:c9:37:e4:e5:b8:7c:4e:0f:7d:da:8e:
         20:58:e6:3d:cb:5f:d5:6e:2a:68:6d:4b:38:3a:f6:5f:e3:2b:
         b9:8a:87:af:f0:e8:dc:70:a2:f1:b0:fa:b8:6f:52:75:16:13:
         f6:11:4d:17:01:54:a9:61:b1:64:53:c6:5d:c0:70:39:70:6f:
         7a:93:c4:e9:51:1f:d0:ee:8e:fd:20:ef:0b:60:f7:e5:4e:9f:
         1c:2a:a6:b5:1b:20:65:9e:66:16:3a:68:1d:d8:7c:7a:07:ad:
         1c:8b:3b:0c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OTYxMTAvBgNVBAUTKDYyODNCRTlCMzFEMjkwMzZCOTY3QkZGN0I3RTcxQkFE
RDUyOUE2NEUwHhcNMjUwODAxMDU0MjQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjNTNkOC05M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzME5qbyKpiiCF9Z+01cFyEmpTnagZ8S6KEcshMvZaG5/p1hccjJc+CtjXXOi
bOGItz88AW9CgDJNOXkZFnkNA0JJ3lpIg8wuvuc6gfyEn9Oils1LZhkFQwtQxFez
Kj6XehvvQ2nenW9btZ/GELAQRkeG+wfaUZKyja909E2+7M8rgqd1/m6w3UED6OvL
APbyqVBze99seKaDfda1SrRmt7Y+GG9yrJ+s4EAasFauMPEjkyMb6jDfD1r3b7Wh
KVaNaodoQz4CFMRifvP7PXklva0innca0nOPmRSuPdaQDuBmrYVVQGjjVulAFffK
ouCiS044WPPXdzWIIcyrNxQXOQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFG2POBNz
irWuWWkCCGJTSMzJbxBzMB8GA1UdIwQYMBaAFGKDvpsx0pA2uWe/97fnG63VKaZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk5Ni8xMjMxRkM2ODcz
OTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tEYTVaN18zdC1jYnJkVXBw
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvTy1tekhTa0RhNVo3XzN0LWNicmRVcHBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OTYvMTIzMUZDNjg3Mzk0MTFFRUExNzAzODREQzRGOUFFMDIvQ0QzNEM3NzA3
Mzk0MTFFRUI4QkFFODU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnFpAwDQQCAAIwBwMFACQBOQAwDQYJKoZIhvcNAQELBQAD
ggEBAGM1Q6Ta0tUdGLf0JuPYEbRORwTbgwd2qeN/bFAN967SFu3k4JSuQGL0K5fG
120d/hZ7Tt9FiaVN74qe2qF1or8h6cS9josQjxR+HbRRgbl7NELrI1N46jRXx++9
qz87jm87gmAfBT/mVX4MRTnWWhcZStXp/zhUZARLzg8fpBvsUzMyfvZZWbZNrWtz
4gojzqIez+X0vZLJN+TluHxOD33ajiBY5j3LX9VuKmhtSzg69l/jK7mKh6/w6Nxw
ovGw+rhvUnUWE/YRTRcBVKlhsWRTxl3AcDlwb3qTxOlRH9Dujv0g7wtg9+VOnxwq
prUbIGWeZhY6aB3YfHoHrRyLOww=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:58 2025 by rpki-client