Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/3366A64616EE11F092BB8D27C4F9AE02.roa
File:                     3366A64616EE11F092BB8D27C4F9AE02.roa (raw, json)
Hash identifier:          BqVy/ukdl/6/b56EtxQ8tAIR6Cjii/d5BEoVe0J+mjI=
Subject key identifier:   07:71:D1:71:43:CF:CA:34:B1:A4:15:04:51:21:77:B1:EC:47:75:62
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       020A
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/3366A64616EE11F092BB8D27C4F9AE02.roa
Signing time:             Fri 11 Apr 2025 16:01:17 +0000
ROA not before:           Fri 11 Apr 2025 16:01:17 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     58682
IP address blocks:        103.7.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Apr 11 16:01:17 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67f93ccd-3320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:44:f7:b9:e4:ad:5a:75:09:bf:81:38:20:
                    ab:b6:a5:d6:38:46:07:37:14:34:08:b3:de:74:fe:
                    54:98:54:c1:df:ff:92:53:bc:78:a7:23:e2:45:fc:
                    d8:e1:32:64:92:4c:ae:7e:62:78:9a:fe:ce:53:1c:
                    5f:ee:4a:7b:23:50:15:d1:96:c0:17:1e:70:18:e3:
                    09:4d:c3:cf:47:6a:65:93:bd:7e:78:d6:85:ae:e6:
                    3e:a3:e9:27:89:eb:ce:e4:e9:49:92:74:12:e4:7e:
                    9c:c8:13:2f:9d:06:42:2c:70:77:e3:bb:41:2d:2f:
                    b8:f4:e9:6f:29:da:f4:78:cf:4e:99:ad:52:ee:ed:
                    92:7b:3e:32:5a:b9:fa:42:f4:19:c0:c2:5b:4c:04:
                    d1:e8:e5:61:07:65:b1:fb:a4:6a:43:64:45:ce:b1:
                    b6:2a:57:df:29:61:c4:07:fd:11:b7:04:80:23:fc:
                    fd:c5:70:19:76:c5:18:67:70:ed:a2:a8:50:ee:66:
                    50:f4:25:e0:1d:7b:3d:06:e1:56:44:f1:3f:3b:ab:
                    9a:b0:00:37:05:a6:f5:2a:54:24:f7:a8:57:87:ee:
                    ff:0b:62:c2:66:52:21:92:63:fd:34:9e:d5:12:62:
                    e2:1a:e8:c6:31:6d:48:90:a8:ed:48:30:46:b9:c5:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:D1:71:43:CF:CA:34:B1:A4:15:04:51:21:77:B1:EC:47:75:62
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/3366A64616EE11F092BB8D27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:70:22:6f:50:8f:fa:79:35:55:63:2f:b7:d3:f6:71:5a:
         cb:37:37:99:86:ee:7e:74:80:23:40:ff:80:9c:c7:10:0c:39:
         12:c2:b1:a5:78:bd:ba:dd:98:36:a4:07:f2:38:7f:61:03:93:
         a3:e1:92:0d:7c:20:6c:46:55:40:74:56:5a:cf:5e:df:ca:72:
         64:1b:a7:4b:98:e0:dd:fd:e0:1b:1c:00:ca:87:0b:62:a0:00:
         eb:0d:1d:b8:6e:4e:45:c5:b2:66:81:2e:05:17:7c:a3:4a:ae:
         27:a5:20:9a:f5:bb:54:06:1e:89:65:f5:51:74:3a:da:73:7a:
         20:45:0a:56:32:af:23:38:35:7f:3e:0f:08:79:a8:dc:52:b1:
         80:7b:b9:d5:e3:b8:aa:6d:38:db:bb:6a:aa:14:bc:ae:0b:75:
         9b:9d:66:ae:e1:fa:86:20:70:28:f2:b0:dd:b4:b6:3d:bf:31:
         ad:e4:da:9a:6e:6e:ea:42:56:42:ff:13:34:d8:de:77:72:5a:
         54:ae:f6:41:9a:2e:20:37:1e:28:43:5e:9e:2a:e8:00:e6:0d:
         68:26:3b:3f:27:91:de:a2:3f:99:bb:d1:29:e7:ee:21:ad:8b:
         e5:04:34:e8:94:71:bb:04:73:a3:b9:59:4a:62:5f:72:b8:5b:
         5c:4a:64:39
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy
OUNDNzZCNjUwHhcNMjUwNDExMTYwMTE3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y5M2NjZC0zMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNJE97nkrVp1Cb+BOCCrtqXWOEYHNxQ0CLPedP5UmFTB3/+SU7x4pyPiRfzY
4TJkkkyufmJ4mv7OUxxf7kp7I1AV0ZbAFx5wGOMJTcPPR2plk71+eNaFruY+o+kn
ievO5OlJknQS5H6cyBMvnQZCLHB347tBLS+49OlvKdr0eM9Oma1S7u2Sez4yWrn6
QvQZwMJbTATR6OVhB2Wx+6RqQ2RFzrG2KlffKWHEB/0RtwSAI/z9xXAZdsUYZ3Dt
oqhQ7mZQ9CXgHXs9BuFWRPE/O6uasAA3Bab1KlQk96hXh+7/C2LCZlIhkmP9NJ7V
EmLiGujGMW1IkKjtSDBGucUNkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAdx0XFD
z8o0saQVBFEhd7HsR3ViMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4
M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcxNDIvOTY2MTg1QkEzODNDMTFFREIwOUYwMjE0QzRGOUFFMDIvMzM2NkE2NDYx
NkVFMTFGMDkyQkI4RDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnB3swDQYJKoZIhvcNAQELBQADggEBAHTccCJvUI/6eTVV
Yy+30/ZxWss3N5mG7n50gCNA/4CcxxAMORLCsaV4vbrdmDakB/I4f2EDk6Phkg18
IGxGVUB0VlrPXt/KcmQbp0uY4N394BscAMqHC2KgAOsNHbhuTkXFsmaBLgUXfKNK
rielIJr1u1QGHoll9VF0OtpzeiBFClYyryM4NX8+Dwh5qNxSsYB7udXjuKptONu7
aqoUvK4LdZudZq7h+oYgcCjysN20tj2/Ma3k2ppubupCVkL/EzTY3ndyWlSu9kGa
LiA3HihDXp4q6ADmDWgmOz8nkd6iP5m70Snn7iGti+UENOiUcbsEc6O5WUpiX3K4
W1xKZDk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:45 2025 by rpki-client