Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/3366A64616EE11F092BB8D27C4F9AE02.roa
File:                     3366A64616EE11F092BB8D27C4F9AE02.roa (raw, json)
Hash identifier:          i++L18nKx2UpxwLaQvIAqwvjXRZa+Id5obrV0iiXRHE=
Subject key identifier:   6E:A4:8E:AD:DE:D2:82:AD:E2:B9:0F:05:06:31:71:EB:77:57:CA:5D
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       0245
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/3366A64616EE11F092BB8D27C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 02:39:04 +0000
ROA not before:           Thu 31 Jul 2025 02:39:04 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58682
IP address blocks:        103.7.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Jul 31 02:39:04 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688ad747-da9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:c8:dd:93:43:34:4c:50:ca:69:66:d1:43:
                    71:7a:0b:d9:8e:4f:5b:c7:14:97:5a:10:dd:09:da:
                    6e:78:69:17:80:5b:14:d0:c9:db:61:5b:74:50:19:
                    86:26:42:8e:61:38:ba:b3:1f:83:9b:a3:d4:b7:fb:
                    29:b6:7c:00:68:cf:70:b9:71:02:7f:b9:dd:8a:b5:
                    7a:22:78:d8:f7:37:8d:b8:e4:28:bb:05:23:d7:66:
                    e9:38:a6:2e:c4:db:c0:34:36:2d:8c:50:00:fe:be:
                    f7:e0:33:e1:ad:09:61:e6:ad:fa:a5:b0:35:76:ea:
                    8a:aa:ec:79:c1:bd:9a:2e:b2:5f:0d:31:5f:ef:ce:
                    96:b3:70:61:38:1a:76:eb:4f:ad:58:10:38:55:f5:
                    da:91:f8:b6:ec:a5:a6:b7:18:ba:10:38:33:25:30:
                    dd:53:30:3f:07:07:68:7f:e1:00:9b:40:bf:e8:37:
                    3f:25:53:94:b4:bf:dc:1d:12:12:5f:5f:45:0b:27:
                    76:71:9b:53:7a:24:27:65:94:11:ba:43:53:cf:47:
                    d4:c2:60:f6:72:06:5c:70:72:83:b6:1f:fb:4a:60:
                    bd:8f:9e:f6:10:a1:45:93:84:45:c3:16:a3:da:91:
                    1e:13:52:e0:17:24:8d:b0:35:27:ca:1c:bc:2f:83:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A4:8E:AD:DE:D2:82:AD:E2:B9:0F:05:06:31:71:EB:77:57:CA:5D
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/3366A64616EE11F092BB8D27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:ab:0d:aa:43:95:31:92:e3:0d:36:66:ef:bf:b4:a8:d4:
         d9:84:aa:8a:a5:fc:63:43:9a:d9:5f:af:3d:26:d4:42:ea:b6:
         0f:d7:1b:9a:b9:0e:5c:4a:5f:57:d1:af:ba:92:36:36:7b:df:
         e2:0a:77:f8:8e:93:35:00:23:b2:3c:53:0a:70:e0:c5:d2:c1:
         2e:17:97:50:11:aa:b7:13:1f:c7:7b:c9:12:48:0a:be:cf:31:
         10:3f:ff:8b:18:23:4a:f2:98:24:2e:ec:f8:ed:f3:eb:74:2b:
         fe:a4:53:80:21:b2:68:96:9a:6a:c9:88:b5:a2:09:53:a5:95:
         81:3d:62:62:a5:3b:62:fd:37:c0:17:57:6d:25:aa:c2:64:7a:
         9f:0b:6a:58:b4:c3:ab:42:ff:1e:11:ba:8e:c5:bf:3c:81:88:
         0a:c8:94:dd:a0:ec:cb:89:99:b6:85:cc:0b:5c:6d:37:0f:ab:
         9e:25:11:72:fd:50:7e:26:83:e1:67:71:55:77:24:86:61:cd:
         f7:cf:47:fb:c2:0f:a4:4d:7f:9a:6a:ff:e9:53:3a:6c:1c:64:
         e9:33:f9:74:6d:7b:e1:ba:4d:e8:85:3c:35:04:33:b8:b8:57:
         79:11:58:3a:f4:dc:82:50:14:7c:86:30:d9:3f:c6:60:43:97:
         91:ce:5c:bc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy
OUNDNzZCNjUwHhcNMjUwNzMxMDIzOTA0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhhZDc0Ny1kYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSbI3ZNDNExQymlm0UNxegvZjk9bxxSXWhDdCdpueGkXgFsU0MnbYVt0UBmG
JkKOYTi6sx+Dm6PUt/sptnwAaM9wuXECf7ndirV6InjY9zeNuOQouwUj12bpOKYu
xNvANDYtjFAA/r734DPhrQlh5q36pbA1duqKqux5wb2aLrJfDTFf786Ws3BhOBp2
60+tWBA4VfXakfi27KWmtxi6EDgzJTDdUzA/Bwdof+EAm0C/6Dc/JVOUtL/cHRIS
X19FCyd2cZtTeiQnZZQRukNTz0fUwmD2cgZccHKDth/7SmC9j572EKFFk4RFwxaj
2pEeE1LgFySNsDUnyhy8L4NEvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG6kjq3e
0oKt4rkPBQYxcet3V8pdMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4
M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcxNDIvOTY2MTg1QkEzODNDMTFFREIwOUYwMjE0QzRGOUFFMDIvMzM2NkE2NDYx
NkVFMTFGMDkyQkI4RDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnB3swDQYJKoZIhvcNAQELBQADggEBAJl+qw2qQ5UxkuMN
Nmbvv7So1NmEqoql/GNDmtlfrz0m1ELqtg/XG5q5DlxKX1fRr7qSNjZ73+IKd/iO
kzUAI7I8Uwpw4MXSwS4Xl1ARqrcTH8d7yRJICr7PMRA//4sYI0rymCQu7Pjt8+t0
K/6kU4AhsmiWmmrJiLWiCVOllYE9YmKlO2L9N8AXV20lqsJkep8Lali0w6tC/x4R
uo7FvzyBiArIlN2g7MuJmbaFzAtcbTcPq54lEXL9UH4mg+FncVV3JIZhzffPR/vC
D6RNf5pq/+lTOmwcZOkz+XRte+G6TeiFPDUEM7i4V3kRWDr03IJQFHyGMNk/xmBD
l5HOXLw=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:13 2025 by rpki-client