Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/683CDAD0B4C411EE8F1E5D85C4F9AE02.roa
File:                     683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (raw, json)
Hash identifier:          r4yk1oLOO3dNlgYTUiXUyb073QjawtmJqJmMeRzkclU=
Subject key identifier:   41:9C:3E:62:DA:E0:08:7B:0B:FE:43:A5:26:19:B7:97:32:2F:B5:E1
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       0773
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/683CDAD0B4C411EE8F1E5D85C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 22:11:46 +0000
ROA not before:           Tue 04 Nov 2025 22:11:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     6206
IP address blocks:        103.101.0.0/22 maxlen: 24
                          2401:c740::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
                          rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Nov  4 22:11:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690a7a22-e383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cd:80:95:02:0b:06:fe:98:7d:e9:a7:66:ad:
                    a0:b2:6a:9e:57:cc:49:58:61:83:1d:63:e3:c7:ae:
                    da:ec:3c:5f:82:d4:78:ad:72:7a:d7:c6:3b:9d:df:
                    3d:40:cd:54:9b:87:84:a8:15:3a:6c:33:76:7d:fe:
                    24:0b:d4:03:ca:2e:7f:c1:4e:5a:1a:d4:59:ef:cc:
                    a1:e9:cf:dc:60:76:ed:3a:6e:7c:87:c6:91:1c:19:
                    02:3b:a5:bb:99:a4:95:74:46:b9:47:dc:c7:b6:02:
                    4c:2b:3b:d6:c2:4a:56:50:a4:34:76:ca:df:c1:45:
                    3c:2d:c0:73:c4:2d:f0:d8:83:09:d3:77:26:16:cf:
                    40:4c:4c:3c:bb:3c:c2:f4:df:c7:f1:46:e9:13:c6:
                    ce:4b:cb:60:82:fb:70:3e:cb:67:d3:fd:c5:ec:12:
                    02:e9:d8:8f:f0:be:3f:2c:d9:73:6e:5b:9a:49:50:
                    2a:aa:37:60:58:18:2f:40:20:df:14:51:66:9b:36:
                    59:34:fc:2b:95:6d:b5:e7:01:e1:0b:dc:f3:be:d5:
                    7f:31:1a:28:35:66:5e:06:a5:a4:4c:38:54:86:8b:
                    b0:fb:7b:64:b7:d4:92:1d:5d:f1:ce:4b:a4:4a:09:
                    de:5c:a8:22:81:b0:79:0a:52:c1:c1:7f:da:18:cc:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:3E:62:DA:E0:08:7B:0B:FE:43:A5:26:19:B7:97:32:2F:B5:E1
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/683CDAD0B4C411EE8F1E5D85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.0.0/22
                IPv6:
                  2401:c740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:08:c8:00:e9:1b:68:c2:94:eb:1a:86:4d:0a:73:a2:cb:
         ed:c8:02:53:16:d8:05:85:33:97:99:14:7b:12:87:49:e6:60:
         f7:14:73:a4:61:35:87:dd:57:71:7a:01:5a:6d:a1:45:b6:2c:
         77:62:35:f8:dd:f7:5f:3f:5d:b3:ef:c2:ba:60:f5:72:5c:c7:
         fe:57:62:ff:ce:9f:e9:96:73:45:85:d8:8f:33:1c:d8:3f:14:
         82:2c:ef:62:64:7e:52:49:5a:9a:0d:8b:58:5b:6b:15:0d:12:
         8e:a4:11:a1:ba:00:92:93:9c:5c:55:5f:38:cc:00:3a:e7:db:
         d9:4c:59:aa:df:6f:12:c4:12:3e:f7:95:25:15:84:b9:be:25:
         93:97:08:ce:c3:bb:3e:0e:34:82:76:6d:69:29:5c:6c:0b:b0:
         3d:52:61:d6:6e:00:9b:55:22:83:aa:1b:fa:bc:35:ce:30:38:
         f4:a1:f1:9e:6c:99:61:ed:fd:e6:46:5c:29:89:44:91:b6:96:
         59:1b:e0:ff:06:d2:48:15:7a:3d:b7:ac:00:f2:29:c8:79:e5:
         ba:fb:b9:db:ed:1f:92:5e:86:e1:01:39:cb:26:0b:16:f8:23:
         61:9d:58:5f:6b:b6:40:e8:e5:e0:b7:60:6e:51:e2:67:46:bd:
         80:a6:55:cf
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG
RTcwRDg5RDcwHhcNMjUxMTA0MjIxMTQ2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhN2EyMi1lMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA982AlQILBv6YfemnZq2gsmqeV8xJWGGDHWPjx67a7DxfgtR4rXJ618Y7nd89
QM1Um4eEqBU6bDN2ff4kC9QDyi5/wU5aGtRZ78yh6c/cYHbtOm58h8aRHBkCO6W7
maSVdEa5R9zHtgJMKzvWwkpWUKQ0dsrfwUU8LcBzxC3w2IMJ03cmFs9ATEw8uzzC
9N/H8UbpE8bOS8tggvtwPstn0/3F7BIC6diP8L4/LNlzbluaSVAqqjdgWBgvQCDf
FFFmmzZZNPwrlW215wHhC9zzvtV/MRooNWZeBqWkTDhUhouw+3tkt9SSHV3xzkuk
SgneXKgigbB5ClLBwX/aGMy0hQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEGcPmLa
4Ah7C/5DpSYZt5cyL7XhMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1
OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc3MzMvQUREQzNCM0U0NThEMTFFQkEzOUFDNzQwQzRGOUFFMDIvNjgzQ0RBRDBC
NEM0MTFFRThGMUU1RDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnZQAwDQQCAAIwBwMFACQBx0AwDQYJKoZIhvcNAQELBQAD
ggEBAE5hCMgA6RtowpTrGoZNCnOiy+3IAlMW2AWFM5eZFHsSh0nmYPcUc6RhNYfd
V3F6AVptoUW2LHdiNfjd918/XbPvwrpg9XJcx/5XYv/On+mWc0WF2I8zHNg/FIIs
72JkflJJWpoNi1hbaxUNEo6kEaG6AJKTnFxVXzjMADrn29lMWarfbxLEEj73lSUV
hLm+JZOXCM7Duz4ONIJ2bWkpXGwLsD1SYdZuAJtVIoOqG/q8Nc4wOPSh8Z5smWHt
/eZGXCmJRJG2llkb4P8G0kgVej23rADyKch55br7udvtH5JehuEBOcsmCxb4I2Gd
WF9rtkDo5eC3YG5R4mdGvYCmVc8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:29 2025 by rpki-client