Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
File:                     F609B0309D5F11EE94076E6FC4F9AE02.roa (raw, json)
Hash identifier:          uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=
Subject key identifier:   8E:97:E4:7B:E7:C5:C4:58:62:81:AC:48:03:7C:C3:5C:6E:C5:E3:B9
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       D1
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
Signing time:             Fri 17 Jan 2025 04:17:25 +0000
ROA not before:           Fri 17 Jan 2025 04:17:25 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     59242
IP address blocks:        103.228.49.0/24 maxlen: 24
                          103.254.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Jan 17 04:17:25 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6789d9d5-f2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:e9:22:b1:77:1a:f5:5a:84:34:f8:dc:65:
                    9d:6f:79:d1:30:61:27:d2:07:e5:e7:51:17:7e:61:
                    9d:f8:c4:54:06:ae:b5:9d:eb:71:69:f9:44:f6:c9:
                    9c:2c:17:df:e9:d2:f9:9b:32:08:7d:ef:88:f8:c3:
                    0d:cd:f9:ff:00:ac:d5:26:8e:b3:61:76:36:2b:7c:
                    0f:f4:78:80:72:93:63:be:75:dd:db:95:b4:70:93:
                    ae:c6:ed:8a:b2:d6:17:a0:91:7b:09:b8:c6:7f:18:
                    70:70:e3:02:e9:a6:88:5e:81:b9:78:f9:5d:db:ab:
                    e1:e3:00:02:16:b1:ea:36:a3:23:c2:35:00:72:18:
                    0a:b2:04:b9:9e:bf:6e:26:b0:af:f4:32:b4:56:f9:
                    77:b2:44:2a:0f:8d:b1:fc:c5:aa:86:c4:04:79:cd:
                    6f:8a:34:02:18:4b:73:7f:52:e8:9f:5d:22:c4:1b:
                    40:4c:70:95:43:12:b3:37:33:8e:00:e7:92:f9:ea:
                    2d:82:35:1e:38:07:ab:62:b5:47:78:85:fb:23:38:
                    03:9c:1e:a8:79:6d:b4:01:64:02:e7:c1:c2:df:96:
                    01:16:a3:08:25:43:42:38:35:7a:9d:4b:ae:44:ea:
                    ec:6f:5c:b4:17:74:e7:b2:e5:34:66:5f:15:4a:00:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:E4:7B:E7:C5:C4:58:62:81:AC:48:03:7C:C3:5C:6E:C5:E3:B9
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.49.0/24
                  103.254.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:53:e0:59:a0:a6:fc:db:46:e1:8a:07:8e:44:a2:c4:20:8f:
         f2:03:8a:63:83:48:3d:9e:69:d4:26:cd:04:4a:00:41:24:5c:
         64:73:5d:aa:3b:dc:4c:80:ca:6d:be:a4:70:d5:71:af:1e:80:
         f1:48:cd:93:59:c7:34:9d:1e:5e:53:96:45:58:b3:fa:63:32:
         d2:11:2e:3b:cd:a7:0d:96:59:e9:02:ca:0b:33:ec:1a:dd:9f:
         5e:9e:c9:17:bc:05:05:0f:a8:40:59:fe:6f:5a:1e:4e:21:fc:
         c4:86:67:3a:62:58:c9:c1:b4:08:df:79:a9:1e:d0:2f:b2:a5:
         cc:65:cf:a8:45:ce:8b:70:8c:1f:3d:13:70:91:c3:c6:8b:66:
         54:51:0c:82:40:71:b1:42:90:d5:bb:fd:6b:6e:f6:03:c2:84:
         9e:64:b4:05:a7:da:59:98:02:0f:f8:4d:3a:23:66:00:71:f4:
         7f:70:40:51:88:97:06:4e:c6:fd:6a:0b:a6:72:9f:0f:30:25:
         c2:12:d6:7c:46:f8:74:ef:72:91:e6:a9:3b:1c:d6:f4:db:3d:
         e1:cc:64:3b:27:0a:eb:3d:74:54:8a:a4:81:ae:88:40:70:8b:
         6d:0c:03:cc:70:b6:f5:e7:a0:32:7e:90:01:d7:89:a8:fd:17:
         12:9d:29:fc
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky
MkU2MzE5ODQwHhcNMjUwMTE3MDQxNzI1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg5ZDlkNS1mMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl73pIrF3GvVahDT43GWdb3nRMGEn0gfl51EXfmGd+MRUBq61netxaflE9smc
LBff6dL5mzIIfe+I+MMNzfn/AKzVJo6zYXY2K3wP9HiAcpNjvnXd25W0cJOuxu2K
stYXoJF7CbjGfxhwcOMC6aaIXoG5ePld26vh4wACFrHqNqMjwjUAchgKsgS5nr9u
JrCv9DK0Vvl3skQqD42x/MWqhsQEec1vijQCGEtzf1Lon10ixBtATHCVQxKzNzOO
AOeS+eotgjUeOAerYrVHeIX7IzgDnB6oeW20AWQC58HC35YBFqMIJUNCODV6nUuu
ROrsb1y0F3TnsuU0Zl8VSgAR1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFI6X5Hvn
xcRYYoGsSAN8w1xuxeO5MB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD
QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFBQjkvRkIwNzRGNDY5Q0M2MTFFRTlGQzY1QTIzQzRGOUFFMDIvRjYwOUIwMzA5
RDVGMTFFRTk0MDc2RTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABn5DEDBABn/howDQYJKoZIhvcNAQELBQADggEBADZT4Fmg
pvzbRuGKB45EosQgj/IDimODSD2eadQmzQRKAEEkXGRzXao73EyAym2+pHDVca8e
gPFIzZNZxzSdHl5TlkVYs/pjMtIRLjvNpw2WWekCygsz7Brdn16eyRe8BQUPqEBZ
/m9aHk4h/MSGZzpiWMnBtAjfeake0C+ypcxlz6hFzotwjB89E3CRw8aLZlRRDIJA
cbFCkNW7/Wtu9gPChJ5ktAWn2lmYAg/4TTojZgBx9H9wQFGIlwZOxv1qC6Zynw8w
JcIS1nxG+HTvcpHmqTsc1vTbPeHMZDsnCus9dFSKpIGuiEBwi20MA8xwtvXnoDJ+
kAHXiaj9FxKdKfw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:45 2025 by rpki-client