Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/02E60C72F1E211EAA2361B34C4F9AE02.roa
File:                     02E60C72F1E211EAA2361B34C4F9AE02.roa (raw, json)
Hash identifier:          hb//PUQTk+DCfdFHXSzcOi63fqVJTWVzPOt8dljizSk=
Subject key identifier:   FD:94:3F:77:17:ED:5C:44:A0:95:32:39:29:C7:13:0B:BE:70:2F:41
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       07E3
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/02E60C72F1E211EAA2361B34C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 21:08:28 +0000
ROA not before:           Wed 18 Jun 2025 21:08:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139036
IP address blocks:        103.138.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 20:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Jun 18 21:08:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68532acc-c37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:dc:a2:41:c1:77:e8:9c:2f:a2:7c:d6:79:
                    19:06:2a:0a:93:8e:f7:d6:c8:9e:f8:a4:ec:d0:bc:
                    06:07:f2:e7:2f:22:4a:79:7d:6f:40:bc:90:1c:46:
                    99:38:98:9d:d0:b9:e2:fe:c1:95:fb:66:bb:77:0d:
                    e4:ba:a4:39:e5:87:59:af:46:fb:e5:3d:2e:ff:d2:
                    a3:62:0b:17:d9:25:2a:c8:b0:6b:22:ed:41:e8:19:
                    d5:c9:3d:d8:66:ef:2f:c2:8e:f9:0d:ca:59:f8:e6:
                    f5:32:77:c7:a0:49:9b:79:5c:a4:87:d8:d9:38:9e:
                    2a:df:39:ce:74:6c:95:b9:2f:13:84:88:b6:33:00:
                    3d:b5:18:2c:8c:c7:ae:08:28:7a:45:74:46:b6:6c:
                    37:75:51:25:7e:d9:44:00:60:12:55:01:a3:f2:4b:
                    db:86:c8:83:1d:11:2d:83:79:90:9e:55:b2:7f:ff:
                    c9:a2:6c:10:bb:66:47:71:55:35:1e:af:c7:5b:8a:
                    2f:6b:c6:b4:a7:93:8c:ec:18:3e:fc:48:d7:e0:4c:
                    40:0b:b9:92:6d:7a:50:5e:ab:2f:45:ad:93:c6:60:
                    f2:fd:ea:90:33:27:ab:e4:98:65:a0:a2:24:05:fc:
                    a6:b3:c3:0b:a2:2a:c0:9f:eb:e8:59:c3:c5:fb:da:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:94:3F:77:17:ED:5C:44:A0:95:32:39:29:C7:13:0B:BE:70:2F:41
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/02E60C72F1E211EAA2361B34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:21:06:a3:a7:51:6c:bc:a9:a2:38:cb:47:9e:0b:a8:d9:9b:
         71:3a:05:57:f5:26:c4:66:08:31:4d:b0:2b:0b:20:e0:7d:d6:
         8f:87:a6:f3:ac:fd:f4:22:77:07:cd:7d:83:65:a1:30:67:d6:
         8b:10:f5:ae:30:c2:69:c2:aa:e8:a2:f0:f8:72:34:7f:39:69:
         09:f8:b4:fe:1b:88:66:b1:45:39:61:0a:6d:ae:1a:8a:a9:10:
         9b:bf:5f:79:b1:fb:02:e1:85:f6:68:a0:02:0a:ca:f7:20:68:
         0d:90:35:31:7e:ff:10:c6:68:df:b7:fc:3c:fe:d7:78:16:1d:
         24:fe:2c:19:9d:02:97:cd:5b:76:89:5b:45:62:c0:82:0d:72:
         c9:a1:ea:0a:dd:2b:40:d2:ff:ed:cc:9f:bf:da:ba:18:15:12:
         ed:50:d4:9d:c4:92:e9:2e:e6:22:e9:04:6b:38:a5:42:16:85:
         38:20:1f:6f:71:48:be:e8:12:f2:8d:6e:86:89:3e:52:29:f0:
         1d:99:81:72:31:ce:bd:1f:a9:90:ea:70:d8:84:38:0a:15:0e:
         e0:ae:fb:d8:4d:ee:3f:5a:5d:18:9d:21:98:2c:82:d7:c1:5a:
         ea:98:15:f6:3e:d6:f8:aa:6d:ef:a0:33:5e:65:5c:f4:f5:3d:
         37:98:64:d5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA0NjcxMTAvBgNVBAUTKEI4QzMyRkM0RDc5MzFBRDQyNDE0MDczMDZBMEI5OTZB
QzhDOTlGRUIwHhcNMjUwNjE4MjEwODI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODUzMmFjYy1jMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL7cokHBd+icL6J81nkZBioKk4731sie+KTs0LwGB/LnLyJKeX1vQLyQHEaZ
OJid0Lni/sGV+2a7dw3kuqQ55YdZr0b75T0u/9KjYgsX2SUqyLBrIu1B6BnVyT3Y
Zu8vwo75DcpZ+Ob1MnfHoEmbeVykh9jZOJ4q3znOdGyVuS8ThIi2MwA9tRgsjMeu
CCh6RXRGtmw3dVElftlEAGASVQGj8kvbhsiDHREtg3mQnlWyf//JomwQu2ZHcVU1
Hq/HW4ova8a0p5OM7Bg+/EjX4ExAC7mSbXpQXqsvRa2TxmDy/eqQMyer5JhloKIk
Bfyms8MLoirAn+voWcPF+9og3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFP2UP3cX
7VxEoJUyOSnHEwu+cC9BMB8GA1UdIwQYMBaAFLjDL8TXkxrUJBQHMGoLmWrIyZ/r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQ2Ny85QUE5ODBENkYx
RTAxMUVBOEQ0QTlFMzJDNEY5QUUwMi91TU12eE5lVEd0UWtGQWN3YWd1WmFzakpu
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VNTXZ4TmVUR3RRa0ZBY3dhZ3VaYXNqSm4tcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA0NjcvOUFBOTgwRDZGMUUwMTFFQThENEE5RTMyQzRGOUFFMDIvMDJFNjBDNzJG
MUUyMTFFQUEyMzYxQjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnir4wDQYJKoZIhvcNAQELBQADggEBAIQhBqOnUWy8qaI4
y0eeC6jZm3E6BVf1JsRmCDFNsCsLIOB91o+HpvOs/fQidwfNfYNloTBn1osQ9a4w
wmnCquii8PhyNH85aQn4tP4biGaxRTlhCm2uGoqpEJu/X3mx+wLhhfZooAIKyvcg
aA2QNTF+/xDGaN+3/Dz+13gWHST+LBmdApfNW3aJW0ViwIINcsmh6grdK0DS/+3M
n7/auhgVEu1Q1J3Ekuku5iLpBGs4pUIWhTggH29xSL7oEvKNboaJPlIp8B2ZgXIx
zr0fqZDqcNiEOAoVDuCu+9hN7j9aXRidIZgsgtfBWuqYFfY+1viqbe+gM15lXPT1
PTeYZNU=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:04 2025 by rpki-client