Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
File:                     9EE7FBDA678511F0999A252DC4F9AE02.roa (raw, json)
Hash identifier:          umzw1geYgK2JVHp9lOr8AEg7GPMGxFuZO79d5M9gQWE=
Subject key identifier:   99:64:1B:63:B1:71:58:13:B6:EC:57:E3:38:B2:EA:1C:F6:4D:A6:B3
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       03
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
Signing time:             Wed 23 Jul 2025 05:26:44 +0000
ROA not before:           Wed 23 Jul 2025 05:26:44 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.141.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Jul 23 05:26:44 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68807294-596a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:b4:2c:26:c6:01:05:dc:79:3f:bd:2e:2f:
                    b5:00:55:38:ed:46:3f:35:3b:a5:9b:ef:34:b9:49:
                    cd:97:71:39:6a:0a:3a:4b:96:ce:83:fb:24:01:c8:
                    8a:b1:f0:1c:bf:99:d5:bf:7c:d0:db:2a:82:76:87:
                    e9:50:a7:7f:e6:cb:5f:52:e3:e6:d1:f3:02:de:0e:
                    bb:e7:03:fa:72:2d:b2:a3:f4:2c:2a:75:a9:88:d2:
                    fe:ac:a4:fa:f0:f9:9d:61:1b:cd:19:8c:36:6b:5d:
                    9e:5f:5e:04:90:3f:40:25:c1:a6:42:02:d7:2c:3d:
                    88:77:09:69:da:62:14:a6:a4:72:b3:6f:b4:ea:ae:
                    e5:5a:89:34:d2:46:df:44:c5:14:c3:3c:c3:32:7b:
                    24:e3:99:d3:9e:97:28:e0:31:b7:a0:a9:35:5e:cf:
                    43:f4:be:68:91:a2:19:5c:60:46:87:27:0b:2e:c8:
                    0a:6e:08:2a:17:6e:88:7e:76:d2:05:29:26:58:dd:
                    fa:1b:ed:d9:f7:0f:ab:53:b5:91:e1:a9:96:5c:fd:
                    e7:c8:32:8f:50:74:32:a6:9b:80:91:90:5a:1e:fa:
                    94:77:4a:65:47:5d:70:98:1f:56:67:c3:72:10:66:
                    39:f8:1c:19:86:69:8c:ab:58:2b:9d:d0:e1:ff:cc:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:1B:63:B1:71:58:13:B6:EC:57:E3:38:B2:EA:1C:F6:4D:A6:B3
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9EE7FBDA678511F0999A252DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:16:c4:a3:a3:e5:43:a2:0c:7b:53:16:bf:62:af:7a:f1:5c:
         16:b0:7b:48:2d:38:af:a2:af:6b:95:19:aa:b5:b4:94:90:3d:
         73:d7:74:03:7d:b7:90:69:a6:88:0f:3a:b9:a0:ba:09:d4:ea:
         56:a5:f1:cf:e3:a7:be:06:80:53:c5:81:f2:66:bc:30:51:7c:
         e6:e0:01:10:09:83:70:44:26:85:b4:69:29:e0:94:66:48:a0:
         f5:8b:1b:8d:15:da:eb:aa:b9:5e:d7:af:10:ca:cc:e2:b2:37:
         d0:79:aa:6f:82:86:91:f4:d9:5b:22:51:c7:8a:84:99:61:5b:
         f7:0b:ae:02:8e:99:63:ec:76:ac:d6:92:2d:26:00:06:6d:ad:
         36:cd:d0:7a:a7:82:a0:b7:52:bd:4b:31:6b:2a:08:55:74:0e:
         7b:bb:e5:bf:49:de:13:e8:2e:30:8d:b3:d7:92:87:77:0b:0a:
         71:04:d1:4c:16:02:ba:15:30:40:6a:a0:23:b8:1e:78:c4:a0:
         06:10:36:31:bd:18:81:ec:96:b4:06:a6:23:f6:60:78:6a:24:
         82:e9:28:29:e0:ad:45:29:fd:f9:c3:74:f0:34:1d:19:e4:73:
         15:3f:08:93:69:b5:4f:06:44:5b:59:e4:17:61:6b:41:2f:9f:
         62:e1:98:eb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MkEyMjExMC8GA1UEBRMoQzIzREVFQjQ3OUU3MEY2MEVGQ0E3Qzg4NDYyQjk1QjlE
QzIyQzlEMDAeFw0yNTA3MjMwNTI2NDRaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4ODA3Mjk0LTU5NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqDrQsJsYBBdx5P70uL7UAVTjtRj81O6Wb7zS5Sc2XcTlqCjpLls6D+yQByIqx
8By/mdW/fNDbKoJ2h+lQp3/my19S4+bR8wLeDrvnA/pyLbKj9CwqdamI0v6spPrw
+Z1hG80ZjDZrXZ5fXgSQP0AlwaZCAtcsPYh3CWnaYhSmpHKzb7TqruVaiTTSRt9E
xRTDPMMyeyTjmdOelyjgMbegqTVez0P0vmiRohlcYEaHJwsuyApuCCoXboh+dtIF
KSZY3fob7dn3D6tTtZHhqZZc/efIMo9QdDKmm4CRkFoe+pR3SmVHXXCYH1Znw3IQ
Zjn4HBmGaYyrWCud0OH/zFbxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmWQbY7Fx
WBO27FfjOLLqHPZNprMwHwYDVR0jBBgwFoAUwj3utHnnD2DvynyIRiuVudwiydAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTIyL0ZENURFOUIyNjYw
MDExRjA5OTg2QzkxN0M0RjlBRTAyL3dqM3V0SG5uRDJEdnlueUlSaXVWdWR3aXlk
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd2ozdXRIbm5EMkR2eW55SVJpdVZ1ZHdpeWRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkEyMi9GRDVERTlCMjY2MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi85RUU3RkJEQTY3
ODUxMUYwOTk5QTI1MkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeNKjANBgkqhkiG9w0BAQsFAAOCAQEABRbEo6PlQ6IMe1MW
v2KvevFcFrB7SC04r6Kva5UZqrW0lJA9c9d0A323kGmmiA86uaC6CdTqVqXxz+On
vgaAU8WB8ma8MFF85uABEAmDcEQmhbRpKeCUZkig9YsbjRXa66q5XtevEMrM4rI3
0Hmqb4KGkfTZWyJRx4qEmWFb9wuuAo6ZY+x2rNaSLSYABm2tNs3QeqeCoLdSvUsx
ayoIVXQOe7vlv0neE+guMI2z15KHdwsKcQTRTBYCuhUwQGqgI7geeMSgBhA2Mb0Y
geyWtAamI/ZgeGokgukoKeCtRSn9+cN08DQdGeRzFT8Ik2m1TwZEW1nkF2FrQS+f
YuGY6w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:24:18 2025 by rpki-client