Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
File:                     274A12F696FD11EF88F06237C4F9AE02.roa (raw, json)
Hash identifier:          Pm0s4Nw0vjEdOt8OEH+67yrk/B68Gy2u6QwOvd+DpWM=
Subject key identifier:   A6:4C:D7:84:B8:84:30:17:E4:A0:00:AB:CC:80:43:98:8F:B7:E6:1B
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       050F
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 23:43:52 +0000
ROA not before:           Sun 02 Nov 2025 23:43:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     26548
IP address blocks:        103.175.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
        Validity
            Not Before: Nov  2 23:43:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907ecb7-7959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:f2:75:e1:ef:b0:f2:aa:27:0e:4f:9f:5f:
                    42:33:85:17:a2:d6:4b:da:e0:26:ba:fd:a5:39:87:
                    55:97:54:73:5e:f4:76:43:80:5f:dc:77:18:66:09:
                    17:8b:e1:66:27:ac:9f:01:2e:cd:37:3b:22:0f:37:
                    09:b4:d4:ec:f1:43:7a:a0:ed:8a:fb:a6:9e:9a:20:
                    17:ee:2c:53:01:a9:8f:76:c6:9f:3a:08:3c:ec:ad:
                    a2:12:41:4e:95:84:58:12:60:f9:c5:6d:10:0d:d2:
                    2d:8e:17:96:40:5f:dd:4c:78:5e:ba:d8:b0:71:73:
                    62:01:a8:28:fe:72:a6:0b:35:c9:6d:7e:e7:ee:86:
                    e9:62:28:d0:14:b0:61:c3:e2:b2:be:bb:d8:41:28:
                    89:37:35:28:44:25:a0:91:2a:71:21:77:8a:f5:c8:
                    bd:d7:02:02:d5:ca:15:6a:66:83:91:d6:e1:07:90:
                    9c:cf:35:31:0a:93:23:7a:ab:69:b3:dd:b4:36:ef:
                    51:93:36:d1:bb:cc:50:1e:f6:7f:2e:3d:73:13:fd:
                    ff:c7:df:41:a6:05:10:e7:4b:ca:66:5b:d9:31:c9:
                    63:6c:3b:04:a6:18:f0:7c:63:7f:82:1b:a4:db:8a:
                    ae:1e:45:32:f9:a9:1a:cc:fd:a7:0a:20:67:d0:61:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:D7:84:B8:84:30:17:E4:A0:00:AB:CC:80:43:98:8F:B7:E6:1B
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:34:ea:89:3d:7c:3d:75:2c:57:1c:8d:26:fa:07:f9:be:
         92:73:b3:c7:ad:e7:d5:6c:fb:f6:98:7d:99:6c:19:85:04:65:
         57:a6:b7:bd:6b:36:d5:34:b7:78:0f:95:c3:ec:97:44:05:61:
         51:a0:92:3a:26:9c:d1:d4:d3:2a:e3:b1:f3:36:b3:f4:4b:94:
         e2:c1:6f:34:4a:c8:9c:23:64:be:3d:1b:6f:dc:c2:88:09:96:
         5a:44:33:26:25:36:f1:37:1b:3a:ce:da:9c:b9:53:ec:2e:49:
         56:74:d7:ff:67:33:03:d5:5b:86:3f:6d:df:2b:d3:e4:30:d5:
         7c:0b:c2:c7:14:1a:02:72:48:25:69:15:fd:6e:be:bc:f3:b7:
         82:c5:2e:20:e1:57:fe:a0:9e:a9:85:48:71:f2:85:ff:6d:7b:
         6b:06:9d:13:5c:d0:f4:bc:5d:bf:3f:01:cf:0d:e7:b1:15:24:
         ab:59:23:e5:11:dc:d0:b4:33:95:38:b9:da:a5:62:e8:1d:2e:
         7c:ed:1f:03:f6:e7:70:75:b3:fa:3b:bf:dd:78:db:96:e1:28:
         de:6c:c4:0b:f2:a6:e2:4a:7d:c7:ad:03:9e:aa:a8:b4:45:b0:
         85:d5:b4:fa:32:0a:9a:06:c1:79:6b:25:93:89:3c:11:ce:53:
         6b:17:b2:3d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz
MzQwQzU3MzYwHhcNMjUxMTAyMjM0MzUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3ZWNiNy03OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQ3ydeHvsPKqJw5Pn19CM4UXotZL2uAmuv2lOYdVl1RzXvR2Q4Bf3HcYZgkX
i+FmJ6yfAS7NNzsiDzcJtNTs8UN6oO2K+6aemiAX7ixTAamPdsafOgg87K2iEkFO
lYRYEmD5xW0QDdItjheWQF/dTHheutiwcXNiAago/nKmCzXJbX7n7obpYijQFLBh
w+KyvrvYQSiJNzUoRCWgkSpxIXeK9ci91wIC1coVamaDkdbhB5CczzUxCpMjeqtp
s920Nu9RkzbRu8xQHvZ/Lj1zE/3/x99BpgUQ50vKZlvZMcljbDsEphjwfGN/ghuk
24quHkUy+akazP2nCiBn0GEdxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKZM14S4
hDAX5KAAq8yAQ5iPt+YbMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3
MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGQUIvOUNEMTg0QjIzNzMwMTFFQzkzQjU5QjFCQzRGOUFFMDIvMjc0QTEyRjY5
NkZEMTFFRjg4RjA2MjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnr08wDQYJKoZIhvcNAQELBQADggEBAGi8NOqJPXw9dSxX
HI0m+gf5vpJzs8et59Vs+/aYfZlsGYUEZVemt71rNtU0t3gPlcPsl0QFYVGgkjom
nNHU0yrjsfM2s/RLlOLBbzRKyJwjZL49G2/cwogJllpEMyYlNvE3GzrO2py5U+wu
SVZ01/9nMwPVW4Y/bd8r0+Qw1XwLwscUGgJySCVpFf1uvrzzt4LFLiDhV/6gnqmF
SHHyhf9te2sGnRNc0PS8Xb8/Ac8N57EVJKtZI+UR3NC0M5U4udqlYugdLnztHwP2
53B1s/o7v91425bhKN5sxAvypuJKfcetA56qqLRFsIXVtPoyCpoGwXlrJZOJPBHO
U2sXsj0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:03 2025 by rpki-client