Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/66D714485D6F11EC9A00E41DC4F9AE02.roa
File:                     66D714485D6F11EC9A00E41DC4F9AE02.roa (raw, json)
Hash identifier:          5vC9nxv2/jXXWSlPpgTAWIc+k0bGxmtlPDcTVHyp1j4=
Subject key identifier:   CE:43:F9:56:3B:1B:37:8F:F4:1C:A1:D1:AE:EC:D6:31:EA:0B:72:CB
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       0460
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/66D714485D6F11EC9A00E41DC4F9AE02.roa
Signing time:             Tue 05 Aug 2025 01:07:43 +0000
ROA not before:           Tue 05 Aug 2025 01:07:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9441
IP address blocks:        103.141.106.0/24 maxlen: 24
                          103.141.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
                          rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Aug  5 01:07:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6891595f-8ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a1:73:a8:ee:80:02:63:5a:9e:59:59:d3:a8:
                    44:62:d8:d9:91:a8:fc:74:66:43:8c:d7:7b:47:d7:
                    ea:4c:6a:19:87:27:98:06:6d:a6:0e:b3:e1:e8:37:
                    4f:4a:0e:46:a9:d7:2e:d2:35:af:eb:12:fb:3e:6f:
                    10:2a:18:53:8f:6e:50:96:6d:82:e6:9b:1e:70:97:
                    c0:eb:5d:cc:38:00:99:ab:7b:f8:ac:a3:24:ed:c8:
                    25:b5:07:39:1b:23:76:8a:86:b9:c0:a1:94:93:55:
                    ac:c4:d8:ae:e7:13:c3:3c:f2:27:df:6f:3a:35:61:
                    5f:05:55:de:9e:9f:5b:b7:3c:de:de:d6:9b:2a:39:
                    28:cc:57:7d:07:64:a7:1d:76:64:20:d3:ae:75:12:
                    16:ec:9d:1e:ab:03:a0:77:43:8f:a6:8b:f7:b5:8c:
                    c4:8f:04:9c:36:6d:93:d9:d9:dc:ad:9f:91:de:ba:
                    68:a1:be:88:c7:bb:3b:70:c0:05:01:4c:53:a8:0f:
                    c1:19:41:b6:45:fd:f4:f6:a1:10:69:e6:a9:da:2c:
                    95:60:3c:d6:c7:18:c7:67:db:70:3f:69:fd:8e:2f:
                    ae:2d:74:48:4a:85:2a:ee:5c:bb:9f:9b:1b:2b:79:
                    c5:30:5d:56:e9:98:50:55:2d:61:67:20:8e:e2:41:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:43:F9:56:3B:1B:37:8F:F4:1C:A1:D1:AE:EC:D6:31:EA:0B:72:CB
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/66D714485D6F11EC9A00E41DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:a6:40:c4:9c:86:c3:41:36:c3:ea:8a:78:65:c6:87:02:44:
         73:60:14:eb:2e:6b:2f:32:65:79:fd:71:d7:29:17:8f:99:28:
         93:06:2f:64:dc:42:b6:52:b5:5c:bc:44:a6:32:ea:67:f1:d7:
         fb:ac:3c:35:36:4a:3d:87:dc:2e:a6:a9:1f:2b:e5:da:c2:7a:
         76:72:5b:56:e4:7d:2e:3c:f8:6b:de:7f:9e:3e:6a:04:b0:07:
         48:3e:77:cb:95:51:ed:15:93:c8:04:2d:3c:48:53:06:e9:fd:
         30:88:63:59:5b:2a:51:3b:4e:33:52:52:de:71:53:ae:57:68:
         36:90:b8:98:1c:53:6d:b1:67:8d:7a:49:4d:90:45:90:91:15:
         75:ad:a2:b6:a7:51:80:c1:31:e2:29:28:c7:46:70:07:2c:2e:
         23:ba:35:1d:37:3b:df:eb:3a:f9:44:ac:6b:1c:7b:da:44:70:
         0d:c6:9e:3d:82:ca:22:d2:f8:ea:e7:b9:82:97:4a:f1:5f:5b:
         94:60:f2:d3:f4:ae:e8:5a:87:7d:46:3c:6b:6e:43:82:7e:26:
         ad:a0:7c:37:51:43:f0:11:08:9a:b0:6b:d8:7c:be:ce:07:9d:
         0d:e9:54:ad:8a:b0:09:43:ce:be:93:30:30:71:82:1f:ed:8f:
         ad:9a:85:55
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0
NTlEQkMxRjYwHhcNMjUwODA1MDEwNzQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODkxNTk1Zi04ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9KFzqO6AAmNanllZ06hEYtjZkaj8dGZDjNd7R9fqTGoZhyeYBm2mDrPh6DdP
Sg5Gqdcu0jWv6xL7Pm8QKhhTj25Qlm2C5psecJfA613MOACZq3v4rKMk7cgltQc5
GyN2ioa5wKGUk1WsxNiu5xPDPPIn3286NWFfBVXenp9btzze3tabKjkozFd9B2Sn
HXZkINOudRIW7J0eqwOgd0OPpov3tYzEjwScNm2T2dncrZ+R3rpoob6Ix7s7cMAF
AUxTqA/BGUG2Rf309qEQaeap2iyVYDzWxxjHZ9twP2n9ji+uLXRISoUq7ly7n5sb
K3nFMF1W6ZhQVS1hZyCO4kHbAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM5D+VY7
GzeP9Byh0a7s1jHqC3LLMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE
NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE1NTAvMTE3QzI2RUE1RDZCMTFFQzlFMzU2QzQ2QzRGOUFFMDIvNjZENzE0NDg1
RDZGMTFFQzlBMDBFNDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjWowDQYJKoZIhvcNAQELBQADggEBAL+mQMSchsNBNsPq
inhlxocCRHNgFOsuay8yZXn9cdcpF4+ZKJMGL2TcQrZStVy8RKYy6mfx1/usPDU2
Sj2H3C6mqR8r5drCenZyW1bkfS48+Gvef54+agSwB0g+d8uVUe0Vk8gELTxIUwbp
/TCIY1lbKlE7TjNSUt5xU65XaDaQuJgcU22xZ416SU2QRZCRFXWtoranUYDBMeIp
KMdGcAcsLiO6NR03O9/rOvlErGsce9pEcA3Gnj2CyiLS+OrnuYKXSvFfW5Rg8tP0
ruhah31GPGtuQ4J+Jq2gfDdRQ/ARCJqwa9h8vs4HnQ3pVK2KsAlDzr6TMDBxgh/t
j62ahVU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:25 2025 by rpki-client