Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/11E444F8733A11F0A50CB40BC4F9AE02.roa
File:                     11E444F8733A11F0A50CB40BC4F9AE02.roa (raw, json)
Hash identifier:          SfHaYhgh0Lmyv8HnBV4v/dRclRR1wUf0gbRzJZqyIWg=
Subject key identifier:   94:D1:43:75:4A:FB:BE:A8:B5:18:D8:2D:8C:0D:0A:5A:F0:23:8E:AB
Certificate issuer:       /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Certificate serial:       09
Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/11E444F8733A11F0A50CB40BC4F9AE02.roa
Signing time:             Thu 07 Aug 2025 02:56:09 +0000
ROA not before:           Thu 07 Aug 2025 02:56:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     7545
IP address blocks:        103.17.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
                          rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 08:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
        Validity
            Not Before: Aug  7 02:56:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=689415c9-087e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:9f:43:08:e0:3c:28:dd:66:1e:22:aa:aa:
                    eb:28:30:16:3c:cb:1c:b3:7d:0a:93:b5:4c:2e:5e:
                    c3:7c:8e:4e:de:fb:ca:7c:96:b0:69:86:41:a9:4e:
                    25:e2:e3:ed:aa:a9:d4:b7:ee:cc:7a:ce:0a:14:75:
                    aa:c8:43:44:ae:bc:5b:af:80:3f:b5:ff:e1:ff:0f:
                    04:eb:7b:44:64:c7:25:34:de:42:5d:62:be:44:bf:
                    7a:5a:66:be:c4:ed:84:6b:18:42:82:07:03:30:30:
                    18:ed:b8:cc:83:43:b9:08:2b:eb:b7:97:20:67:2c:
                    b0:5b:1d:ac:0e:ea:38:7b:7f:f7:c1:15:05:90:8b:
                    63:83:8c:64:5a:bd:e8:46:54:7f:8a:f8:8b:74:90:
                    bf:8c:bf:ee:b1:2f:0e:90:43:43:2f:82:e2:80:7b:
                    8c:f1:52:d6:d6:de:c9:98:73:39:60:ab:76:5b:8d:
                    51:74:3a:b2:e7:74:58:d1:cb:47:09:e9:f7:d7:0e:
                    dd:1c:3e:5f:60:c5:76:4d:26:8d:bf:e0:12:5f:10:
                    58:f6:9e:80:81:98:1b:5a:92:45:fd:6c:88:11:5c:
                    f0:ab:49:b1:f5:6c:bd:5d:35:08:a5:8c:b6:e9:06:
                    2b:3d:7d:85:dd:0b:04:62:2d:c2:4c:1c:73:8a:c3:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D1:43:75:4A:FB:BE:A8:B5:18:D8:2D:8C:0D:0A:5A:F0:23:8E:AB
            X509v3 Authority Key Identifier:
                keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/11E444F8733A11F0A50CB40BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:bd:47:2d:17:8b:3f:f8:45:7e:41:b8:a1:72:e6:74:e9:c7:
         f3:2e:ed:49:e3:fd:f1:8a:eb:80:f1:75:e1:37:a8:67:0d:b5:
         d3:0d:73:54:18:60:70:93:3f:40:38:ca:30:79:31:c3:0e:30:
         6d:38:3e:0f:cf:86:3e:c2:b4:74:44:3b:a9:4e:4b:7c:8a:a0:
         69:cd:3a:15:6c:44:6f:e2:f3:cd:21:19:78:27:5b:c7:c8:a3:
         dd:03:a2:f8:99:44:37:7f:81:78:6e:c2:5d:16:e1:eb:d4:7a:
         67:df:f9:2d:2a:13:7b:d0:c1:50:51:e3:e4:a1:ac:e2:25:7b:
         e1:8e:79:3f:a8:98:35:a9:7b:cb:cf:6e:94:90:c1:ad:b6:94:
         6e:c2:3a:93:66:7f:2e:b1:7a:aa:74:da:a2:44:95:59:69:dd:
         c8:4c:54:a3:04:dc:56:55:6e:67:5f:b2:f3:f7:8e:9e:a7:de:
         b2:2c:89:49:d6:a0:ff:4b:f1:84:9d:67:bf:a1:6d:d8:dc:d3:
         9a:a9:d8:56:75:50:48:02:5f:aa:26:ff:f4:5a:16:5b:91:66:
         fe:4e:f1:eb:44:8f:e7:10:c9:cb:77:9a:f0:ee:65:73:8c:41:
         89:59:4e:7f:41:06:97:dc:1a:08:88:03:a0:8d:c2:b5:a8:eb:
         f9:ac:76:68
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTc5NzExMC8GA1UEBRMoOTkzQjAxQkE0MTNFRTU0OEYzRkM3RkNCMDlBMzNCOTE5
NTk2NkY0NjAeFw0yNTA4MDcwMjU2MDlaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4OTQxNWM5LTA4N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsWJ9DCOA8KN1mHiKqqusoMBY8yxyzfQqTtUwuXsN8jk7e+8p8lrBphkGpTiXi
4+2qqdS37sx6zgoUdarIQ0SuvFuvgD+1/+H/DwTre0RkxyU03kJdYr5Ev3paZr7E
7YRrGEKCBwMwMBjtuMyDQ7kIK+u3lyBnLLBbHawO6jh7f/fBFQWQi2ODjGRavehG
VH+K+It0kL+Mv+6xLw6QQ0MvguKAe4zxUtbW3smYczlgq3ZbjVF0OrLndFjRy0cJ
6ffXDt0cPl9gxXZNJo2/4BJfEFj2noCBmBtakkX9bIgRXPCrSbH1bL1dNQiljLbp
Bis9fYXdCwRiLcJMHHOKw9G5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlNFDdUr7
vqi1GNgtjA0KWvAjjqswHwYDVR0jBBgwFoAUmTsBukE+5Ujz/H/LCaM7kZWWb0Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNzk3Lzc2NkFDOUIyNkU5
MjExRjBCQkVCN0MzQUM0RjlBRTAyL21Uc0J1a0UtNVVqel9IX0xDYU03a1pXV2Iw
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbVRzQnVrRS01VWp6X0hfTENhTTdrWldXYjBZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTc5Ny83NjZBQzlCMjZFOTIxMUYwQkJFQjdDM0FDNEY5QUUwMi8xMUU0NDRGODcz
M0ExMUYwQTUwQ0I0MEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmcRhDANBgkqhkiG9w0BAQsFAAOCAQEAob1HLReLP/hFfkG4
oXLmdOnH8y7tSeP98YrrgPF14TeoZw210w1zVBhgcJM/QDjKMHkxww4wbTg+D8+G
PsK0dEQ7qU5LfIqgac06FWxEb+LzzSEZeCdbx8ij3QOi+JlEN3+BeG7CXRbh69R6
Z9/5LSoTe9DBUFHj5KGs4iV74Y55P6iYNal7y89ulJDBrbaUbsI6k2Z/LrF6qnTa
okSVWWndyExUowTcVlVuZ1+y8/eOnqfesiyJSdag/0vxhJ1nv6Ft2NzTmqnYVnVQ
SAJfqib/9FoWW5Fm/k7x60SP5xDJy3ea8O5lc4xBiVlOf0EGl9waCIgDoI3Ctajr
+ax2aA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:55:01 2025 by rpki-client