Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A807146437E411EC9BA3E20AC4F9AE02.roa
File:                     A807146437E411EC9BA3E20AC4F9AE02.roa (raw, json)
Hash identifier:          N0WCtgkaNZeOTo3I3oEHp89wJvvLye1ENYthm+qu0UA=
Subject key identifier:   DA:D8:C2:B8:F0:C4:B8:2D:D8:19:72:85:D6:D8:0A:53:79:68:69:8A
Certificate issuer:       /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial:       0C00
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A807146437E411EC9BA3E20AC4F9AE02.roa
Signing time:             Thu 30 Oct 2025 19:08:05 +0000
ROA not before:           Thu 30 Oct 2025 19:08:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138183
IP address blocks:        103.129.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
                          rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
        Validity
            Not Before: Oct 30 19:08:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6903b795-7257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:84:80:eb:6d:0a:cd:04:5b:75:34:63:fb:
                    e8:0f:b2:52:ce:59:0d:1b:41:25:19:04:7f:3a:14:
                    24:72:c7:d1:9b:5e:c5:7b:eb:62:40:7a:ff:53:8f:
                    3c:3b:4e:22:e0:5b:3e:8e:92:74:87:00:8e:29:48:
                    36:9f:4c:24:97:fd:28:69:53:d8:a3:3b:fa:64:b9:
                    d2:da:00:af:44:13:80:dc:9f:ea:c3:75:22:b9:f4:
                    4f:f6:47:2b:0a:1c:94:d4:c5:cf:d5:d7:a8:71:66:
                    89:68:2e:2e:7a:ba:65:1c:eb:99:35:7a:19:74:22:
                    9c:a2:3a:85:88:73:0f:3d:f5:ca:bc:56:c0:4a:14:
                    f9:16:93:14:77:24:6d:db:ee:fa:01:b7:5e:49:67:
                    4c:1e:38:28:c7:bc:29:60:80:4c:f2:8d:4c:0f:79:
                    1a:ee:7d:e6:a2:a4:20:ca:94:c7:0d:b7:0b:d3:ad:
                    c4:79:91:33:c5:f3:e9:05:20:f8:74:23:5f:10:67:
                    58:31:ff:04:b8:23:38:0c:61:d3:63:0b:cf:6c:ad:
                    a7:d5:f2:af:5a:e5:2e:71:a7:d5:5c:bb:d3:1a:0f:
                    21:80:42:37:7f:d5:a4:07:f1:35:dc:78:f0:50:99:
                    d1:b5:a3:8f:d8:cb:4d:0c:f3:98:10:fd:26:e9:5f:
                    8a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D8:C2:B8:F0:C4:B8:2D:D8:19:72:85:D6:D8:0A:53:79:68:69:8A
            X509v3 Authority Key Identifier:
                keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A807146437E411EC9BA3E20AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:de:eb:89:66:52:69:64:d1:ff:69:46:a6:28:20:cc:d1:
         cd:2c:33:a0:db:5b:40:1a:c9:48:68:84:08:92:dc:07:34:56:
         79:5f:2f:44:8a:5a:04:4a:c9:56:bc:29:30:93:d5:9d:bd:69:
         47:6f:4c:22:12:f2:5f:31:89:52:71:95:27:c2:58:6b:81:80:
         4e:57:52:98:02:33:23:95:33:9d:15:15:e9:a3:36:93:1a:e3:
         22:6e:27:a6:13:12:17:a5:86:cb:4f:c7:bc:94:bd:e0:d2:b0:
         19:3a:b4:5e:b9:20:f7:17:38:c4:f8:1b:59:13:ed:15:58:56:
         b9:ea:43:9e:04:c3:21:8b:69:c3:f5:3e:96:b6:35:7f:df:92:
         55:1d:2a:58:f7:f5:c6:cc:32:ac:70:87:cb:91:4f:e4:52:56:
         72:14:14:6c:c6:7a:ee:76:27:01:30:8d:ed:fa:eb:6a:da:c1:
         0c:67:4f:9f:53:ac:c5:e2:4d:34:11:6b:17:b6:34:54:3d:15:
         e6:c0:29:b0:8f:3d:d1:15:ce:7f:92:a1:fc:5f:9b:d6:a0:d4:
         cb:be:78:77:85:ea:7e:5f:3f:92:4a:48:6a:69:84:e0:9e:f4:
         03:41:26:34:41:f8:e6:c4:65:d2:ed:c1:5f:30:01:0b:da:e4:
         2f:19:c3:e5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG
RTNERjk3RkIwHhcNMjUxMDMwMTkwODA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzYjc5NS03MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzx+EgOttCs0EW3U0Y/voD7JSzlkNG0ElGQR/OhQkcsfRm17Fe+tiQHr/U488
O04i4Fs+jpJ0hwCOKUg2n0wkl/0oaVPYozv6ZLnS2gCvRBOA3J/qw3UiufRP9kcr
ChyU1MXP1deocWaJaC4uerplHOuZNXoZdCKcojqFiHMPPfXKvFbAShT5FpMUdyRt
2+76AbdeSWdMHjgox7wpYIBM8o1MD3ka7n3moqQgypTHDbcL063EeZEzxfPpBSD4
dCNfEGdYMf8EuCM4DGHTYwvPbK2n1fKvWuUucafVXLvTGg8hgEI3f9WkB/E13Hjw
UJnRtaOP2MtNDPOYEP0m6V+KowIDAQABo4IClTCCApEwHQYDVR0OBBYEFNrYwrjw
xLgt2BlyhdbYClN5aGmKMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1
QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlFOUIvN0E1M0E2MTgyNUEzMTFFQUE0N0YwNTI3QzRGOUFFMDIvQTgwNzE0NjQz
N0U0MTFFQzlCQTNFMjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngXIwDQYJKoZIhvcNAQELBQADggEBAGxc3uuJZlJpZNH/
aUamKCDM0c0sM6DbW0AayUhohAiS3Ac0VnlfL0SKWgRKyVa8KTCT1Z29aUdvTCIS
8l8xiVJxlSfCWGuBgE5XUpgCMyOVM50VFemjNpMa4yJuJ6YTEhelhstPx7yUveDS
sBk6tF65IPcXOMT4G1kT7RVYVrnqQ54EwyGLacP1Ppa2NX/fklUdKlj39cbMMqxw
h8uRT+RSVnIUFGzGeu52JwEwje3662rawQxnT59TrMXiTTQRaxe2NFQ9FebAKbCP
PdEVzn+Sofxfm9ag1Mu+eHeF6n5fP5JKSGpphOCe9ANBJjRB+ObEZdLtwV8wAQva
5C8Zw+U=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:37:30 2025 by rpki-client