Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/4742083A534E11F08B7C2047C4F9AE02.roa
File:                     4742083A534E11F08B7C2047C4F9AE02.roa (raw, json)
Hash identifier:          b9dQAfi252XHiHpqx6+ZSBhpVRiVzjLuF9TZZF1YFe0=
Subject key identifier:   F9:8C:24:04:59:05:2F:74:CC:11:A8:12:8F:63:06:21:BA:4F:EB:91
Certificate issuer:       /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Certificate serial:       029B
Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/4742083A534E11F08B7C2047C4F9AE02.roa
Signing time:             Fri 27 Jun 2025 12:00:12 +0000
ROA not before:           Fri 27 Jun 2025 12:00:12 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     132159
IP address blocks:        103.80.78.0/24 maxlen: 24
                          103.80.79.0/24 maxlen: 24
                          2001:df1:14c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
                          rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 02:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
        Validity
            Not Before: Jun 27 12:00:12 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=685e87cb-7ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:81:a8:b6:48:34:2d:dd:88:42:c0:64:ce:
                    72:42:44:41:d5:77:77:53:91:ee:f9:9c:b9:38:71:
                    68:00:2c:d4:25:d9:bb:b9:4a:94:b8:34:e0:51:e5:
                    20:40:e6:e1:c3:ba:6a:00:c9:09:62:99:2b:e4:e9:
                    26:32:bd:b5:4c:9e:59:bd:7a:e3:b7:e9:79:b1:a7:
                    fe:6a:25:b4:14:f0:07:5c:c2:51:19:44:0a:6a:a0:
                    7b:ae:9a:a6:0f:8d:c4:81:c4:de:ee:ad:85:60:be:
                    63:8c:a6:9f:64:fa:1d:e7:b9:da:08:35:d2:d9:d4:
                    3c:ac:48:2b:ae:11:6c:25:0b:4e:d7:a5:e7:09:f2:
                    7c:40:99:21:4f:60:c6:fd:b8:5c:4a:ef:9d:7c:b6:
                    1c:55:32:e6:13:ef:2c:f7:6d:38:25:09:a2:6a:e7:
                    af:01:9f:62:10:05:06:df:37:53:65:70:67:2e:72:
                    f5:f9:27:f6:ad:a1:6c:29:2a:93:f8:dc:35:e4:40:
                    78:83:00:95:a9:ff:bd:59:68:be:a1:a5:1c:7d:e3:
                    2e:5d:64:a7:5e:4f:41:17:36:2f:44:31:3e:5b:ed:
                    1e:23:ee:63:86:47:42:d3:2d:eb:d4:cf:f7:42:8c:
                    cb:fa:f5:9b:ed:89:cf:b7:fb:62:80:0a:73:ec:fc:
                    52:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:24:04:59:05:2F:74:CC:11:A8:12:8F:63:06:21:BA:4F:EB:91
            X509v3 Authority Key Identifier:
                keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/4742083A534E11F08B7C2047C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.78.0/23
                IPv6:
                  2001:df1:14c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:ef:b8:80:bb:74:fd:d5:2d:0d:2d:d3:b5:65:0b:cb:3c:
         8a:b3:f9:c8:a1:47:c9:b7:1e:bc:fe:cc:cc:ee:8b:89:f9:e1:
         ef:d1:56:0d:83:42:ed:9e:b7:4e:7e:22:51:e3:12:f0:47:70:
         a2:99:b7:8c:be:c0:c1:73:db:17:08:18:07:fc:db:d8:dd:47:
         f5:16:f1:6f:c7:86:f5:c9:e5:fd:45:c9:d8:4d:64:3a:6b:99:
         a4:d2:db:98:b4:4d:5c:f8:e6:fe:a2:ae:b4:8f:35:00:c8:5c:
         f3:cd:bb:c2:b8:17:cb:7a:f9:b2:cd:b4:2f:3a:12:a8:60:87:
         27:dd:fd:45:13:fb:f8:36:6f:01:e9:cd:99:9b:76:42:41:21:
         b9:51:ea:50:86:27:01:6b:02:c1:30:69:28:16:1b:0f:ab:5e:
         09:49:c7:8b:52:89:5a:33:47:31:b6:18:f8:49:4f:54:90:e9:
         fe:15:d7:f2:ae:6d:25:a1:73:bf:e2:e9:87:eb:e1:f7:11:3c:
         cc:9e:9d:0d:40:54:49:9c:54:fe:9f:88:55:b0:a8:22:50:65:
         4d:72:3c:5a:26:ff:d6:68:5d:93:6f:93:41:d9:27:d2:de:03:
         f1:bf:3a:f4:d7:34:44:0f:ba:c7:1c:a8:df:c8:fa:b3:ce:68:
         7e:b2:66:aa
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG
RkEzNEMxMjcwHhcNMjUwNjI3MTIwMDEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVlODdjYi03YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKWBqLZINC3diELAZM5yQkRB1Xd3U5Hu+Zy5OHFoACzUJdm7uUqUuDTgUeUg
QObhw7pqAMkJYpkr5OkmMr21TJ5ZvXrjt+l5saf+aiW0FPAHXMJRGUQKaqB7rpqm
D43EgcTe7q2FYL5jjKafZPod57naCDXS2dQ8rEgrrhFsJQtO16XnCfJ8QJkhT2DG
/bhcSu+dfLYcVTLmE+8s9204JQmiauevAZ9iEAUG3zdTZXBnLnL1+Sf2raFsKSqT
+Nw15EB4gwCVqf+9WWi+oaUcfeMuXWSnXk9BFzYvRDE+W+0eI+5jhkdC0y3r1M/3
QozL+vWb7YnPt/tigApz7PxSnwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPmMJARZ
BS90zBGoEo9jBiG6T+uRMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz
REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTc1MDEvOTlCNThCQjAxM0RCMTFFRDkzMDRDNTgyQzRGOUFFMDIvNDc0MjA4M0E1
MzRFMTFGMDhCN0MyMDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnUE4wDwQCAAIwCQMHACABDfEUwDANBgkqhkiG9w0BAQsF
AAOCAQEAcRvvuIC7dP3VLQ0t07VlC8s8irP5yKFHybcevP7MzO6Lifnh79FWDYNC
7Z63Tn4iUeMS8Edwopm3jL7AwXPbFwgYB/zb2N1H9Rbxb8eG9cnl/UXJ2E1kOmuZ
pNLbmLRNXPjm/qKutI81AMhc8827wrgXy3r5ss20LzoSqGCHJ939RRP7+DZvAenN
mZt2QkEhuVHqUIYnAWsCwTBpKBYbD6teCUnHi1KJWjNHMbYY+ElPVJDp/hXX8q5t
JaFzv+Lph+vh9xE8zJ6dDUBUSZxU/p+IVbCoIlBlTXI8Wib/1mhdk2+TQdkn0t4D
8b869Nc0RA+6xxyo38j6s85ofrJmqg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:36:02 2025 by rpki-client