Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/98F2F9C8762611F09B1FE90DC4F9AE02.roa
File:                     98F2F9C8762611F09B1FE90DC4F9AE02.roa (raw, json)
Hash identifier:          TVO1eccZ7Jv3HMD56bPt9VHdqMCi+LIJ7/aVWhXVMSw=
Subject key identifier:   61:83:5A:97:16:6A:D1:ED:92:3E:15:93:BE:D8:C7:E7:34:58:23:9A
Certificate issuer:       /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial:       020D
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/98F2F9C8762611F09B1FE90DC4F9AE02.roa
Signing time:             Sun 10 Aug 2025 20:14:20 +0000
ROA not before:           Sun 10 Aug 2025 20:14:20 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     149765
IP address blocks:        103.42.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
                          rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
        Validity
            Not Before: Aug 10 20:14:20 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6898fd9b-5e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:90:70:3b:37:51:9b:2e:6a:7c:04:5d:2f:
                    74:86:34:8c:64:84:29:6e:bc:2b:fa:7f:da:da:55:
                    f2:46:1a:4c:46:ae:2f:ad:36:9f:1f:da:e0:e3:27:
                    a9:c4:eb:d4:1d:05:ab:29:15:67:5a:ed:ba:65:24:
                    f1:52:25:ba:80:55:eb:f8:7a:0c:a1:b4:7f:0a:ac:
                    dc:c9:97:dc:85:b0:1d:ac:4d:b2:d4:1b:33:ed:27:
                    a9:28:0c:08:d2:04:a3:10:ad:0d:40:74:4a:db:80:
                    f9:1f:4e:37:53:8d:75:8a:b9:48:18:93:a2:36:14:
                    46:66:a1:da:25:75:39:14:15:7e:73:0b:4e:99:a4:
                    89:5b:a0:15:b2:c4:39:36:e5:bf:58:93:2a:7b:26:
                    e0:af:db:f2:af:85:e5:f9:aa:3f:7c:db:e7:6d:ba:
                    84:98:ab:ec:6e:1e:4c:7f:d3:ff:05:d4:d5:6b:15:
                    35:41:22:ad:9d:5e:ff:f1:77:83:88:61:e9:46:72:
                    ed:f3:fd:fd:b5:31:c8:c5:e0:23:3a:43:b4:6b:d7:
                    7e:06:d1:b3:00:97:5b:b4:91:05:9e:86:6f:f5:73:
                    96:cd:23:e8:61:5b:ae:89:ec:31:de:8f:f1:5a:f2:
                    e1:c3:53:d4:34:fd:e9:79:8f:84:01:38:1b:40:39:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:83:5A:97:16:6A:D1:ED:92:3E:15:93:BE:D8:C7:E7:34:58:23:9A
            X509v3 Authority Key Identifier:
                keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/98F2F9C8762611F09B1FE90DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:87:26:54:72:a2:cc:e4:d9:c4:14:e1:be:0a:8a:17:0c:
         d5:f8:95:0e:fc:b3:be:e0:0e:4f:dc:d8:a9:3b:57:a9:0f:35:
         13:93:1f:ed:dd:ab:5b:53:0f:d5:19:08:d4:a8:c1:05:bd:89:
         b4:19:92:8b:e1:19:d0:0d:49:7d:07:23:72:52:b0:47:60:22:
         9e:5c:40:a8:b3:84:0b:f1:38:f4:b7:47:a4:30:b5:ef:3a:da:
         16:bb:fc:c6:05:80:9e:87:f5:52:f7:e4:6e:b6:e5:d7:1a:f5:
         69:2b:22:86:bc:2f:4f:5c:59:80:4e:99:f2:1c:16:05:ec:75:
         5d:8e:b4:55:08:b3:39:cf:2a:92:27:d1:40:3e:c3:92:68:ff:
         9e:4b:05:59:a7:6f:71:4d:e1:4c:9d:55:e3:48:ee:50:0b:23:
         17:20:0d:14:9b:07:8b:b8:9d:ab:44:56:e0:34:56:69:70:6b:
         2a:53:c2:76:e2:e4:1e:b4:f5:85:60:b9:94:e5:32:27:a8:09:
         2f:1d:c1:15:54:6e:ea:b3:c3:04:48:b7:41:08:25:9d:1e:e9:
         5a:9b:ff:8a:64:b0:89:69:0b:52:42:0b:61:51:fd:95:0a:7b:
         dc:8c:f1:f0:f7:18:fa:ff:ec:25:95:de:02:68:ff:ce:db:19:
         b3:76:93:24
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE
NjVEMUI2MEUwHhcNMjUwODEwMjAxNDIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk4ZmQ5Yi01ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2SOQcDs3UZsuanwEXS90hjSMZIQpbrwr+n/a2lXyRhpMRq4vrTafH9rg4yep
xOvUHQWrKRVnWu26ZSTxUiW6gFXr+HoMobR/CqzcyZfchbAdrE2y1Bsz7SepKAwI
0gSjEK0NQHRK24D5H043U411irlIGJOiNhRGZqHaJXU5FBV+cwtOmaSJW6AVssQ5
NuW/WJMqeybgr9vyr4Xl+ao/fNvnbbqEmKvsbh5Mf9P/BdTVaxU1QSKtnV7/8XeD
iGHpRnLt8/39tTHIxeAjOkO0a9d+BtGzAJdbtJEFnoZv9XOWzSPoYVuuiewx3o/x
WvLhw1PUNP3peY+EATgbQDkr/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGGDWpcW
atHtkj4Vk77Yx+c0WCOaMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD
NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTVBQzgvQkE2RDI3RDQ2QzVEMTFFRDhDNUM2NDFDQzRGOUFFMDIvOThGMkY5Qzg3
NjI2MTFGMDlCMUZFOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnKsowDQYJKoZIhvcNAQELBQADggEBACqIhyZUcqLM5NnE
FOG+CooXDNX4lQ78s77gDk/c2Kk7V6kPNROTH+3dq1tTD9UZCNSowQW9ibQZkovh
GdANSX0HI3JSsEdgIp5cQKizhAvxOPS3R6Qwte862ha7/MYFgJ6H9VL35G625dca
9WkrIoa8L09cWYBOmfIcFgXsdV2OtFUIsznPKpIn0UA+w5Jo/55LBVmnb3FN4Uyd
VeNI7lALIxcgDRSbB4u4natEVuA0VmlwaypTwnbi5B609YVguZTlMieoCS8dwRVU
buqzwwRIt0EIJZ0e6Vqb/4pksIlpC1JCC2FR/ZUKe9yM8fD3GPr/7CWV3gJo/87b
GbN2kyQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:30 2025 by rpki-client