Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa
File:                     3E251228F81711ECBF85A038C4F9AE02.roa (raw, json)
Hash identifier:          caDwJbItaMkMbYRFf35kercOFxduC/QaXG95XjbXJ4M=
Subject key identifier:   44:27:7C:0E:49:F9:A0:2F:59:44:44:24:20:FB:FB:BD:87:7E:C0:C1
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       02F1
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa
Signing time:             Tue 23 Sep 2025 01:49:56 +0000
ROA not before:           Tue 23 Sep 2025 01:49:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9336
IP address blocks:        103.99.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Sep 23 01:49:56 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d1fcc3-70cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:2d:5c:53:5a:ca:00:4e:35:03:4d:db:7f:
                    a0:3b:9f:3f:0a:42:a9:29:d9:fc:65:4e:da:02:2f:
                    9f:71:6d:e6:a4:d2:95:24:b9:97:ff:1d:89:6d:fc:
                    82:95:29:fc:63:9e:c4:f4:4e:e3:ed:e6:5e:4e:87:
                    0c:e2:1e:b7:6f:5b:b4:e8:fa:ef:8f:cc:02:22:c1:
                    a6:9c:7d:46:31:bd:63:2b:2a:91:dc:2e:06:68:f0:
                    27:af:1d:74:fa:32:13:cc:29:fa:94:09:ef:ce:1b:
                    fd:fe:5e:11:ac:fe:09:db:fa:ac:09:f6:92:f3:5a:
                    c2:7b:93:d8:c8:8b:9f:17:17:d9:36:ac:82:36:51:
                    80:75:e6:e6:f5:1b:ee:e4:c5:5e:06:1f:e5:e9:d4:
                    7c:27:23:e9:a6:8c:f9:7f:43:02:55:10:2f:45:49:
                    ad:f7:0a:0f:2b:f3:e8:b2:ce:7b:62:9a:82:38:ad:
                    cd:47:fd:b5:b6:78:79:9a:95:87:a5:4c:78:e5:c6:
                    23:5f:5e:b4:90:b8:e2:b6:9f:2a:a9:db:23:45:fd:
                    7b:e1:95:96:cb:db:fe:dc:26:82:e4:e3:3c:20:8f:
                    e7:f5:08:94:23:83:de:d5:d1:c5:04:fe:79:22:a2:
                    cc:75:fb:27:82:33:11:2e:fd:90:6a:c0:86:f8:13:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:7C:0E:49:F9:A0:2F:59:44:44:24:20:FB:FB:BD:87:7E:C0:C1
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:46:fd:cb:ae:79:7f:76:fd:f9:8d:a8:9a:f8:42:90:ca:b2:
         24:80:4d:ba:a1:32:fe:19:82:bc:08:db:2a:49:00:7f:fc:72:
         8c:1a:1a:23:e3:71:85:1b:a6:19:23:bb:6a:50:f7:e6:9a:c9:
         2c:a7:37:23:ed:e7:a5:06:c6:5c:79:1b:f8:91:25:12:e9:a6:
         60:47:6c:70:5c:b4:2e:3b:b3:e5:1e:ca:7a:54:21:34:ad:c2:
         ba:00:6c:17:0a:b4:0b:ba:3b:4c:52:3d:3e:d8:d4:19:2c:2c:
         87:b4:6a:83:d1:bc:82:92:92:50:c8:21:c1:f2:29:3f:5c:46:
         d7:65:31:77:ea:ca:93:04:8b:a0:bb:b6:7b:2b:c7:21:53:71:
         f1:78:e5:e0:4e:f2:42:7a:61:f7:0d:5b:87:0d:02:98:75:1b:
         d0:97:b8:0f:76:75:02:5d:42:a3:8f:be:d2:77:0e:07:cd:32:
         8d:7b:59:6a:63:84:a6:9c:4d:51:fe:bc:79:af:77:4d:69:7d:
         59:7c:f7:ad:e0:b9:64:5a:09:be:b8:3f:1b:b9:8c:4e:06:9a:
         2b:37:2f:5b:fe:c3:63:46:75:da:69:a2:9a:17:5d:41:c7:e2:
         13:58:92:05:4d:90:58:84:d4:90:d5:36:c9:bf:ad:46:70:56:
         50:03:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:37 2025 by rpki-client