Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E2D7894562911F0A243A66DC4F9AE02.roa
File:                     5E2D7894562911F0A243A66DC4F9AE02.roa (raw, json)
Hash identifier:          w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=
Subject key identifier:   8D:19:A3:95:AB:D0:EA:9C:14:C8:BE:E5:7D:D2:05:57:57:04:A0:D2
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       63
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E2D7894562911F0A243A66DC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 03:13:32 +0000
ROA not before:           Tue 01 Jul 2025 03:13:32 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     151654
IP address blocks:        103.49.42.0/24 maxlen: 24
                          103.49.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Jul  1 03:13:32 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6863525c-bdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:45:3c:8b:99:f9:42:70:47:87:3d:dc:fa:
                    30:50:0f:12:86:1d:c2:af:f1:f1:57:e9:ee:c6:4f:
                    1c:5e:31:db:43:3d:e1:b4:53:6a:c3:aa:24:d4:f0:
                    1f:05:ae:42:77:1e:5b:65:4e:b3:91:07:32:34:b8:
                    70:61:91:6f:e7:ef:d3:1d:57:d0:90:24:6d:14:bf:
                    24:ce:a9:fc:0d:11:1d:15:ee:17:7c:b9:1d:3a:30:
                    a5:6e:e0:80:2e:1a:31:5f:5e:d4:77:e0:24:38:5d:
                    00:81:fc:a8:a4:1e:1c:fa:ad:1b:c0:91:b6:2a:21:
                    75:a7:7c:b7:47:b5:f2:9c:d1:1f:c7:fe:1c:45:2b:
                    6b:cc:3c:0d:0e:b2:3d:b1:5f:e5:b8:41:81:80:4e:
                    ab:3e:0b:aa:5d:46:2e:74:d5:4c:d3:38:77:f0:c0:
                    ae:bf:ed:d9:59:99:52:a8:46:b1:69:67:e3:4a:53:
                    1c:22:cd:38:4b:fb:4e:45:5e:58:db:30:6b:0f:4c:
                    84:d1:60:68:bd:33:de:3e:25:cd:3e:4e:ea:97:81:
                    90:39:59:85:eb:74:9b:6d:6e:70:79:e2:98:16:75:
                    05:8c:5a:82:6a:3c:3f:88:ec:89:74:3a:de:f7:a7:
                    42:d4:93:51:1f:2c:23:da:6f:c2:b0:c0:0d:b6:18:
                    1d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:19:A3:95:AB:D0:EA:9C:14:C8:BE:E5:7D:D2:05:57:57:04:A0:D2
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E2D7894562911F0A243A66DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:73:81:d0:fb:e8:3a:43:c0:f1:da:3b:5c:49:a6:ff:28:6c:
         16:f8:8f:5a:89:ec:f3:cd:93:27:be:c8:ef:ba:2b:ce:fd:f8:
         40:64:22:a2:8c:9e:21:a6:88:bd:0c:25:8c:de:e5:39:d6:43:
         ba:20:fa:f5:3b:d0:ee:37:fa:a2:c1:15:af:89:c7:2d:7b:ea:
         69:da:cd:7e:fc:20:d0:c5:80:dc:32:82:bb:49:1a:75:b5:ce:
         9e:c2:8b:6a:89:31:3d:f1:cf:f7:b8:0a:e8:f8:ac:91:a4:44:
         d9:1b:b9:2e:02:e0:11:60:0b:11:a4:e0:ec:1d:81:86:a3:b9:
         7b:7c:25:5b:c7:56:b4:44:7a:56:f3:60:cb:39:70:0f:e7:05:
         fc:5c:14:94:6f:4a:57:03:d7:c3:dd:17:91:75:9a:70:17:17:
         97:ff:a6:27:bd:d9:dd:b0:9c:74:af:50:b0:6a:ce:91:32:a1:
         59:59:e8:e9:39:00:6c:a9:25:a2:36:5c:f2:14:3c:e5:57:1a:
         95:27:39:cd:0b:51:1e:cc:67:a9:e5:06:fd:6d:c7:1e:a6:c2:
         17:86:a9:c4:13:7e:19:d5:59:38:f1:6d:5e:ca:ec:5d:66:98:
         e9:2f:75:d6:c1:e9:f9:06:1a:3b:4f:62:a9:df:8f:85:55:a6:
         dc:f6:2b:f7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB
NkVEQ0ZCOTAeFw0yNTA3MDEwMzEzMzJaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NjM1MjVjLWJkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGykU8i5n5QnBHhz3c+jBQDxKGHcKv8fFX6e7GTxxeMdtDPeG0U2rDqiTU8B8F
rkJ3HltlTrORBzI0uHBhkW/n79MdV9CQJG0UvyTOqfwNER0V7hd8uR06MKVu4IAu
GjFfXtR34CQ4XQCB/KikHhz6rRvAkbYqIXWnfLdHtfKc0R/H/hxFK2vMPA0Osj2x
X+W4QYGATqs+C6pdRi501UzTOHfwwK6/7dlZmVKoRrFpZ+NKUxwizThL+05FXljb
MGsPTITRYGi9M94+Jc0+TuqXgZA5WYXrdJttbnB54pgWdQWMWoJqPD+I7Il0Ot73
p0LUk1EfLCPab8KwwA22GB1rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUjRmjlavQ
6pwUyL7lfdIFV1cEoNIwHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC
QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi81RTJENzg5NDU2
MjkxMUYwQTI0M0E2NkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcxKjANBgkqhkiG9w0BAQsFAAOCAQEAwnOB0PvoOkPA8do7
XEmm/yhsFviPWons882TJ77I77orzv34QGQiooyeIaaIvQwljN7lOdZDuiD69TvQ
7jf6osEVr4nHLXvqadrNfvwg0MWA3DKCu0kadbXOnsKLaokxPfHP97gK6PiskaRE
2Ru5LgLgEWALEaTg7B2BhqO5e3wlW8dWtER6VvNgyzlwD+cF/FwUlG9KVwPXw90X
kXWacBcXl/+mJ73Z3bCcdK9QsGrOkTKhWVno6TkAbKklojZc8hQ85VcalSc5zQtR
HsxnqeUG/W3HHqbCF4apxBN+GdVZOPFtXsrsXWaY6S911sHp+QYaO09iqd+PhVWm
3PYr9w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 13:08:29 2025 by rpki-client