Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa
File:                     2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (raw, json)
Hash identifier:          vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=
Subject key identifier:   11:AD:2E:97:50:B6:B3:3F:B7:B7:62:39:26:6E:6E:9A:9A:C7:E2:5E
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       0F
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa
Signing time:             Sun 28 Sep 2025 15:09:47 +0000
ROA not before:           Sun 28 Sep 2025 15:09:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139026
IP address blocks:        103.183.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Sep 28 15:09:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68d94fbb-15d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:a0:bf:bf:b4:ec:38:6a:68:93:5a:29:05:
                    22:78:cc:57:8f:ae:17:0f:6e:fa:73:75:02:80:bf:
                    22:32:66:50:e9:d8:65:b8:43:2f:6d:f9:41:f5:9c:
                    8b:cd:9a:c6:46:41:ba:82:8d:25:33:b1:7e:8e:0a:
                    ca:29:cb:d4:4c:33:43:ba:10:09:21:88:20:77:e8:
                    e0:95:24:0a:ae:29:f3:d8:da:79:bc:45:2a:78:af:
                    88:e5:7b:10:cf:76:3a:4c:4f:0a:bd:89:f3:9e:10:
                    f6:3f:c5:66:55:df:6b:cd:78:39:bf:80:c7:f4:76:
                    fe:eb:f8:49:13:67:31:10:fe:02:17:d4:dd:c1:48:
                    ca:90:c8:2d:de:c9:44:4b:2c:35:b7:27:c7:d9:b3:
                    45:47:2d:41:67:ba:3f:bd:6e:39:d5:67:3e:a7:cf:
                    79:e5:bf:11:5b:92:74:40:54:f6:47:6a:1d:7e:80:
                    50:61:03:fc:43:c4:1e:70:54:0e:23:ef:ea:0a:33:
                    b5:f7:3d:e9:09:6b:f5:a6:f6:8b:ff:9f:af:41:6d:
                    f7:4e:f1:8b:8a:3f:2a:09:27:3c:5e:47:ef:fb:4b:
                    0d:04:7f:f3:92:cf:43:e5:16:f5:d7:01:51:78:c9:
                    a4:16:51:50:bc:ad:ba:3d:b4:c3:fb:a9:8a:66:84:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:2E:97:50:B6:B3:3F:B7:B7:62:39:26:6E:6E:9A:9A:C7:E2:5E
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:d5:d0:72:80:50:55:57:37:b3:1d:e6:ee:a7:60:bd:e1:2b:
         2c:dd:12:04:13:7b:bf:ae:c9:f4:d8:a0:b8:c0:db:d4:6c:d1:
         e1:b1:0c:71:ae:3c:34:45:fc:d8:4e:71:c9:cd:ce:9b:0f:fc:
         5c:09:bc:9e:d6:46:a0:63:2f:74:84:e0:4f:da:ca:18:89:f7:
         e6:82:8b:89:00:f9:b4:ac:46:37:86:25:df:6b:f5:d2:d7:51:
         c6:33:8d:f6:7f:f5:30:90:85:96:c4:4c:5f:26:1b:33:67:d4:
         94:50:a5:2a:9d:ab:36:b7:e5:86:da:8c:16:ec:54:a0:e4:5f:
         39:64:22:e6:93:9b:49:c3:25:b0:0c:54:4a:ed:a4:ce:bc:0f:
         6f:96:04:e3:f6:9c:13:06:ab:9b:44:4c:8d:1a:3e:19:ea:80:
         0c:a7:4e:39:d1:ed:05:e8:04:40:26:d6:4b:6a:5d:cd:8e:06:
         d8:7d:2b:d0:cd:67:cf:c1:3a:1a:83:b1:c1:cb:41:57:d3:33:
         ca:46:1c:58:18:b0:06:d4:3f:b3:6d:d2:bb:e2:e1:0b:33:e2:
         bc:b3:f6:40:02:8a:ed:4c:2b:bc:23:95:79:2e:a3:0b:e1:2e:
         b0:b7:2e:0e:f6:48:bf:76:7e:67:35:01:22:eb:93:66:67:2e:
         73:57:a6:26
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NEM3MDExMC8GA1UEBRMoNjMyM0U1NkNEOTkyQUI4RkNFMzg3NTMxNUFFNjFBQzVF
NDcxQUNCRDAeFw0yNTA5MjgxNTA5NDdaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4ZDk0ZmJiLTE1ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCOaC/v7TsOGpok1opBSJ4zFePrhcPbvpzdQKAvyIyZlDp2GW4Qy9t+UH1nIvN
msZGQbqCjSUzsX6OCsopy9RMM0O6EAkhiCB36OCVJAquKfPY2nm8RSp4r4jlexDP
djpMTwq9ifOeEPY/xWZV32vNeDm/gMf0dv7r+EkTZzEQ/gIX1N3BSMqQyC3eyURL
LDW3J8fZs0VHLUFnuj+9bjnVZz6nz3nlvxFbknRAVPZHah1+gFBhA/xDxB5wVA4j
7+oKM7X3PekJa/Wm9ov/n69BbfdO8YuKPyoJJzxeR+/7Sw0Ef/OSz0PlFvXXAVF4
yaQWUVC8rbo9tMP7qYpmhD6zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEa0ul1C2
sz+3t2I5Jm5umprH4l4wHwYDVR0jBBgwFoAUYyPlbNmSq4/OOHUxWuYaxeRxrL0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2
NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRfT09IVXhXdVlheGVSeHJM
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWXlQbGJObVNxNF9PT0hVeFd1WWF4ZVJ4ckwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi8yQkUxRTMzQTlD
N0QxMUYwQkQ2RkZGNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGe3dDANBgkqhkiG9w0BAQsFAAOCAQEAw9XQcoBQVVc3sx3m
7qdgveErLN0SBBN7v67J9NiguMDb1GzR4bEMca48NEX82E5xyc3Omw/8XAm8ntZG
oGMvdITgT9rKGIn35oKLiQD5tKxGN4Yl32v10tdRxjON9n/1MJCFlsRMXyYbM2fU
lFClKp2rNrflhtqMFuxUoORfOWQi5pObScMlsAxUSu2kzrwPb5YE4/acEwarm0RM
jRo+GeqADKdOOdHtBegEQCbWS2pdzY4G2H0r0M1nz8E6GoOxwctBV9MzykYcWBiw
BtQ/s23Su+LhCzPivLP2QAKK7UwrvCOVeS6jC+EusLcuDvZIv3Z+ZzUBIuuTZmcu
c1emJg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:10:29 2025 by rpki-client