Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa
File:                     4AD97410632C11EE96048122C4F9AE02.roa (raw, json)
Hash identifier:          Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=
Subject key identifier:   A6:56:8A:30:43:16:EB:85:2C:2D:F9:10:E2:73:9D:A5:05:98:8C:D8
Certificate issuer:       /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial:       0CAA
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa
Signing time:             Wed 30 Apr 2025 18:27:44 +0000
ROA not before:           Wed 30 Apr 2025 18:27:44 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.135.138.0/24 maxlen: 24
                          103.135.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 18:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
        Validity
            Not Before: Apr 30 18:27:44 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68126ba0-0126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:14:72:66:f2:0e:41:cc:ea:75:64:e5:69:
                    28:2a:ac:c7:a7:51:61:8c:40:c5:6c:2e:4a:6b:00:
                    14:bc:7d:05:70:fc:0a:4d:0f:9e:2c:68:fb:41:c3:
                    1f:09:3a:4b:5c:2a:1d:8d:c1:d3:e5:ee:09:d9:b4:
                    03:05:46:10:f7:f5:79:55:3f:ae:cb:e4:85:f7:46:
                    5f:42:d2:54:e5:a4:1e:af:a2:50:65:32:0d:e2:75:
                    37:69:fe:6e:4d:78:fe:85:e4:c4:f2:3e:c1:da:a9:
                    ef:93:79:49:66:b5:82:88:9f:8f:f1:0c:66:e8:bd:
                    dd:ef:e5:10:31:42:5b:1c:26:c7:12:49:40:0d:85:
                    9c:aa:d4:68:08:f6:b2:8c:95:aa:e4:d5:ff:45:28:
                    ce:cb:36:50:33:48:3f:3c:61:10:2d:23:b9:f8:1e:
                    6c:b8:76:25:70:aa:92:a5:50:b8:05:15:06:1f:3b:
                    ea:01:05:34:92:bf:85:88:37:42:f6:69:80:f8:7e:
                    c9:18:65:b9:bd:18:fa:be:df:97:63:7c:e8:8c:0c:
                    73:cb:88:a6:a3:cf:cd:c4:68:b6:95:f4:af:f7:45:
                    cd:ed:12:f1:3a:9b:e4:8c:b6:e5:e8:85:0c:36:5d:
                    0e:c7:ff:93:21:dd:0a:dd:3b:c7:3c:18:61:81:d1:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:8A:30:43:16:EB:85:2C:2D:F9:10:E2:73:9D:A5:05:98:8C:D8
            X509v3 Authority Key Identifier:
                keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:9c:eb:89:33:9a:1c:4a:ec:37:a0:8a:fc:3b:3c:6c:10:
         1c:c8:20:c5:ef:a7:06:fc:44:56:63:50:2f:e2:9b:45:7e:73:
         bb:fc:10:91:9b:53:cf:bf:34:44:c4:2a:2c:a3:bd:ad:60:08:
         a2:36:2b:31:50:95:43:f5:8f:9c:42:fd:92:72:2a:18:31:75:
         21:2f:ab:b7:91:6a:3f:b0:7e:4a:90:ff:b8:37:a7:06:7e:ec:
         3b:8f:df:5c:a3:9f:8d:8d:53:83:21:95:5b:fb:91:dd:ac:64:
         a8:b9:48:fd:5e:19:3a:1c:56:af:31:49:3c:c9:79:e9:25:e6:
         b4:29:01:bb:c4:2e:74:64:65:15:4b:b6:70:f8:29:3e:3e:a9:
         32:ce:98:20:b1:fd:92:e3:2d:60:34:78:a2:33:c2:2a:d7:70:
         7c:c2:0d:6a:d5:95:58:d9:eb:97:91:9c:43:20:d2:7f:93:bc:
         fc:91:9e:13:76:17:19:ee:99:ab:1c:5e:8a:d3:bd:19:9d:6f:
         30:bf:a2:85:43:16:40:ef:49:73:13:b5:1c:61:8b:9a:e7:48:
         10:07:03:8c:e0:8e:ed:26:01:51:a1:34:66:b1:44:c6:d5:35:
         60:43:d8:61:f1:4c:b8:c6:2f:06:6d:9b:18:10:fa:c2:dc:83:
         b9:d2:9d:8b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE
QjFBNTBEQTQwHhcNMjUwNDMwMTgyNzQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEyNmJhMC0wMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx54UcmbyDkHM6nVk5WkoKqzHp1FhjEDFbC5KawAUvH0FcPwKTQ+eLGj7QcMf
CTpLXCodjcHT5e4J2bQDBUYQ9/V5VT+uy+SF90ZfQtJU5aQer6JQZTIN4nU3af5u
TXj+heTE8j7B2qnvk3lJZrWCiJ+P8Qxm6L3d7+UQMUJbHCbHEklADYWcqtRoCPay
jJWq5NX/RSjOyzZQM0g/PGEQLSO5+B5suHYlcKqSpVC4BRUGHzvqAQU0kr+FiDdC
9mmA+H7JGGW5vRj6vt+XY3zojAxzy4imo8/NxGi2lfSv90XN7RLxOpvkjLbl6IUM
Nl0Ox/+TId0K3TvHPBhhgdHNAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKZWijBD
FuuFLC35EOJznaUFmIzYMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2
N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvNEFEOTc0MTA2
MzJDMTFFRTk2MDQ4MTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnh4owDQYJKoZIhvcNAQELBQADggEBAG5inOuJM5ocSuw3
oIr8OzxsEBzIIMXvpwb8RFZjUC/im0V+c7v8EJGbU8+/NETEKiyjva1gCKI2KzFQ
lUP1j5xC/ZJyKhgxdSEvq7eRaj+wfkqQ/7g3pwZ+7DuP31yjn42NU4MhlVv7kd2s
ZKi5SP1eGTocVq8xSTzJeekl5rQpAbvELnRkZRVLtnD4KT4+qTLOmCCx/ZLjLWA0
eKIzwirXcHzCDWrVlVjZ65eRnEMg0n+TvPyRnhN2FxnumascXorTvRmdbzC/ooVD
FkDvSXMTtRxhi5rnSBAHA4zgju0mAVGhNGaxRMbVNWBD2GHxTLjGLwZtmxgQ+sLc
g7nSnYs=
-----END CERTIFICATE-----
Generated at Thu May 15 06:47:37 2025 by rpki-client