Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/82CDD7C4B0C011F09232CD7BC4F9AE02.roa
File:                     82CDD7C4B0C011F09232CD7BC4F9AE02.roa (raw, json)
Hash identifier:          jehIFKXQzxSa2naNE6wehGEUSZh95Rm5N+knZ8mynTY=
Subject key identifier:   8A:3E:0D:C9:B5:93:F3:52:09:4E:1C:23:D5:AE:0A:E9:6F:B8:FE:69
Certificate issuer:       /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9
Certificate serial:       04
Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/82CDD7C4B0C011F09232CD7BC4F9AE02.roa
Signing time:             Fri 24 Oct 2025 10:20:11 +0000
ROA not before:           Fri 24 Oct 2025 10:20:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154147
IP address blocks:        49.213.46.0/23 maxlen: 23
                          2402:2320::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl
                          rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 08:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9
        Validity
            Not Before: Oct 24 10:20:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68fb52da-021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:92:a4:8c:dc:11:65:c7:5d:bc:1b:15:d3:
                    b6:96:36:de:bc:b3:1b:8f:1f:59:78:53:f6:f6:ea:
                    d0:7c:3b:28:e3:4c:9d:03:98:33:39:fe:d5:b3:e4:
                    63:74:02:aa:07:29:ef:f7:26:c2:94:9f:0c:aa:99:
                    8f:a4:23:f9:38:d2:dc:27:c6:fc:f3:60:73:2c:fa:
                    c1:96:4a:aa:23:6a:9f:aa:b3:49:42:e0:90:d1:73:
                    15:96:ea:51:31:76:56:9d:09:ce:dc:63:c2:ef:ba:
                    94:47:ec:46:c3:9b:f3:13:1a:99:c5:6d:90:1a:d8:
                    4c:de:99:20:e7:4e:c6:bd:93:3b:fd:3a:e9:e9:d8:
                    2b:53:cf:6b:f1:45:16:e0:b4:b7:c0:90:2b:75:15:
                    45:0f:2e:da:54:90:4d:98:29:c2:4f:e6:01:5d:1a:
                    f1:b1:97:71:13:07:ac:ee:c7:ac:a9:bd:32:5c:bf:
                    2b:22:4c:0e:85:2a:7b:b3:7f:2c:5b:e6:4b:69:23:
                    2f:92:2c:b9:e0:59:48:68:33:37:17:03:81:65:8c:
                    bf:7a:14:b3:62:63:ae:98:c6:75:2e:81:6c:f3:98:
                    57:46:66:a5:2b:fc:0a:ac:25:85:00:80:d5:0f:86:
                    2e:5c:ee:ae:80:62:2c:b8:1c:fd:f6:da:33:f5:eb:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3E:0D:C9:B5:93:F3:52:09:4E:1C:23:D5:AE:0A:E9:6F:B8:FE:69
            X509v3 Authority Key Identifier:
                keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/82CDD7C4B0C011F09232CD7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.46.0/23
                IPv6:
                  2402:2320::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:69:b8:48:83:8b:33:11:06:ee:6c:c0:5c:84:c8:73:52:ea:
         41:8e:15:ec:d6:fd:58:83:0e:b8:39:f3:c4:91:d3:e3:d8:8f:
         e9:a4:a3:4a:6f:0a:96:a6:d3:6d:e4:8c:43:98:d9:a5:10:07:
         2f:79:0c:78:14:58:fe:e8:dd:b5:af:c2:39:66:b7:35:3e:22:
         2c:b8:4d:60:14:8f:08:fe:a4:ed:6f:a8:8f:cf:34:55:08:ad:
         4d:7c:f1:d7:22:fd:b4:2d:ac:8a:48:be:09:b8:2b:c2:f5:51:
         05:9d:4c:0d:bf:9a:d3:cb:63:c8:5f:95:bd:9d:0e:d6:ef:83:
         44:b2:7b:82:a4:6c:57:0f:44:fe:1c:5b:d8:23:13:82:f0:ac:
         b5:bd:8b:3f:45:2d:74:93:2c:e9:f0:2f:e6:fb:38:24:80:45:
         b0:8e:78:27:41:56:f2:59:f0:08:c9:97:ac:cd:c3:d6:5e:b6:
         16:34:82:33:0b:58:a6:bd:f7:78:87:d2:82:47:91:8f:ce:8c:
         c9:b0:0f:da:36:76:01:e3:89:4e:34:a4:9f:76:d2:8a:17:8b:
         f9:0c:5c:d1:79:fe:42:99:04:6c:a5:cf:e8:85:c6:b7:be:b0:
         ec:61:c4:d0:af:6c:cf:7d:2d:c6:2e:e2:53:e9:ba:c2:b7:67:
         51:20:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:35:15 2025 by rpki-client