Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
File:                     1A83389CC35211EE8CE04C38C4F9AE02.roa (raw, json)
Hash identifier:          wP5Do/J+7GR346S2KVvf1dpQZtkQwT1BPnhQO5L+JJ4=
Subject key identifier:   7D:59:4B:CA:9B:A1:09:70:6A:46:D4:15:02:D2:13:1F:87:69:CC:C6
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       350C
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 14:50:19 +0000
ROA not before:           Wed 30 Jul 2025 14:50:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     23925
IP address blocks:        210.246.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13580 (0x350c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 30 14:50:19 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688a312a-2b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:f4:b7:7a:a1:ac:07:6e:54:46:c2:33:b5:
                    14:7d:3b:cd:fc:b4:2c:a8:ff:ed:4f:21:ca:a7:fd:
                    00:e2:d0:bc:b7:2a:1e:e9:7c:99:3f:53:1c:b9:e1:
                    57:b3:74:5a:4f:75:eb:bd:3c:cf:fb:3e:dc:f8:b8:
                    c5:a2:51:86:dc:b6:54:d1:aa:2e:31:46:21:db:c0:
                    94:70:99:9f:f1:92:d2:e2:78:2d:55:e0:0a:6f:8a:
                    13:a2:db:9d:62:5b:b6:68:f2:27:ea:a4:a4:3b:ed:
                    97:3d:dc:94:f4:43:9a:4e:33:65:cf:f8:95:05:95:
                    df:e2:5a:e3:de:33:a5:eb:7b:01:6c:2b:ab:02:35:
                    b0:dd:9c:61:8f:e8:9b:be:7d:a0:d6:ba:91:46:02:
                    00:c4:2c:29:53:98:5e:46:65:c8:9e:9c:f2:2c:5b:
                    df:63:b7:96:eb:f3:2b:1f:74:55:d7:c5:6b:10:97:
                    02:7c:a4:18:08:a7:a5:f8:24:82:77:e9:08:0b:37:
                    af:e9:68:33:b7:31:f0:7d:f9:07:d9:c6:e6:75:17:
                    ef:80:98:60:48:06:fd:e8:de:71:89:60:6e:2c:c3:
                    67:a1:bd:ff:cb:6a:b6:bf:81:be:cc:a9:c7:78:e5:
                    35:b2:f5:43:05:d2:e4:18:0b:2b:5e:95:aa:8c:ab:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:4B:CA:9B:A1:09:70:6A:46:D4:15:02:D2:13:1F:87:69:CC:C6
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:04:02:9f:3b:e8:57:37:f5:e9:f8:fb:cb:a8:ca:2c:8d:
         29:b0:68:b3:1e:6b:28:5d:9b:71:f5:ed:77:29:38:31:94:1b:
         b2:2c:b7:dc:65:fd:9f:f8:0c:8a:76:78:ea:7c:0b:d3:0d:1f:
         84:52:be:b9:71:e2:05:36:06:5c:9d:ca:03:17:ff:3b:85:f9:
         ab:60:f4:52:07:22:12:39:df:d6:64:b6:d4:e1:c9:57:b7:33:
         87:01:9f:03:78:c0:41:77:10:63:67:71:7c:65:6a:fe:4a:6f:
         64:2b:6f:46:3f:2b:4f:1a:b3:56:8d:54:dd:eb:63:70:fa:b2:
         07:11:0d:ec:62:08:d4:0c:4c:db:22:bf:57:80:ec:9f:de:54:
         57:68:56:42:99:ac:ca:f5:05:48:38:17:08:1f:d3:2e:c7:50:
         8b:94:5e:b2:69:24:81:92:54:91:c8:b3:d9:4c:fd:1a:28:6b:
         7f:f0:78:cb:0f:15:6d:dc:a8:83:d9:ca:85:4e:1f:51:70:ac:
         26:eb:aa:ab:fb:42:d0:3d:88:4a:06:c9:d0:55:59:88:48:57:
         18:bf:91:b9:82:83:0b:ae:50:99:43:c6:cb:a6:0f:7b:f2:47:
         7c:ab:ac:cd:f0:42:39:84:c0:af:28:38:42:14:db:87:c7:63:
         c5:4a:8c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:19 2025 by rpki-client