Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A50EE218C34D11EEBC95A913C4F9AE02.roa
File:                     A50EE218C34D11EEBC95A913C4F9AE02.roa (raw, json)
Hash identifier:          5q/2MUPjpxwhlN6OCcanacRv9yZj3jDJtQjCybC3W8U=
Subject key identifier:   A2:B7:D2:6E:DC:B6:B6:38:6B:F1:D5:A6:0A:83:86:CE:C8:8B:68:C9
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       3509
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A50EE218C34D11EEBC95A913C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 14:50:16 +0000
ROA not before:           Wed 30 Jul 2025 14:50:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138524
IP address blocks:        210.246.80.0/24 maxlen: 24
                          210.246.81.0/24 maxlen: 24
                          210.246.82.0/24 maxlen: 24
                          210.246.83.0/24 maxlen: 24
                          210.246.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13577 (0x3509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 30 14:50:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688a3128-8365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:b0:e3:5d:a5:86:1f:99:74:c6:40:13:d2:
                    12:c2:74:cb:30:78:1c:40:41:e7:23:de:7c:c0:f4:
                    6a:51:d7:17:ed:6a:2e:b8:b5:9e:14:e9:2b:26:11:
                    9c:f5:7e:51:22:ab:85:58:8d:4a:d2:4e:5b:16:f5:
                    fa:8e:d2:fe:7a:b8:d8:ea:60:2a:e8:d0:97:f6:e7:
                    ce:a7:45:e4:56:01:f9:07:4c:c8:2b:c7:ff:7b:d9:
                    1f:3e:ab:f6:4f:fe:7a:89:17:5e:e5:d6:35:dc:c6:
                    dc:d7:da:eb:2a:fc:b4:8e:f1:94:83:ab:2a:56:9e:
                    7a:31:a9:5e:29:c5:ea:50:4e:82:c5:76:c8:1b:2c:
                    b7:f3:7c:09:2a:81:08:58:77:5b:7e:f8:80:31:1b:
                    96:1e:f5:7f:40:e2:59:44:10:d9:9a:c9:ff:42:7e:
                    a6:dc:58:c9:f4:88:f1:8e:d6:53:dd:81:a4:28:92:
                    3e:ff:b7:f1:97:df:f2:af:db:59:47:0a:f8:a8:ef:
                    d8:11:9a:08:91:d7:98:2c:40:9f:ca:d1:36:fa:4d:
                    1d:46:73:f9:bc:06:0d:28:eb:9c:0a:f2:fc:93:82:
                    83:8f:2d:cd:ad:c6:0d:29:78:26:25:df:63:03:2e:
                    d8:69:a9:15:d5:88:8e:ed:e3:7c:5a:44:4f:49:91:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:D2:6E:DC:B6:B6:38:6B:F1:D5:A6:0A:83:86:CE:C8:8B:68:C9
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A50EE218C34D11EEBC95A913C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.80.0-210.246.84.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:34:77:e1:a6:07:07:7f:81:71:ee:f6:e6:87:33:ca:b6:
         38:3a:bb:33:8b:20:4a:2c:7b:46:ce:96:ca:12:7a:d1:55:80:
         9f:01:3b:e4:f9:3b:16:20:e6:d4:68:fd:d7:ed:13:3a:f4:68:
         4f:a4:4d:8c:de:53:3e:b0:19:1e:94:52:49:72:8b:93:d0:16:
         7b:a2:0a:a3:01:5f:da:c1:a9:05:ec:3d:b3:4d:a8:1a:0f:25:
         97:46:85:b0:57:01:6d:8c:3c:ec:25:a1:ab:f2:e6:15:03:c8:
         00:92:13:66:69:74:46:cb:6e:0d:dd:57:99:f5:b0:1c:19:78:
         26:8d:17:70:70:e5:03:73:34:f0:13:c4:67:20:04:2b:e6:0e:
         57:64:aa:17:ff:e5:c2:21:02:77:32:88:f5:e5:5b:c4:e7:41:
         33:a2:44:3c:89:c0:65:47:eb:bf:75:a2:36:35:85:32:e5:60:
         db:84:fc:1d:54:ec:55:4a:85:b8:d3:f3:25:26:42:a7:be:e0:
         bb:d2:1a:a3:3d:ee:a0:e0:6d:b9:02:51:e4:ab:73:ca:9d:07:
         61:f3:d8:a8:c8:07:fa:66:42:c8:fe:ff:61:ca:34:58:f0:46:
         16:0d:76:30:88:e8:8d:ea:91:5e:f3:e4:ca:33:c7:15:f4:74:
         b3:50:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:22 2025 by rpki-client