Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DA202262C34F11EE93BC8317C4F9AE02.roa
File:                     DA202262C34F11EE93BC8317C4F9AE02.roa (raw, json)
Hash identifier:          dcDioS0VFo6S9vVwz+paS1zd6YFHx5bsZVN3a7QsfW4=
Subject key identifier:   4E:28:91:64:7F:1F:5C:57:B4:CB:A6:98:3A:4F:58:BA:6D:29:32:AB
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       3510
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DA202262C34F11EE93BC8317C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 14:50:22 +0000
ROA not before:           Wed 30 Jul 2025 14:50:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9715
IP address blocks:        210.246.144.0/24 maxlen: 24
                          210.246.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 14:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13584 (0x3510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 30 14:50:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688a312e-3638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:1e:38:eb:15:59:7d:ef:91:a4:d8:fd:b1:
                    9a:7c:40:92:44:d9:34:4e:a5:f2:f7:cd:03:1a:78:
                    d8:c4:39:c0:7d:ab:48:a8:74:d6:5f:89:00:ff:82:
                    03:9e:ac:34:9f:13:de:53:97:72:c7:17:75:cb:87:
                    e6:5e:0f:04:8a:40:f8:2f:fc:d7:2b:e2:ae:76:a7:
                    1d:a5:a2:1a:64:f7:bb:92:e5:49:99:48:c1:23:8f:
                    88:f1:e7:e2:c2:65:5f:b9:24:36:09:a4:d4:75:c8:
                    fe:c5:83:d9:a7:bc:6f:38:34:98:45:d4:71:3d:d5:
                    96:b4:33:0e:a4:2d:bb:56:bc:fc:8c:a5:5b:94:d9:
                    ed:1d:28:86:3e:1c:57:6c:5e:a1:2d:4f:60:60:4c:
                    98:ec:ea:0d:4f:92:ac:cb:ef:01:22:ad:2e:55:87:
                    ef:e6:d8:c1:58:69:5f:ed:d9:7d:28:f9:0d:2c:ca:
                    18:17:3d:74:3c:2b:94:29:1c:24:f7:80:ca:f0:68:
                    e1:c2:df:e9:3b:56:b0:25:09:ad:ce:f7:62:f8:b6:
                    46:78:ee:43:8b:94:43:66:5c:62:08:44:7a:fd:f1:
                    c8:ff:7d:32:44:12:ec:f2:8a:5f:9f:bc:ac:82:f0:
                    20:a2:3b:a5:30:77:4d:e0:80:f0:c0:a6:67:af:d0:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:28:91:64:7F:1F:5C:57:B4:CB:A6:98:3A:4F:58:BA:6D:29:32:AB
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DA202262C34F11EE93BC8317C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:23:b7:57:d8:fe:24:8a:34:c0:c5:d6:9e:49:94:0a:90:
         ab:7c:cb:dd:79:71:40:93:0a:d4:5a:81:d3:4d:c7:ae:4e:4e:
         bc:11:a9:14:0d:e6:88:08:0b:24:c6:4e:6d:d2:de:e4:ec:21:
         69:b7:ad:ae:c5:3b:51:9a:41:8d:82:70:89:4e:84:17:bf:b1:
         a8:c5:b7:89:32:f3:49:d4:2e:82:0c:ef:8a:61:0b:cb:9b:28:
         42:51:be:00:72:22:e0:68:78:69:8f:13:ee:dd:a4:cf:08:a0:
         dc:9c:ff:b1:06:34:85:31:5d:89:e4:0e:ed:87:2c:78:b2:46:
         d6:de:bf:93:77:5d:0e:55:e4:c4:4a:46:bd:08:e8:de:13:16:
         e4:3f:17:9e:85:d7:1e:15:b8:36:b8:37:ec:d6:fa:ae:cb:0d:
         be:af:14:7d:3b:2f:1e:74:17:b3:00:c4:94:62:0b:65:5a:4c:
         a3:36:cb:c4:b5:94:27:56:78:a6:6e:30:d3:e6:5b:71:8c:a5:
         51:c3:b7:60:30:7a:79:07:fe:6a:4f:09:6e:da:c0:cd:9d:6f:
         23:aa:11:cf:33:d3:80:07:7d:1f:2d:1c:a8:9e:7f:1b:49:fc:
         1e:70:f5:5f:bc:f6:11:49:f5:32:e7:47:59:32:52:34:aa:20:
         99:0e:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:43 2025 by rpki-client