Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/5B36CE80708011F0824FC274C4F9AE02.roa
File:                     5B36CE80708011F0824FC274C4F9AE02.roa (raw, json)
Hash identifier:          wGPfRPTshiMNI5Q8MIJnVTxE4AosPx+xxw4ZEBsyUXw=
Subject key identifier:   A2:A9:B6:E8:5E:69:BA:C2:F7:DE:70:59:AB:5C:4B:09:80:DC:6F:48
Certificate issuer:       /CN=A9125026/serialNumber=518F677AE726A4BC378BF1EEFDA498DE9419FAC3
Certificate serial:       3C
Authority key identifier: 51:8F:67:7A:E7:26:A4:BC:37:8B:F1:EE:FD:A4:98:DE:94:19:FA:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/5B36CE80708011F0824FC274C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 15:41:44 +0000
ROA not before:           Sun 03 Aug 2025 15:41:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136396
IP address blocks:        163.227.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl
                          rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125026, serialNumber=518F677AE726A4BC378BF1EEFDA498DE9419FAC3
        Validity
            Not Before: Aug  3 15:41:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=688f8337-018e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:bf:15:1e:24:7d:23:3a:d4:a4:fa:e3:29:
                    2f:5a:11:1b:c6:9b:ae:29:c3:76:27:ed:da:ac:d2:
                    88:43:67:75:61:32:52:10:c1:53:a7:cb:3e:ac:a7:
                    18:7f:8c:8e:94:0d:5b:da:fb:68:21:aa:d7:e5:aa:
                    f4:98:e3:7d:94:5f:e6:ac:8e:55:3d:11:08:5b:0a:
                    26:02:1e:56:83:23:f9:1f:77:ab:9f:38:fb:6d:04:
                    90:e8:c7:d9:d0:d1:ea:5c:88:4f:57:07:cd:5e:54:
                    5f:4b:de:d9:b9:7f:6f:53:a3:92:24:24:48:35:8a:
                    e4:b9:99:9d:a4:38:39:1b:2b:d8:d3:a7:8c:5b:c9:
                    c3:06:f0:01:20:7b:19:18:e8:05:1c:ec:15:3e:6b:
                    8e:b7:d8:07:5f:9e:23:d4:91:c4:38:90:bf:d0:7d:
                    22:e7:4a:05:c9:76:16:9f:cb:30:f2:cf:a4:e5:5c:
                    1c:c1:4c:ba:d5:61:d6:e8:0f:d9:00:6a:e7:b4:a3:
                    9e:62:7f:69:65:f3:68:a0:7e:96:81:59:56:e7:e1:
                    22:71:0c:af:05:5f:d3:41:63:41:53:c7:53:2b:b6:
                    ff:79:dd:c4:63:11:a1:6e:47:10:80:3f:48:da:9a:
                    3e:9a:da:4f:59:17:03:fa:14:cd:32:56:fe:d6:8c:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:B6:E8:5E:69:BA:C2:F7:DE:70:59:AB:5C:4B:09:80:DC:6F:48
            X509v3 Authority Key Identifier:
                keyid:51:8F:67:7A:E7:26:A4:BC:37:8B:F1:EE:FD:A4:98:DE:94:19:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/5B36CE80708011F0824FC274C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:17:28:a4:53:fc:0c:b4:b4:da:f0:6d:2f:09:cd:25:23:82:
         a2:c2:14:aa:f0:43:18:e5:9f:2b:0a:5b:26:8c:10:aa:83:ea:
         8b:d3:96:65:b7:3f:79:48:ec:14:af:aa:57:09:94:16:78:1c:
         c3:55:a3:0d:c9:2d:a2:36:bd:8a:b4:3d:ce:04:be:96:f7:bd:
         29:b9:df:fd:ea:22:64:6e:7c:db:2e:f9:7a:d0:5a:8d:7a:84:
         29:9a:8a:f8:78:1e:bb:1f:f0:13:d8:36:10:48:61:4c:a2:38:
         80:08:dd:56:a9:4a:2d:d0:e2:1b:ce:4f:5f:ba:4f:86:bd:6b:
         de:aa:3f:da:ee:dd:cf:92:c8:c8:68:10:96:68:cf:06:66:6a:
         86:86:e4:43:f4:0e:2a:fc:94:18:98:aa:1e:a3:83:01:1a:9e:
         db:14:ad:c9:ab:38:58:e6:8a:d7:62:64:a0:63:9a:02:c3:35:
         06:98:86:c6:95:92:17:c7:46:7e:d6:08:f5:0d:6b:a9:36:13:
         97:e4:f6:ca:17:c8:de:25:c2:13:d4:bd:bd:1b:ba:04:c8:b2:
         c8:4a:94:8b:39:e6:0e:f3:da:e9:be:c8:bc:51:74:c7:76:65:
         fe:3e:29:b0:bf:19:40:a6:4a:5f:84:09:ae:df:9d:42:98:75:
         e5:28:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:03 2025 by rpki-client