Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa
File:                     562B3D3E7A9411ED91BE2586C4F9AE02.roa (raw, json)
Hash identifier:          c8J7SdmNgOAa8qtX4cxDC1hXrfyTZV6vYro1NteHib0=
Subject key identifier:   83:3D:D0:1D:A8:09:EB:71:1B:0A:DE:34:07:25:4A:4A:1B:5E:32:73
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       01FE
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa
Signing time:             Tue 05 Aug 2025 03:11:05 +0000
ROA not before:           Tue 05 Aug 2025 03:11:05 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        45.117.24.0/24 maxlen: 24
                          45.117.25.0/24 maxlen: 24
                          45.117.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Aug  5 03:11:05 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68917649-3cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:2c:2a:1f:56:2e:01:07:e7:7d:dd:84:ef:
                    95:79:ad:e0:3a:7d:c9:e0:af:a4:02:88:5b:ef:31:
                    5b:70:26:b1:a6:4c:58:ae:bb:15:9c:3c:24:2a:44:
                    42:90:7a:fb:ea:89:59:86:d1:5e:d4:4b:75:b6:e1:
                    aa:6e:a9:14:4e:3d:01:8d:aa:8c:cc:df:73:58:47:
                    9a:bf:22:0b:78:af:7e:d5:0e:8c:e0:b2:29:03:70:
                    d1:e3:fd:4c:e2:48:85:02:8f:b1:86:7b:4d:b2:19:
                    09:62:d7:1a:10:d4:c9:18:ce:fb:52:52:57:fa:4a:
                    01:d8:c0:47:f1:9b:80:e7:87:76:36:7e:3b:ee:81:
                    a2:ee:b2:38:0e:0f:c7:7b:b4:ad:01:63:e0:ab:bc:
                    dd:bb:a9:fe:71:95:f8:b7:eb:9a:cf:51:cb:85:92:
                    b8:40:b8:7a:56:6c:61:c5:fe:0b:19:f2:ff:a0:6c:
                    8c:02:2b:cf:6a:66:ab:e6:0c:b5:25:f7:60:d2:69:
                    66:f2:94:10:10:30:7e:6b:16:e4:a0:8b:fe:db:3b:
                    26:92:c0:5f:fd:1c:01:af:12:94:5f:f6:7c:fa:6b:
                    73:62:7e:1e:9b:f5:d4:32:f0:13:0e:12:a6:32:b8:
                    ac:03:20:98:66:3a:db:ee:39:6a:4b:49:34:7d:c0:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:D0:1D:A8:09:EB:71:1B:0A:DE:34:07:25:4A:4A:1B:5E:32:73
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.24.0-45.117.26.255

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:c9:c7:2a:5c:3e:41:74:27:8b:88:c7:77:ba:cd:0a:38:
         a1:a1:08:86:6a:d7:5a:30:26:68:ee:bb:da:65:05:15:34:0c:
         82:90:a2:4c:40:f3:04:bd:62:43:22:18:e8:0a:f4:dd:cc:4a:
         e8:c2:79:5d:51:66:c4:0a:3c:8c:b6:77:d2:ff:96:f9:0a:4d:
         f3:ab:78:5e:5e:72:ad:a9:bc:a0:41:6c:d0:82:f4:4e:18:36:
         fc:9e:27:d8:00:05:33:d0:6d:26:4c:93:a2:4d:03:7d:02:5c:
         90:6f:5f:52:43:3a:4d:b1:c9:7e:b6:60:ab:b8:f7:84:e2:c0:
         d9:77:a7:83:d8:29:2e:1e:58:15:c9:07:b6:b2:82:79:a7:fd:
         ef:b8:79:b6:10:e6:2b:d5:35:37:53:e4:c5:20:cb:ad:43:8f:
         17:33:1c:cb:7e:f9:16:e5:e0:6d:a9:99:16:2e:f2:e3:6b:2e:
         fb:e2:8a:b1:9c:52:8d:e4:e7:7f:30:46:e0:40:96:30:5a:52:
         52:d2:4f:02:8e:b2:b5:e8:15:14:b1:8c:4d:62:ab:df:b4:18:
         1d:34:76:69:18:87:f0:90:c0:70:ae:87:90:08:72:c6:80:cd:
         6a:24:3e:a5:9c:27:32:c8:cf:77:ac:d9:45:12:53:0f:a6:24:
         eb:51:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:56:59 2025 by rpki-client