Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa
File:                     78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (raw, json)
Hash identifier:          2WiCb7OZQZBwQByr0Alkw/fK8rpNuPrkGWgpzt7qSeU=
Subject key identifier:   A9:D8:26:83:DB:F8:D4:AA:28:89:F7:50:A5:11:D3:21:4C:78:4A:C5
Certificate issuer:       /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial:       0109
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa
Signing time:             Tue 05 Aug 2025 05:44:27 +0000
ROA not before:           Tue 05 Aug 2025 05:44:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24109
IP address blocks:        121.50.3.0/24 maxlen: 24
                          121.50.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
                          rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
        Validity
            Not Before: Aug  5 05:44:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68919a3b-f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:f4:94:79:a2:ca:d3:1a:fd:93:17:88:86:
                    a4:43:f1:aa:d3:64:9c:67:1b:e8:b6:66:22:21:f0:
                    7f:d1:de:d7:38:e2:69:f6:70:d7:93:09:7b:48:6c:
                    c4:39:3b:71:a2:61:4d:51:b8:de:f0:a0:b9:c2:2e:
                    32:5e:8f:38:a5:be:fa:5c:a0:e8:b8:fd:64:fc:97:
                    ba:13:c9:6d:4e:81:60:16:53:91:42:52:6b:e7:48:
                    bc:54:7b:df:df:10:b0:72:2e:0b:a3:a6:f8:4f:2f:
                    4c:18:5b:c5:56:37:01:3a:9f:8b:2a:47:0e:cc:ad:
                    99:13:74:99:36:ad:0e:e8:ec:d6:93:49:82:c3:27:
                    49:89:69:5d:8f:c7:3f:44:f9:1b:44:c5:1c:b5:69:
                    fa:7e:22:b9:e0:8e:32:0d:d9:ba:b1:b0:b0:86:ff:
                    b7:6c:66:e0:15:9f:65:d6:0f:3a:17:5f:c3:32:7d:
                    a3:57:0b:77:c8:c1:29:e4:5e:68:82:40:37:7a:16:
                    73:06:dd:b1:f9:3b:ff:d1:30:b5:97:31:3d:86:da:
                    05:de:60:e8:58:b9:7f:ba:b4:f2:d9:40:53:f3:40:
                    3d:97:74:a1:fe:ee:6c:91:01:50:af:04:46:af:bc:
                    e8:50:da:10:e3:ff:2e:28:0f:cb:a1:05:22:e2:d2:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D8:26:83:DB:F8:D4:AA:28:89:F7:50:A5:11:D3:21:4C:78:4A:C5
            X509v3 Authority Key Identifier:
                keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.3.0/24
                  121.50.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:27:16:6e:e8:b5:a4:75:aa:07:a0:4a:a4:61:da:dd:08:b7:
         be:27:65:20:86:c3:a1:28:c7:be:33:8e:ab:9a:63:42:91:f1:
         eb:a2:73:f3:22:76:90:5e:e5:77:66:47:cd:ed:c2:c1:f0:f1:
         55:6b:8e:ca:89:9b:74:77:a4:42:e8:a4:6c:9b:64:04:a5:f6:
         82:90:83:0d:64:2d:a9:c4:b4:ea:15:34:5e:83:9d:33:6b:a9:
         52:e0:a3:91:7e:22:a9:a4:6d:d3:73:7b:8d:95:72:2c:30:e8:
         66:aa:85:16:bb:42:51:73:88:79:41:61:05:34:d4:61:19:70:
         ac:52:84:8e:54:5e:ba:26:ce:68:f9:81:62:46:60:70:a2:d0:
         0f:d1:40:41:7d:d1:cb:9b:3d:cf:55:33:a6:4d:c3:2b:d0:e8:
         7a:cc:29:e3:06:5e:c5:d9:dc:86:0c:56:63:da:01:47:c5:2e:
         e4:ec:27:a2:3d:ee:95:f9:eb:27:19:44:99:20:23:6d:5f:09:
         c8:8f:c1:e0:7c:65:21:e7:f9:03:d1:f4:20:ed:2e:2f:67:3c:
         5a:d3:fb:94:57:f3:29:93:6d:07:5b:a9:a5:b1:6d:ca:6d:fc:
         81:fe:48:05:da:fe:a2:7b:a7:0f:4c:f7:8a:a4:98:9f:d2:06:
         d5:88:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:33 2025 by rpki-client