Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/FAA6AEE45F6C11EE8C65650FC4F9AE02.roa
File:                     FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (raw, json)
Hash identifier:          HyYsRkYWrhLH7/eFiE9ZKiELMhyobWoxmzKJXnew4uE=
Subject key identifier:   BC:10:72:81:23:7F:C4:AC:52:BE:5D:EC:1C:B9:57:49:C2:87:D4:AE
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0B73
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/FAA6AEE45F6C11EE8C65650FC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 20:30:01 +0000
ROA not before:           Thu 31 Jul 2025 20:30:01 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     395753
IP address blocks:        116.66.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
        Validity
            Not Before: Jul 31 20:30:01 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688bd249-93b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:1d:d6:87:25:0a:e8:0e:84:72:03:0e:3e:
                    80:c1:6d:d0:e5:b0:19:79:60:b0:07:00:16:e7:d9:
                    b6:20:2c:08:e2:02:12:65:8d:ae:b6:36:22:a3:ff:
                    32:5f:8e:e3:0e:93:b8:93:bd:bb:4a:c2:54:93:39:
                    62:c6:b6:19:a4:0e:a4:37:c2:17:4a:c9:d0:0a:e6:
                    8f:26:9e:f9:f1:3c:71:4c:6f:18:42:47:61:6b:60:
                    6b:6c:3f:ac:c7:ea:25:61:f5:a8:6a:52:45:3b:e6:
                    5c:55:9e:95:e4:cf:29:38:a7:24:ac:57:d0:e8:28:
                    65:c0:37:7f:d7:0c:bf:b3:a5:f1:9b:ba:82:14:2b:
                    96:c5:46:91:f4:30:ef:77:fd:ab:45:51:b1:30:c0:
                    d2:02:fb:9c:6b:45:f0:ff:01:1e:9f:14:20:c0:bf:
                    8c:80:e7:fd:f2:07:7c:4a:38:5a:ef:d2:71:a3:7b:
                    aa:0c:d7:31:3d:54:33:44:9f:33:e3:c5:95:13:92:
                    fb:f3:51:1b:75:88:2f:bf:22:d9:42:75:30:57:d4:
                    df:d4:d4:59:e1:45:51:eb:36:32:c0:77:7f:5d:43:
                    fd:7b:6f:84:2b:8a:16:f1:bf:39:ae:99:46:fc:35:
                    ba:06:d5:f3:00:0c:44:4e:9c:14:25:3f:98:f9:73:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:10:72:81:23:7F:C4:AC:52:BE:5D:EC:1C:B9:57:49:C2:87:D4:AE
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/FAA6AEE45F6C11EE8C65650FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:b6:11:14:97:7a:9d:30:1d:81:c7:88:36:3f:5a:fe:bb:
         8d:e8:87:7d:07:d6:ba:e0:c6:cc:ce:ac:b7:d4:44:9c:21:ac:
         4a:ab:b5:9c:30:73:7f:d0:8f:ac:67:8f:1d:01:7c:ac:d4:b0:
         d0:6d:13:d0:80:6c:99:fb:21:42:0e:31:6c:0c:74:70:a6:89:
         18:84:e4:dc:c6:36:d5:04:2c:f4:34:68:e4:96:95:73:6d:cf:
         27:aa:1d:a5:ad:ef:2c:5a:b6:a4:98:6b:93:8c:83:3d:6d:f3:
         71:f0:78:6b:cc:2c:c5:b9:8a:47:2f:37:ad:de:8e:1a:e2:dd:
         70:b9:81:e6:4f:f3:38:bf:0b:cd:47:79:4c:10:94:da:f9:06:
         3b:92:e6:76:02:aa:3d:3b:ad:e9:e2:ac:6f:33:30:e5:19:04:
         b1:f4:ee:d4:d5:81:34:3f:5d:50:b0:d8:d0:e9:98:52:d1:ca:
         15:de:e4:f7:cd:df:df:72:73:07:5b:b3:fe:ce:25:17:da:07:
         3f:a7:ae:f2:d6:85:5a:64:e0:74:d7:06:1a:f4:de:f6:d3:b2:
         8d:a4:14:c2:69:6c:c1:66:f9:a1:b4:92:fb:59:c0:4c:83:d4:
         f4:e7:9b:30:d2:49:98:d1:7f:5d:39:92:18:eb:4d:7f:b2:57:
         d7:cd:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:57 2025 by rpki-client