Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
File:                     B8B02658C16B11EEA7D01A7DC4F9AE02.roa (raw, json)
Hash identifier:          inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=
Subject key identifier:   90:F7:C9:C6:E2:36:F2:96:9A:69:7F:3E:79:2D:AA:E2:E8:18:F3:AB
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       30A0
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:52:07 +0000
ROA not before:           Sat 02 Aug 2025 15:52:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24434
IP address blocks:        202.6.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 15:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12448 (0x30a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Aug  2 15:52:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688e3427-45a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:ef:13:03:d6:bc:f7:82:2c:93:a9:dc:e9:
                    8e:30:98:2e:ce:da:3d:78:46:8e:7a:d7:63:60:2e:
                    30:9d:de:4f:77:09:45:3b:a9:ee:fc:d6:8f:71:cd:
                    d9:7b:76:19:28:d6:77:3e:48:7c:b7:0e:2f:a1:77:
                    09:42:fc:2b:fd:ff:d3:82:7f:9a:a8:f1:7b:9e:65:
                    1d:6c:97:0f:63:c4:68:dc:b6:ad:97:62:48:1c:32:
                    ff:12:e7:c9:27:d1:cf:52:70:0d:9b:0d:c1:44:08:
                    df:d7:ed:ab:ec:ee:54:86:b7:df:3a:f7:e9:bb:3b:
                    c2:da:ea:cc:44:f3:4e:60:30:c9:03:ef:8e:fc:bb:
                    9e:a4:dc:a7:a3:1f:fe:04:06:22:19:c6:03:64:67:
                    14:a7:6c:80:90:fd:15:27:79:9a:0e:b1:fe:90:ed:
                    e7:ae:de:1f:d5:0c:4b:05:45:6a:20:b3:74:41:29:
                    71:1d:62:55:10:e9:08:bc:57:3f:a5:31:ae:51:81:
                    ae:98:49:da:08:3a:28:59:70:a3:31:1b:e8:8b:82:
                    f7:f3:58:85:35:56:0e:22:32:35:55:87:8a:45:a5:
                    e4:c1:6a:70:b7:1a:bf:30:81:e0:38:82:4c:5b:a2:
                    c6:a6:be:fb:b9:0a:b4:84:b9:50:87:56:bf:97:13:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F7:C9:C6:E2:36:F2:96:9A:69:7F:3E:79:2D:AA:E2:E8:18:F3:AB
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:56:5b:88:a9:d6:c8:09:1e:96:a5:67:0b:c9:5f:73:40:50:
         3e:5e:46:00:e7:9b:47:3a:4a:07:b3:be:3d:fa:c8:04:01:e6:
         39:f4:a3:30:60:f6:f3:dd:68:d5:55:c9:e6:cb:ac:d2:e9:1f:
         5d:96:fa:79:22:0a:4b:f7:b5:96:9a:73:b9:38:9d:7c:39:96:
         13:98:ae:77:58:d0:cf:04:a7:23:d2:cb:ec:86:33:fc:a5:62:
         b7:21:0b:83:38:18:a3:4b:c3:99:7d:6b:6c:8c:d1:04:8b:73:
         e9:c7:84:a2:c7:62:5e:aa:cc:b4:3c:b1:6a:fe:36:63:74:1e:
         d9:66:b4:81:e0:89:79:ca:9d:82:ed:9e:be:cd:32:03:cc:63:
         8e:63:d2:2d:e9:f1:40:c2:47:77:90:91:86:72:4f:18:14:89:
         4c:1e:98:00:d1:55:ac:d8:0a:16:b8:b0:63:22:d2:de:f6:b1:
         7b:53:0c:20:f0:eb:20:88:50:f2:65:eb:0f:79:fa:6d:e1:71:
         ae:29:3a:89:40:5e:1a:36:11:29:4d:5a:7a:15:9b:6b:14:7f:
         32:90:85:f2:d5:06:ca:93:32:d6:45:33:be:b3:58:39:8a:8a:
         a0:2b:c4:8b:43:27:b9:5c:91:f7:46:8d:fd:b6:09:41:18:c6:
         8e:29:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:58:18 2025 by rpki-client