Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/30A6042602CE11E6B167303FC4F9AE02.roa
File:                     30A6042602CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=
Subject key identifier:   8C:C8:AA:3F:75:65:1F:EC:DE:AD:31:5C:CC:FD:D6:C1:8F:A1:67:49
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2573
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/30A6042602CE11E6B167303FC4F9AE02.roa
Signing time:             Mon 04 Aug 2025 16:24:26 +0000
ROA not before:           Mon 04 Aug 2025 16:24:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45343
IP address blocks:        203.177.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9587 (0x2573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Aug  4 16:24:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6890deba-1900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:1b:3d:b7:37:0e:08:ed:69:03:75:6c:8e:
                    d8:1b:1e:8f:fc:fe:a2:79:4a:c8:a8:08:7a:e5:34:
                    66:80:9e:e5:ff:ed:d3:0b:dc:04:d6:10:ec:c5:fa:
                    4f:d5:a3:dd:61:24:7c:1c:db:d2:b5:f9:ae:e0:d0:
                    a5:1e:54:c6:a4:33:bf:02:85:ed:90:dd:6f:5c:1c:
                    35:6e:87:28:7e:c1:de:fb:13:a5:06:3c:df:2b:3e:
                    64:bd:82:ed:ee:da:08:0b:94:41:32:76:1f:cf:bc:
                    70:64:fa:fc:47:9c:4f:02:e4:7f:fc:e6:e8:56:e6:
                    b1:9f:41:d7:09:62:4b:c9:79:21:a8:5b:4a:4b:94:
                    a1:83:69:3b:ef:15:10:97:1f:0e:4c:22:16:32:30:
                    e4:57:a0:67:a5:4a:b1:12:db:ac:b9:d1:d6:65:ee:
                    2c:75:e6:9e:bd:4b:7b:77:67:1d:a2:2b:1f:f6:d2:
                    53:38:e9:00:a4:f2:f7:ee:5b:d2:4b:05:a9:b3:2d:
                    60:48:68:20:bb:55:f8:4e:9e:5d:58:9f:1d:cc:cb:
                    ef:a3:54:c9:72:e3:f1:6c:83:40:29:40:c9:0c:24:
                    72:b9:2c:a7:4a:02:86:10:d0:2e:1c:67:b5:32:a0:
                    87:0a:f5:10:06:c8:1c:bb:61:98:c0:82:83:a2:32:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C8:AA:3F:75:65:1F:EC:DE:AD:31:5C:CC:FD:D6:C1:8F:A1:67:49
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/30A6042602CE11E6B167303FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:d4:b0:92:6d:1a:be:a8:7c:00:2e:16:4c:f9:d4:e1:23:
         f8:4c:6d:80:5a:0f:87:5c:e3:48:f1:59:92:45:53:8e:5e:76:
         61:a4:04:84:0a:fd:ee:f7:d4:58:81:a2:62:4a:21:65:2e:d2:
         b7:e4:03:25:98:cd:b8:f6:8f:33:38:ca:26:de:f7:0c:d7:86:
         86:0f:bf:38:da:e4:33:25:86:c5:a2:72:bb:5e:4e:ef:18:3f:
         25:d9:df:d6:c3:ef:1c:65:32:8e:c6:82:e5:cd:8c:1a:82:20:
         68:9c:df:fb:27:4b:64:fa:5d:47:23:95:a7:e9:12:7d:ca:0c:
         49:f0:2a:5e:a5:eb:af:60:ff:cf:64:23:bf:8d:53:a6:24:7e:
         59:3f:e3:90:e2:9f:8b:64:5b:4e:36:ff:47:7b:96:b7:d2:49:
         70:22:b9:53:b7:52:a6:71:c2:92:3e:6e:06:5c:7c:52:c1:1d:
         0d:ad:8e:f1:4c:fc:df:04:71:97:e6:ad:ae:7e:d3:55:2f:89:
         aa:60:f2:e9:bc:c0:8f:6e:36:43:a9:26:b8:bd:26:84:18:65:
         b4:8c:6b:38:b0:95:1d:36:50:b6:61:2e:ce:e0:5d:59:9a:43:
         e3:2b:be:d3:d0:c4:0e:5f:4b:c8:c5:a8:b4:ff:3a:07:f5:83:
         1f:28:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:53:57 2025 by rpki-client