Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/21730760B3A411F0B1142735C4F9AE02.roa
File:                     21730760B3A411F0B1142735C4F9AE02.roa (raw, json)
Hash identifier:          /xR7bc0U94CJEKsimaIvu6tFhBdgYxIm1zNTsT5uwaA=
Subject key identifier:   81:E1:86:17:10:90:BC:3A:E5:6B:D3:28:EE:C7:CC:62:6F:C4:B2:F0
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1A37
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/21730760B3A411F0B1142735C4F9AE02.roa
Signing time:             Tue 28 Oct 2025 02:16:37 +0000
ROA not before:           Tue 28 Oct 2025 02:16:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        202.27.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6711 (0x1a37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Oct 28 02:16:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69002784-8712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:71:df:a9:a5:bb:1d:33:0b:79:90:64:54:
                    e3:7a:4a:6c:ca:ae:d4:d3:7b:6a:b3:a2:80:ef:6c:
                    72:4b:25:82:1f:15:4f:ac:32:5a:74:fe:bf:2d:e9:
                    4e:62:cc:76:41:dd:8c:cc:43:8d:e6:3b:ac:9a:7a:
                    b8:07:2f:9b:bc:0b:a3:c4:87:7f:1b:a1:86:7f:9e:
                    59:b5:6f:1f:28:94:2f:06:63:dc:e6:65:a6:12:39:
                    22:b0:84:bf:0a:30:0b:19:8d:2d:e6:03:5a:1d:8d:
                    96:e8:be:36:62:c8:44:35:41:4b:d6:06:29:56:b6:
                    de:d1:80:fe:05:5e:84:ab:6c:33:76:9a:2c:36:3a:
                    a2:6e:eb:34:5c:fb:84:ca:78:50:0d:5d:8a:c3:43:
                    9a:28:6b:00:a2:47:ed:1a:cc:1d:d7:af:01:9e:36:
                    3c:bf:bc:fe:04:03:32:be:79:95:bd:ed:8f:66:c2:
                    b1:0c:f9:2b:f3:67:07:ca:01:ba:6b:76:85:30:f3:
                    24:b3:4c:61:bc:1f:6c:d5:29:5f:7f:ff:d1:a9:2f:
                    3c:2f:ec:e5:70:1d:b7:9c:15:e6:0c:86:53:a2:a0:
                    99:35:a1:3a:10:d8:92:1d:b5:6a:ce:da:03:c8:40:
                    23:81:fb:1e:61:37:c2:e1:62:fb:0f:01:1d:f9:e6:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E1:86:17:10:90:BC:3A:E5:6B:D3:28:EE:C7:CC:62:6F:C4:B2:F0
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/21730760B3A411F0B1142735C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:79:7a:c8:09:8e:63:76:46:18:1e:1d:18:be:42:52:e3:a0:
         16:90:16:d0:9e:2b:de:8b:e3:34:98:f3:94:1b:68:92:a7:6a:
         b5:43:dc:25:16:ee:08:a0:c4:62:8c:67:89:cc:94:be:57:81:
         90:05:bc:08:56:07:a9:76:2a:a5:1a:81:40:59:ce:d4:51:e0:
         17:65:06:fc:d6:e7:c6:9e:35:70:87:33:cb:24:5a:e9:c6:24:
         a2:d4:e5:1e:70:d3:c6:9f:02:3b:17:46:cb:62:f9:39:93:75:
         98:58:61:de:1b:9e:d7:df:bc:fa:15:bd:b8:e7:c1:67:26:6a:
         4b:2d:26:6a:39:2a:94:3b:4f:92:5a:f7:bc:f2:8e:5c:6c:2d:
         40:d5:2f:43:68:2a:c8:42:c1:28:86:af:9b:4a:19:42:05:31:
         4b:8f:10:d6:38:d4:d5:f8:19:ac:d5:e6:0e:43:f9:4a:c2:03:
         07:43:98:b7:df:98:e0:9b:5a:a3:5f:cb:4b:4c:a3:1e:67:83:
         be:14:4a:05:4f:ba:e9:b5:ad:72:64:0f:11:d2:e7:82:02:bb:
         71:a1:57:b3:d9:a9:d5:87:e9:59:59:77:27:0e:2e:b2:78:fd:
         a4:77:c3:1a:d6:61:ce:5b:cc:a4:b8:d1:ce:5b:62:8e:9e:a2:
         06:38:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:59:33 2025 by rpki-client