Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/402418C08DB811E98ACC9F7EC4F9AE02.roa
File:                     402418C08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          P0DmiEGqN7lW5E2uoWn71/z/nYWW3JpwNu+rpvGmCIs=
Subject key identifier:   CE:72:AD:97:D1:2B:51:09:3D:09:F1:60:74:A1:8E:EF:A2:B4:C3:5F
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       35C8
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/402418C08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 14:50:21 +0000
ROA not before:           Thu 24 Jul 2025 14:50:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135620
IP address blocks:        203.155.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13768 (0x35c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6882482d-d41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:68:b9:12:87:dd:fd:6f:24:3c:a1:62:e9:
                    94:1c:3d:2c:c4:b6:c9:77:34:a6:fe:a9:e3:94:5a:
                    06:9f:62:24:3f:64:8a:a1:6e:04:d6:1f:d0:43:da:
                    9e:ac:4c:f1:19:64:64:a2:1b:63:6a:7b:8f:99:b5:
                    3a:f5:71:03:66:74:21:11:34:8a:b8:4f:1b:9a:d0:
                    53:6c:a4:e5:3d:21:db:f4:88:e3:50:72:0d:67:4f:
                    82:c0:22:8b:94:ea:3c:2a:9d:93:6d:7e:75:cb:d9:
                    8c:bb:f9:07:17:45:ed:3c:de:8a:a5:70:62:8d:44:
                    e3:bb:37:37:49:80:c4:ac:f4:6f:ff:83:64:41:76:
                    e3:db:df:64:13:27:dd:6b:7d:f3:7c:4f:87:c4:8b:
                    25:74:c8:19:a7:6b:75:91:19:57:9a:7a:22:3e:40:
                    24:c6:2d:e8:ae:fa:79:bc:2d:ff:1e:68:4d:b2:83:
                    6b:22:43:73:df:a3:95:ef:27:1a:43:1f:3b:bb:bd:
                    30:ba:72:9d:ec:85:8f:50:96:2c:bc:e3:48:b5:df:
                    ea:6d:33:c2:3f:0b:e2:5b:57:5e:86:0f:e6:2a:4d:
                    9e:b2:9c:68:5f:a1:2b:10:bf:f3:d7:02:bd:df:37:
                    df:b5:52:18:28:d3:90:36:ec:ab:82:16:88:77:76:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:72:AD:97:D1:2B:51:09:3D:09:F1:60:74:A1:8E:EF:A2:B4:C3:5F
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/402418C08DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:01:b7:f1:93:2b:85:08:b3:27:bc:e5:21:53:0e:b7:24:fc:
         3d:47:1e:04:b3:c6:a4:56:67:43:02:bc:22:6f:80:39:8c:57:
         0c:88:31:22:3a:23:58:a4:8f:c4:86:8b:d7:11:b4:c5:46:23:
         37:a2:95:43:4e:f3:77:a9:b4:62:c8:c8:84:a5:ed:c9:68:7f:
         c8:9d:5a:4f:9a:5f:54:fd:17:ae:d4:e4:dc:53:19:ee:10:9d:
         9f:1c:d4:9c:f4:8a:33:ac:b7:ab:b4:66:4e:c3:d4:94:91:ed:
         a2:58:cb:d7:9d:f2:00:4d:1f:7b:8f:d8:53:e1:cf:91:97:65:
         f7:f4:16:8e:6d:45:99:1c:f5:19:6f:2d:87:a0:30:50:82:09:
         24:84:17:a8:66:8e:06:87:d8:80:2d:ef:2e:67:de:e7:1f:2c:
         62:91:50:97:6f:86:9c:a7:f7:1e:7e:cb:05:be:9d:1d:5c:14:
         97:d1:a6:69:8c:35:cd:c0:14:71:2f:b2:79:4c:89:5f:79:5e:
         28:e8:ee:ef:9a:70:ac:81:a6:23:5d:8d:7e:76:a4:82:0f:f1:
         9b:c2:a8:e8:40:e3:ab:1e:d9:52:f4:ae:24:46:58:42:75:aa:
         b5:d8:3d:f1:4d:13:c5:86:fb:71:75:7d:e8:66:73:e8:45:ea:
         03:b3:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:23 2025 by rpki-client