Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
File:                     453F8E988DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          5+MRoBA+rOp6HemFzB+KMhs/OCqWXA66uUpcbDP4GD0=
Subject key identifier:   EC:AD:6E:FE:F5:4F:1D:ED:D2:FF:A7:53:E4:68:F5:92:AD:7D:6E:A4
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       35D5
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 14:50:32 +0000
ROA not before:           Thu 24 Jul 2025 14:50:32 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38554
IP address blocks:        58.181.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13781 (0x35d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:32 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68824838-e467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:9d:2f:a7:a0:dd:7a:28:81:9c:5e:78:0a:
                    4b:ca:e3:b0:7d:cf:fc:dc:cc:8a:df:20:34:34:dc:
                    4d:73:bb:73:06:61:79:99:d8:c4:2c:78:88:4c:0a:
                    9b:e6:39:be:6a:df:ea:b7:95:31:7c:52:d6:73:e9:
                    80:96:38:02:d3:a0:ea:1e:75:ab:a6:e4:61:a2:27:
                    85:7e:70:c3:09:dc:08:fb:71:b1:2f:e5:90:de:1e:
                    0b:0b:e7:47:0c:ee:25:cb:bb:d3:3e:da:f1:34:5d:
                    ab:64:71:fd:bc:7e:49:cc:7d:8f:db:71:84:09:18:
                    3e:03:a4:43:c7:bc:cc:ba:d0:32:51:77:d0:fe:b5:
                    5a:4e:33:b5:aa:d8:4c:84:3a:07:75:d2:94:df:17:
                    06:7f:27:b7:22:80:ff:5d:46:7c:78:af:f7:e1:46:
                    54:1a:b1:79:69:f9:70:b2:4b:fd:84:2d:48:1c:9e:
                    3b:05:2a:da:83:b6:88:28:77:43:ca:a7:95:79:32:
                    06:52:ee:a5:8d:18:39:d1:f4:f7:2c:f4:36:2f:9d:
                    46:9e:02:70:ee:0a:44:b8:8e:30:25:26:e6:2a:99:
                    d2:8a:fa:e8:bf:cf:e5:8d:56:de:4a:c4:8a:3d:3b:
                    ee:af:cf:3f:e8:34:ff:2e:69:e1:ae:b9:cc:00:6a:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:6E:FE:F5:4F:1D:ED:D2:FF:A7:53:E4:68:F5:92:AD:7D:6E:A4
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:72:26:0d:2f:bb:c0:56:46:8d:56:82:d3:83:16:76:fd:
         08:31:70:32:c3:0c:b2:f1:33:37:81:d8:ff:0e:fc:07:be:6c:
         81:4b:1e:b1:58:16:0d:c0:12:cb:88:4a:87:ac:75:08:cc:8f:
         43:d1:31:3f:d1:af:86:d3:78:7d:71:f7:32:84:5d:b7:22:4d:
         a6:21:cc:84:23:09:0d:08:4d:63:46:7b:90:46:3c:18:47:71:
         01:e9:a2:7f:6a:dc:97:d6:ff:f6:25:1c:a9:2b:95:1b:6f:3c:
         d4:a3:a0:5f:03:c9:57:14:e3:8b:8e:89:7c:98:60:16:f1:3e:
         e7:bd:a7:e2:82:92:89:9b:6d:9a:b9:5c:41:33:8e:85:4e:94:
         38:32:1f:94:0f:63:60:7f:f1:5f:02:9c:7c:b5:31:5e:64:8c:
         71:c9:41:b7:64:51:0e:68:6f:31:f2:a2:cc:eb:14:6e:60:15:
         bf:11:bf:0e:1a:9e:0c:9d:8e:8e:e3:01:71:ff:ab:6c:1a:ab:
         ba:9e:82:cb:12:4e:ee:13:56:17:a4:e7:43:42:a5:37:48:16:
         7b:32:3e:57:0e:30:71:d2:3c:aa:73:a1:81:89:a3:8f:69:3f:
         0c:ff:37:c9:96:c4:ba:89:72:14:d2:ab:9f:4c:4e:31:07:1b:
         44:b8:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:49 2025 by rpki-client