Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/482C95F68DB811E98ACC9F7EC4F9AE02.roa
File:                     482C95F68DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          Vvt8gIzT7X3zFgaHKZZTu/elNVhHdcP8J7ECpTHkuWo=
Subject key identifier:   86:42:FF:66:EE:27:03:4D:68:CC:9F:19:08:05:5C:C2:DB:0A:70:F3
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       35DB
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/482C95F68DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 14:50:36 +0000
ROA not before:           Thu 24 Jul 2025 14:50:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55325
IP address blocks:        203.209.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13787 (0x35db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6882483c-8128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:08:56:bf:89:c2:98:ef:50:fd:73:16:6f:
                    85:a6:4e:61:81:a4:2e:48:66:bd:ea:05:2f:79:59:
                    bb:98:57:f9:e0:46:7f:01:ca:be:2c:a4:49:97:ff:
                    b6:96:12:56:fa:04:11:17:c0:5e:e3:06:24:41:d7:
                    d9:d2:86:3f:1a:c3:6b:fc:a9:9a:3e:1a:11:2d:20:
                    db:57:5a:42:dd:78:f7:99:39:ce:64:73:ab:42:69:
                    38:36:88:0c:86:7b:ce:f4:66:f7:c2:ba:2a:f7:b4:
                    8e:24:41:1a:31:ba:eb:4a:b1:13:7a:96:c6:e8:c0:
                    10:2b:89:6d:3a:57:74:c9:33:65:0b:83:91:ff:17:
                    3b:de:89:4d:43:77:aa:ed:2e:a6:cc:d6:8c:4d:b5:
                    02:40:9e:8e:dc:eb:ea:01:88:08:72:d4:eb:b7:ef:
                    be:6c:f2:dc:ed:e4:58:14:a2:2c:43:65:5d:99:d8:
                    3f:46:4d:c9:e3:2b:31:7f:ce:da:a1:d1:f0:ec:a3:
                    cc:2c:6a:26:7a:99:3a:3d:a3:6b:26:ae:52:35:a0:
                    26:cd:59:c1:1e:65:d8:5e:6f:16:5e:a7:42:74:78:
                    72:b2:45:65:1a:e7:17:ba:4d:2a:bb:a5:69:b2:1f:
                    7c:1f:b4:eb:9c:5a:79:45:b8:86:9a:42:ec:c7:ef:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:42:FF:66:EE:27:03:4D:68:CC:9F:19:08:05:5C:C2:DB:0A:70:F3
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/482C95F68DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:10:14:ce:2e:ac:f8:83:80:43:55:5b:fe:53:44:d9:da:
         94:53:69:e5:4c:9e:81:23:14:ac:a8:4e:3a:4b:bb:f6:fe:5e:
         75:51:6b:0c:94:87:c6:64:ce:c0:e4:53:02:e8:fc:b3:8b:88:
         e7:5e:d3:e9:41:a5:f3:55:d0:70:16:28:70:d3:3c:33:5f:c0:
         48:64:fd:da:47:d4:60:92:7c:f5:1d:c3:8d:75:85:b2:eb:3b:
         09:84:cf:f5:0a:f1:99:22:ca:35:0b:c7:c5:0f:a9:ed:38:82:
         cd:78:55:a1:33:9b:d0:3a:16:ab:1d:43:fc:b9:cf:db:4c:29:
         6c:a9:24:f1:96:19:29:cf:ed:7e:a3:0c:c7:27:d7:d6:9e:3f:
         c8:49:38:6b:8e:bb:e9:33:c3:e2:c8:19:e7:60:a1:8b:f7:9a:
         f8:9b:bf:59:40:a3:a4:74:15:6f:aa:44:be:7c:47:31:88:a7:
         ea:d5:15:0f:4b:06:d6:51:69:b1:90:dd:03:75:bf:e8:62:32:
         0b:f1:ae:94:28:0e:5e:54:b6:1b:b1:14:16:c8:af:b0:5a:fd:
         ba:a0:f6:5b:b4:f8:ae:a9:5d:ea:66:4f:61:ef:c6:27:0c:ec:
         f9:67:60:02:19:96:23:58:ed:9c:99:fd:73:8f:ce:9c:50:79:
         03:b3:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:56 2025 by rpki-client