Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
File:                     349FE3280DA811EBB62F0126C4F9AE02.roa (raw, json)
Hash identifier:          Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=
Subject key identifier:   8A:9B:53:0B:CC:37:F5:33:1E:97:61:59:94:38:42:24:C8:03:58:DD
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       134C
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
Signing time:             Wed 06 Aug 2025 17:26:29 +0000
ROA not before:           Wed 06 Aug 2025 17:26:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        192.74.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4940 (0x134c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug  6 17:26:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68939045-117d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:f4:63:ef:41:61:65:1d:6f:65:f2:cc:b1:
                    f2:7b:88:b5:49:7a:ee:fb:e8:69:48:ae:5d:35:04:
                    1b:e0:61:77:47:d2:b2:55:ae:b1:d0:d5:4f:4d:36:
                    df:40:5a:62:40:1c:1a:02:74:f3:3d:00:2d:3a:c3:
                    06:b3:1b:ca:35:6f:f5:ef:a8:8d:27:8b:d5:a9:15:
                    de:f1:e8:b4:7a:0f:0b:42:71:52:d2:87:fa:b9:93:
                    c8:97:0e:9c:03:e5:84:d1:51:9b:e4:db:0e:25:a9:
                    b6:d9:9b:89:dc:ac:8f:60:fa:5c:37:49:b3:19:c8:
                    cb:68:44:b9:cd:c5:4d:97:c3:c2:bf:e3:17:d8:4c:
                    27:d8:b7:47:61:10:96:c8:d2:17:7d:28:c7:a6:55:
                    72:58:ed:5b:03:21:74:64:d4:2f:31:d9:bd:94:5e:
                    c8:6b:69:61:45:fe:f2:e9:ec:e2:66:d9:5c:cc:1d:
                    44:f2:e3:95:08:07:c9:1b:5d:71:ef:62:6f:9f:61:
                    73:cb:3e:f9:62:70:63:5b:d8:c0:b1:b9:76:44:0e:
                    c3:10:04:f9:9f:c4:a5:69:5c:6a:24:50:6a:3f:26:
                    a0:b7:ef:c7:7f:f5:6c:3b:9e:42:09:93:58:99:9a:
                    19:ac:61:05:6c:b7:c2:eb:2d:17:5d:58:ed:47:9a:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:53:0B:CC:37:F5:33:1E:97:61:59:94:38:42:24:C8:03:58:DD
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:da:69:0a:12:a9:8b:41:44:cf:f1:c4:d3:a6:de:38:d6:90:
         c8:ad:ae:ab:56:f0:8d:b3:1c:25:b5:e6:ec:32:12:72:89:24:
         b7:0f:ff:d4:8e:03:bf:21:ea:f9:ca:5f:77:38:a8:77:0d:22:
         ec:e7:b5:af:31:7a:76:e1:e6:f9:0b:c8:0e:a4:67:32:34:09:
         05:5f:34:38:f4:de:93:bd:29:ed:a1:ef:f4:15:3a:14:02:85:
         ca:d6:c3:21:26:88:58:c6:fd:9b:10:63:d7:b7:74:ef:12:0b:
         0c:d8:26:c5:f3:bc:53:9f:d9:73:61:11:34:84:04:ab:0d:8c:
         bf:c3:31:24:df:8f:b9:75:f9:65:85:6b:7e:b7:63:35:d1:e5:
         56:5e:7f:0a:5d:34:4d:91:5e:f0:3b:fb:77:7b:66:14:37:df:
         66:73:a6:86:98:ff:2a:90:b8:c9:50:fd:39:fb:a7:86:7f:17:
         1e:27:fa:7e:b1:5e:94:ff:ad:f9:1b:f5:41:b4:b3:ab:41:3a:
         1d:33:d5:e4:60:b5:43:8b:2b:5a:60:38:84:8e:03:6b:7c:38:
         58:06:3a:c6:dc:5a:eb:3b:14:c1:21:cf:17:88:a0:31:8d:4a:
         88:15:21:d7:7c:b8:0e:8b:bf:c1:3a:8d:75:a5:70:22:61:de:
         f5:ef:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:46 2025 by rpki-client