Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
File:                     B5629336843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          x0tXw92j2DTl3RBZWHd2lY2OCIN9tNBbgbrg9hvGjWo=
Subject key identifier:   CC:7C:70:03:F3:18:68:02:2F:EE:37:56:C7:CD:5F:F1:C8:B9:29:A5
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       18BD
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 16:55:22 +0000
ROA not before:           Wed 30 Jul 2025 16:55:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     10145
IP address blocks:        203.98.69.0/24 maxlen: 24
                          203.98.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6333 (0x18bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 16:55:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688a4e7a-7cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:d7:31:ea:ee:5f:03:9c:5e:cc:78:b3:2e:
                    c3:d9:a2:cf:45:7c:e1:22:cc:ca:2d:bf:1c:c1:15:
                    10:c8:82:42:98:e1:d4:38:50:c4:6c:d7:df:3d:91:
                    a5:27:70:0e:0f:db:20:fb:4e:3c:cc:c4:6d:9d:8e:
                    65:25:97:a0:9f:8e:88:da:5a:bc:dd:c7:93:df:f5:
                    cd:7c:5e:78:68:01:9b:5c:a4:14:f2:ec:89:0f:cf:
                    c9:1c:d7:56:83:f2:1c:e8:2a:61:29:c8:07:e3:55:
                    04:e4:a6:32:68:32:46:7d:ee:f6:18:fb:ff:b8:c5:
                    78:21:49:14:f2:2d:fa:3f:19:ac:a1:56:ea:be:a9:
                    22:85:cf:3b:ce:78:fc:9f:4e:c8:d3:78:33:ad:cc:
                    67:90:ce:c3:df:d3:d9:30:f2:c1:aa:95:9d:6e:14:
                    af:1f:ae:3d:81:0e:20:91:ae:4c:ba:bc:d0:ef:ba:
                    72:f4:a7:fd:df:70:9c:f3:66:d2:08:15:23:89:7d:
                    b0:c0:45:71:8a:5f:8b:67:02:8e:30:25:9a:fa:73:
                    e5:b9:2c:38:e1:4a:93:ed:44:77:44:6f:76:7f:ff:
                    82:78:2e:fd:43:04:f9:ef:cf:97:72:41:80:de:c2:
                    b7:28:a7:7c:37:1c:e6:18:db:41:43:25:c9:d0:d5:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:70:03:F3:18:68:02:2F:EE:37:56:C7:CD:5F:F1:C8:B9:29:A5
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.69.0/24
                  203.98.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:45:13:52:88:33:61:00:23:f5:2e:eb:51:43:de:7b:1f:10:
         ec:1b:25:10:6f:c6:d5:18:ee:ec:fa:59:2c:89:e2:99:ab:4d:
         b0:98:d1:6a:b8:47:ae:72:e9:92:d5:da:df:6b:6f:08:00:89:
         a8:b4:5a:1c:6e:5d:a2:1a:df:dc:21:e0:71:5d:7e:e4:4f:52:
         fb:07:05:ab:32:4b:50:21:a2:cb:ad:e0:35:f5:39:b2:9b:81:
         d3:b2:cf:ad:9e:d3:67:dd:d1:5e:fb:ef:eb:f5:04:a7:28:f1:
         a7:7d:78:92:f5:12:8e:e1:4e:a8:7c:d8:26:ff:67:5a:35:d5:
         41:db:8a:61:64:a8:c1:c0:70:74:a9:b7:66:b3:0e:26:b2:e1:
         1b:84:a7:45:8e:4b:ac:e0:70:80:0d:03:ff:bf:1e:bf:37:31:
         36:4e:4e:60:59:5b:67:bf:f3:95:a5:ab:9b:86:e5:5a:70:0a:
         fb:17:2c:97:b5:be:dd:6f:bf:25:78:9d:63:38:27:c1:d9:8c:
         9e:98:6f:bf:23:82:12:d9:9e:ce:e6:1f:ac:b7:56:7e:8d:08:
         1d:20:a7:df:2d:8b:46:35:2b:48:0d:7c:ed:6d:ee:e6:07:57:
         91:65:fd:be:9f:be:ec:6a:85:93:8d:96:eb:b1:79:a6:94:b5:
         9e:a5:c6:84
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICGL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw
REQzQTMzRUMwHhcNMjUwNzMwMTY1NTIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhhNGU3YS03Y2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3hLXMeruXwOcXsx4sy7D2aLPRXzhIszKLb8cwRUQyIJCmOHUOFDEbNffPZGl
J3AOD9sg+048zMRtnY5lJZegn46I2lq83ceT3/XNfF54aAGbXKQU8uyJD8/JHNdW
g/Ic6CphKcgH41UE5KYyaDJGfe72GPv/uMV4IUkU8i36PxmsoVbqvqkihc87znj8
n07I03gzrcxnkM7D39PZMPLBqpWdbhSvH649gQ4gka5MurzQ77py9Kf933Cc82bS
CBUjiX2wwEVxil+LZwKOMCWa+nPluSw44UqT7UR3RG92f/+CeC79QwT578+XckGA
3sK3KKd8NxzmGNtBQyXJ0NUfKwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMx8cAPz
GGgCL+43VsfNX/HIuSmlMB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4
M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvQjU2MjkzMzY4
NDMwMTFFQUI0MjcwQjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLYkUDBADLYlUwDQYJKoZIhvcNAQELBQADggEBAMhFE1KI
M2EAI/Uu61FD3nsfEOwbJRBvxtUY7uz6WSyJ4pmrTbCY0Wq4R65y6ZLV2t9rbwgA
iai0WhxuXaIa39wh4HFdfuRPUvsHBasyS1Ahosut4DX1ObKbgdOyz62e02fd0V77
7+v1BKco8ad9eJL1Eo7hTqh82Cb/Z1o11UHbimFkqMHAcHSpt2azDiay4RuEp0WO
S6zgcIANA/+/Hr83MTZOTmBZW2e/85Wlq5uG5VpwCvsXLJe1vt1vvyV4nWM4J8HZ
jJ6Yb78jghLZns7mH6y3Vn6NCB0gp98ti0Y1K0gNfO1t7uYHV5Fl/b6fvuxqhZON
luuxeaaUtZ6lxoQ=
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:03 2025 by rpki-client