Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/34A857166DE211F0BE500371C4F9AE02.roa
File:                     34A857166DE211F0BE500371C4F9AE02.roa (raw, json)
Hash identifier:          HmDUno0HSKluJWL/25Jv0NxVQMmd6xGWMJWd+mUOe9g=
Subject key identifier:   27:D1:96:90:13:90:16:73:29:F7:79:3E:37:78:7F:32:E9:5E:14:BD
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3920
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/34A857166DE211F0BE500371C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 07:44:36 +0000
ROA not before:           Thu 31 Jul 2025 07:44:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141023
IP address blocks:        115.186.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14624 (0x3920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jul 31 07:44:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=688b1ee4-5d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:7e:3a:46:ba:ce:58:6a:fc:df:ee:df:01:
                    6a:24:24:3c:5c:37:ad:7a:ac:7a:8b:04:2f:a3:85:
                    1e:01:be:25:fc:91:eb:46:b8:36:8b:c1:66:f5:18:
                    5f:3b:b9:4f:80:02:c3:bc:bc:c6:d1:52:a0:2d:ca:
                    d5:eb:18:f1:ba:49:70:3f:c8:65:52:c4:74:f6:f0:
                    5c:ec:f5:7f:51:de:b8:03:a8:31:c7:b3:7e:cf:d0:
                    de:36:08:c5:c3:b9:72:d5:49:c2:82:41:97:49:74:
                    3f:06:77:de:c8:1b:24:34:50:86:bd:63:f9:0c:63:
                    f5:1a:e6:ca:43:35:54:e3:b9:3b:6d:a9:77:5e:98:
                    ad:b1:45:1f:e4:4b:eb:fd:e9:fe:9b:00:5c:e3:c5:
                    10:10:76:12:58:bd:4f:57:d2:61:a2:07:ff:da:58:
                    81:47:91:a8:ba:c4:49:7a:fd:e5:b9:f5:ab:e6:a4:
                    6a:71:8d:d5:db:64:23:b2:e3:e1:2a:22:8a:f3:20:
                    36:b5:eb:3b:a7:94:88:5b:33:be:fe:af:99:c7:77:
                    39:1c:4a:e4:45:56:16:3b:cb:43:d0:3a:f0:6e:1c:
                    f3:06:18:36:fd:ad:2b:fb:e0:8a:4c:79:cc:87:13:
                    10:ac:fc:93:2a:cc:76:cf:91:f2:d6:fa:6f:c8:e5:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:96:90:13:90:16:73:29:F7:79:3E:37:78:7F:32:E9:5E:14:BD
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/34A857166DE211F0BE500371C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:57:a9:eb:c2:93:d5:06:be:70:0f:b8:16:01:9d:d0:64:4f:
         8e:23:21:d0:6a:78:5b:1d:3c:ea:3a:63:62:17:93:27:22:4f:
         63:bc:91:ac:da:23:23:ed:bf:16:97:88:bf:bf:31:1b:b7:3a:
         8c:a1:ff:fc:80:0b:1c:37:04:cb:6e:55:74:5e:b4:1c:46:91:
         c7:6a:54:2b:e5:bf:83:1a:0c:04:07:b7:ad:f8:e1:d6:16:10:
         42:ac:b8:bb:b3:43:4b:44:f0:a8:e3:9c:51:0c:f8:39:cd:d3:
         44:df:85:18:20:29:66:2a:7a:9d:e8:be:d5:d9:05:0a:57:ab:
         3c:40:18:cc:10:7a:86:49:9f:2c:40:7b:f8:35:be:62:1b:39:
         31:6b:f5:b4:23:59:2e:15:df:dc:26:d2:33:ea:f4:d9:2f:5b:
         ba:42:b0:82:8b:e2:1b:e9:4d:92:3b:92:a0:47:3d:97:47:c1:
         f1:d8:91:48:fc:a1:34:e3:fe:e7:fe:a8:b8:a4:80:58:87:cb:
         07:f7:f6:af:22:44:05:be:5a:df:a5:59:73:2e:2d:5e:70:68:
         50:6d:6f:2e:46:12:61:da:17:cb:1f:da:2e:eb:e6:02:ae:29:
         b8:3b:37:26:a2:20:3d:a7:cd:c4:fe:81:4c:0e:ab:43:fa:26:
         57:f1:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:12 2025 by rpki-client