Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/B25E5954768D11F091768048C4F9AE02.roa
File:                     B25E5954768D11F091768048C4F9AE02.roa (raw, json)
Hash identifier:          bFSzjXTpedQHU5GXRyOAp3ruzrbAgAWRW8Prl1dvtXY=
Subject key identifier:   45:58:FC:03:B6:36:E8:88:27:1D:AA:6E:29:B5:D0:3B:D1:7C:57:63
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       06
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/B25E5954768D11F091768048C4F9AE02.roa
Signing time:             Mon 11 Aug 2025 08:32:20 +0000
ROA not before:           Mon 11 Aug 2025 08:32:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     147199
IP address blocks:        210.56.146.0/23 maxlen: 23
                          210.56.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 08:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Aug 11 08:32:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6899aa94-4770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:18:27:c5:03:9f:be:24:d8:2a:21:f4:24:
                    83:4a:8b:b0:98:7e:1d:b3:a4:08:c3:98:06:e7:95:
                    45:61:e6:ec:b9:52:85:37:d5:57:9b:96:53:e4:73:
                    cf:81:fc:fd:2e:72:1b:aa:b3:6d:27:06:8c:50:b6:
                    12:29:39:d8:a4:a2:a1:f2:4f:31:db:ca:12:d5:60:
                    25:dd:2a:a6:96:68:5f:16:32:67:ba:84:12:f9:70:
                    c9:7f:cf:15:54:0a:ab:0c:7b:5a:0b:8d:f9:9e:05:
                    f9:39:85:63:3f:3c:1c:1a:43:aa:b9:9d:6e:ad:55:
                    de:09:19:2b:0a:ac:29:d5:7a:ad:b7:fb:4a:9c:1b:
                    4e:36:ae:70:65:6d:1b:c8:39:db:09:c1:18:9c:dc:
                    b4:2f:27:33:2e:80:a9:f8:7c:23:ee:a9:41:f1:ef:
                    3f:e4:bb:b9:a5:bc:5e:12:20:9b:04:e7:65:f8:93:
                    9d:93:9f:20:9c:bd:f5:3f:0c:3a:35:4d:7c:8e:0a:
                    a5:16:5f:67:a6:f5:c6:5f:67:4e:d4:dc:32:25:49:
                    a0:0b:78:1a:9a:b0:f8:ee:55:ec:3f:9c:f2:ba:7b:
                    f9:78:c2:1c:ed:a4:7c:7e:89:d4:4c:2c:7e:57:0e:
                    3d:85:95:4a:e0:05:f9:f7:69:b8:9c:d2:8a:33:87:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:58:FC:03:B6:36:E8:88:27:1D:AA:6E:29:B5:D0:3B:D1:7C:57:63
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/B25E5954768D11F091768048C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:3f:79:a9:a3:e7:96:57:73:31:5f:53:c4:20:a2:68:8e:
         5c:84:25:f6:8e:74:58:ea:53:c9:10:46:7e:b2:d7:81:fd:df:
         8d:4a:57:e7:ee:b9:dd:16:7f:c7:83:af:ed:c6:bc:a1:ce:ff:
         7e:c4:f1:84:8d:17:20:8d:f5:3c:9c:67:76:6d:83:54:5d:c9:
         cc:71:99:81:e3:fa:ed:18:dd:cd:3e:e6:28:19:a4:b9:31:a9:
         d3:8e:36:b7:80:b8:17:35:73:6a:e5:f4:9b:63:8d:3e:b5:84:
         e3:57:cc:e3:58:26:42:fa:c9:f6:7d:73:94:ac:5f:82:d7:b9:
         a4:d3:0d:ad:f4:90:34:63:b4:74:6e:9c:c8:c5:2d:e9:dc:62:
         4b:e2:85:b1:5c:89:be:7f:e4:11:e4:fc:68:7b:84:c0:e0:c9:
         70:d4:46:f2:ca:5c:86:43:e1:95:35:2b:e2:39:fe:08:8a:55:
         81:3e:3f:66:8c:cc:d6:c3:cb:8f:5f:91:c2:d1:ce:b7:e5:1c:
         41:ba:8b:eb:68:25:7d:97:d7:2e:39:e4:f4:5b:1d:1c:cc:34:
         59:4e:99:6d:1b:1e:9d:66:48:15:02:bd:87:eb:aa:df:ac:72:
         d3:96:dc:3b:c6:03:f8:d8:e2:e7:85:d8:98:fc:f8:d5:83:3d:
         81:60:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 15:46:00 2025 by rpki-client