Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
File:                     AB4B141CA24211ED92C4107BC4F9AE02.roa (raw, json)
Hash identifier:          gznbpzQsXm6xdg/ldBzHxBtH3yLXVXqXYnLIiSuqeug=
Subject key identifier:   64:27:C2:88:04:A3:EB:92:12:68:69:70:98:73:43:0A:6D:F7:49:7F
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0665
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
Signing time:             Wed 30 Jul 2025 23:34:49 +0000
ROA not before:           Wed 30 Jul 2025 23:34:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     3836
IP address blocks:        203.185.96.0/19 maxlen: 24
                          2001:f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Jul 30 23:34:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=688aac18-eb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:c2:3e:e8:d6:66:1b:f6:56:eb:d8:9d:47:
                    61:02:e9:c4:4c:8b:1e:bf:3f:98:8e:98:6c:bb:f2:
                    df:b1:2e:d7:1a:6a:49:fd:ef:2c:f4:0f:81:f7:66:
                    36:c3:d3:ff:6a:d9:ea:73:3d:63:79:ec:c4:cb:05:
                    b7:ff:fd:91:6d:82:60:15:9b:50:1a:c6:f0:60:36:
                    1f:32:8d:cd:3d:f8:52:ee:4e:c1:00:1b:76:99:4c:
                    fd:a2:12:08:0f:64:96:08:0a:e4:f1:85:4e:e0:35:
                    41:b8:97:bc:55:0e:05:bb:b0:ab:45:dc:1d:0a:be:
                    ae:9f:71:62:e6:b8:49:94:2e:45:31:2e:e3:18:ac:
                    2c:69:73:c5:a9:ed:14:1e:32:96:e8:13:4f:d5:60:
                    23:dc:b6:65:f9:d8:2a:ae:6e:7e:73:eb:8e:16:4a:
                    c3:bf:2b:d8:03:f8:d1:74:a4:63:7b:19:a8:59:7a:
                    a8:c5:42:8d:8b:8f:d4:19:4f:fc:06:39:28:03:fe:
                    ae:de:2c:54:24:96:e5:20:03:fa:ac:89:01:17:41:
                    f2:4f:64:a8:c2:cb:77:13:c9:de:7e:40:b8:ba:c7:
                    10:c0:6e:dd:24:e4:a9:db:3f:fb:fd:a2:d7:11:a8:
                    87:d5:7d:08:80:a2:93:6f:fc:f6:ea:78:f1:ef:a4:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:27:C2:88:04:A3:EB:92:12:68:69:70:98:73:43:0A:6D:F7:49:7F
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.185.96.0/19
                IPv6:
                  2001:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:45:f6:9e:3c:c7:5b:86:b2:18:0c:49:44:94:55:dc:f7:07:
         07:24:f5:df:12:e4:84:34:17:05:4a:de:72:b7:f8:21:25:e2:
         11:39:c5:70:66:b4:70:16:05:ed:c9:cc:b4:ec:20:c8:76:92:
         1f:14:8d:b4:29:79:f0:fd:ef:17:4b:8f:0d:bd:5a:79:9f:b1:
         52:b4:b4:98:0d:79:9c:28:c9:f5:e2:e8:f6:87:8f:98:b6:d0:
         35:1e:64:fc:5b:aa:f2:d2:b9:30:d6:77:57:f0:20:2d:83:eb:
         7d:d1:9a:7f:9f:52:1f:dc:1f:72:51:d6:11:37:af:45:17:41:
         0b:fb:8f:6f:a2:7f:31:39:55:55:e5:83:af:e0:a9:f2:c7:82:
         e4:e8:93:c2:43:60:69:0b:86:5c:e0:fa:de:53:ba:39:7a:61:
         7c:0c:7e:f2:e8:4d:db:9b:4d:98:d9:13:34:37:8e:e2:c9:7f:
         49:eb:95:56:f2:b2:f2:65:cf:0e:fb:57:62:83:70:a5:a0:dc:
         0d:a4:7b:49:0d:73:3e:1a:5f:d8:1d:ec:28:c2:7a:a7:09:90:
         2c:e3:dc:f9:3e:e2:7e:75:66:7a:2d:28:4e:82:18:80:0c:92:
         80:57:4f:7d:e4:14:c1:9a:b5:86:f8:2a:cc:d2:21:e3:12:f7:
         d8:45:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:35:42 2025 by rpki-client