Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
File:                     11DDFF8E54DF11EDB7409267C4F9AE02.roa (raw, json)
Hash identifier:          /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=
Subject key identifier:   45:50:8F:AB:5F:24:79:08:FF:C2:DC:91:39:ED:75:7E:39:8C:22:4B
Certificate issuer:       /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial:       01F1
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
Signing time:             Tue 27 May 2025 03:00:39 +0000
ROA not before:           Tue 27 May 2025 03:00:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56182
IP address blocks:        202.0.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
                          rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
        Validity
            Not Before: May 27 03:00:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68352ad6-c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:7e:91:09:97:dd:09:70:eb:95:dd:5c:52:
                    96:4c:fc:08:45:1d:b1:89:4e:3f:08:6a:0d:cb:80:
                    c9:aa:44:14:e5:22:ec:15:d9:89:77:35:70:ea:f8:
                    e3:49:8c:64:3e:f9:de:e0:17:00:a5:80:aa:8b:db:
                    9b:27:c5:2b:14:33:e5:1b:3c:89:36:af:56:1e:a3:
                    32:ec:ce:bb:63:0d:b8:62:e9:84:02:b3:5f:3a:14:
                    6d:e4:fc:ae:51:3a:87:d6:9b:09:b7:cd:6e:af:54:
                    53:a0:9c:8f:e6:ea:8f:5d:ce:2b:96:12:ae:bb:31:
                    10:6b:5f:54:de:ef:55:9e:00:81:12:b4:fe:13:71:
                    51:37:fc:1e:9e:7f:86:9c:66:4f:63:92:5e:9c:ac:
                    b2:3a:d0:ea:26:c6:b9:38:25:e8:33:1c:e4:67:15:
                    52:5b:2b:d4:3f:d7:df:97:05:ad:ac:89:52:0f:a4:
                    6b:c1:cb:dd:22:87:9b:2f:6b:df:63:3d:4e:ff:fb:
                    3c:6a:6d:0a:e7:14:f1:0c:f7:53:79:9b:53:c1:0c:
                    e9:23:44:a6:af:bd:cb:d8:63:53:ce:02:8f:9f:21:
                    b9:ca:94:78:c0:6e:a5:9d:a6:cc:bc:95:ff:d2:c5:
                    28:bc:a3:72:cb:ac:5c:ab:75:d6:9e:bc:47:87:30:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:8F:AB:5F:24:79:08:FF:C2:DC:91:39:ED:75:7E:39:8C:22:4B
            X509v3 Authority Key Identifier:
                keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:5e:31:56:36:26:8f:73:32:41:4c:f7:8f:87:99:60:f7:fb:
         1e:a6:c4:ba:8a:da:ab:7d:65:a4:27:bf:49:c4:2f:eb:30:dc:
         20:16:80:39:90:4a:ea:67:10:ac:3b:ae:a7:7f:67:97:f7:6f:
         f1:5a:51:dd:4c:bf:f0:0e:36:19:1c:e2:1f:43:4f:d3:17:49:
         54:cc:4c:fa:de:89:fe:91:3f:fd:09:00:58:81:d1:3b:fa:9f:
         53:7e:6b:e7:39:78:81:7c:ab:c9:6d:99:76:ab:eb:c5:f4:3c:
         55:23:a0:24:5a:17:49:0b:e8:cb:84:68:42:4a:37:b8:d0:d3:
         a2:92:2c:51:a6:48:f9:61:40:41:ad:bc:ac:05:e9:6b:4b:7d:
         6f:5b:6a:47:c3:09:a2:49:e4:cf:72:55:18:1d:48:9c:34:02:
         66:30:bd:9b:f3:94:4f:18:d0:f7:46:bf:47:6a:42:67:9c:18:
         3c:2d:6a:a5:36:c7:81:c1:d2:b2:f9:8c:de:b6:55:c9:73:a4:
         7c:55:95:11:e2:ec:80:75:85:bc:e1:0e:56:a1:16:05:93:f3:
         2e:2f:11:b5:48:b8:e4:da:b7:90:b9:22:8d:18:91:6d:34:9c:
         38:ad:9f:ab:70:ed:cd:76:b8:eb:ed:00:1b:a2:f2:c8:3a:09:
         6a:30:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:08 2025 by rpki-client