Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/DD726152945311EAB9A9B971C4F9AE02.roa
File:                     DD726152945311EAB9A9B971C4F9AE02.roa (raw, json)
Hash identifier:          y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=
Subject key identifier:   70:BB:CF:E9:7C:0B:A7:5B:72:A7:51:2E:AC:31:02:5C:55:F0:CE:85
Certificate issuer:       /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial:       098E
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/DD726152945311EAB9A9B971C4F9AE02.roa
Signing time:             Wed 06 Aug 2025 20:32:17 +0000
ROA not before:           Wed 06 Aug 2025 20:32:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38264
IP address blocks:        202.45.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
                          rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
        Validity
            Not Before: Aug  6 20:32:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6893bbd1-c8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:f1:1f:87:ac:8d:6d:0c:85:8e:6d:76:0d:
                    4f:d3:b3:d3:48:b3:ad:bd:a5:77:8b:48:6d:1a:98:
                    81:e4:0f:71:87:64:f9:07:c5:e4:89:0b:bc:a8:f6:
                    a1:c1:e9:b4:e5:d8:36:e6:18:65:11:1f:14:87:a7:
                    da:8b:55:93:ad:36:48:06:91:c7:d6:55:a3:2e:cc:
                    8e:ac:a7:20:f1:ce:d1:f9:c3:2a:7e:40:77:d4:12:
                    cc:cf:7a:29:8b:c6:7f:c8:8d:de:1e:dd:22:82:ef:
                    1f:31:ea:04:1d:25:8e:a7:e4:d8:ad:12:b3:7b:ab:
                    4e:01:0a:b5:30:d7:79:ee:97:a8:81:c0:03:a3:a5:
                    53:1e:19:51:7e:dd:c4:82:b0:0c:03:e3:09:e0:8c:
                    ae:22:53:ed:40:e9:16:aa:04:ee:53:33:30:1a:39:
                    3a:4e:60:a9:14:d5:af:42:4f:91:2e:55:9d:7d:da:
                    81:87:49:a7:79:7f:6a:50:8e:16:03:84:25:93:83:
                    29:b2:c1:62:93:d2:26:8b:50:db:2e:7b:b7:7d:e4:
                    2c:60:71:88:aa:b2:b5:bb:c9:da:79:de:06:15:06:
                    e1:c0:eb:55:1e:0d:92:a3:c1:2e:37:f9:47:40:24:
                    c7:21:77:5b:5b:26:ee:11:65:94:00:b9:cc:8f:7f:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:CF:E9:7C:0B:A7:5B:72:A7:51:2E:AC:31:02:5C:55:F0:CE:85
            X509v3 Authority Key Identifier:
                keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/DD726152945311EAB9A9B971C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.45.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:62:f4:77:7b:f7:02:74:b9:dd:76:1a:08:f0:a3:b9:98:be:
         4e:a3:39:bf:c5:3c:a5:05:0d:29:cf:fc:2a:90:d9:5c:92:45:
         67:73:5b:bd:42:4a:27:82:c8:68:e5:36:66:df:99:a3:f1:54:
         df:9b:20:13:15:c6:44:8c:19:3a:5a:72:b1:0f:7a:9c:c7:58:
         9f:dc:13:ff:47:74:8e:a7:33:d3:37:6b:7b:fd:85:35:69:4c:
         ee:62:15:59:68:b6:2c:8a:55:4a:3d:7b:46:f5:9f:29:76:8e:
         90:27:c4:fb:c2:8e:25:0d:71:90:4b:a4:dd:a4:56:d9:83:c1:
         6c:dc:52:7b:68:6a:37:d7:2e:ca:9e:91:b3:64:b1:3c:a2:58:
         c3:be:d7:6e:29:7b:7c:c4:a9:eb:21:39:84:30:40:e6:56:09:
         b6:46:af:c3:51:90:5e:94:e8:03:d2:bc:f8:5c:72:b5:1c:1c:
         0e:a7:37:5a:f0:92:41:00:88:f8:a0:88:b1:dd:04:f9:90:d3:
         fb:60:94:4a:75:83:47:15:58:00:3c:4f:27:2b:65:c2:e1:52:
         15:3b:91:aa:d0:a3:65:16:ba:dd:ca:d0:98:33:40:4c:f8:85:
         11:0c:5a:3c:b4:ec:da:02:ee:7e:5e:ac:68:6e:05:6e:bc:3b:
         ad:c2:41:12
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF
RkJBNDREM0YwHhcNMjUwODA2MjAzMjE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODkzYmJkMS1jOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tPxH4esjW0MhY5tdg1P07PTSLOtvaV3i0htGpiB5A9xh2T5B8XkiQu8qPah
wem05dg25hhlER8Uh6fai1WTrTZIBpHH1lWjLsyOrKcg8c7R+cMqfkB31BLMz3op
i8Z/yI3eHt0igu8fMeoEHSWOp+TYrRKze6tOAQq1MNd57peogcADo6VTHhlRft3E
grAMA+MJ4IyuIlPtQOkWqgTuUzMwGjk6TmCpFNWvQk+RLlWdfdqBh0mneX9qUI4W
A4Qlk4MpssFik9Imi1DbLnu3feQsYHGIqrK1u8naed4GFQbhwOtVHg2So8EuN/lH
QCTHIXdbWybuEWWUALnMj3/ttQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHC7z+l8
C6dbcqdRLqwxAlxV8M6FMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0
NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU3NkIvQkYxODMyMzI5NDUyMTFFQTgwNkU2OTcwQzRGOUFFMDIvREQ3MjYxNTI5
NDUzMTFFQUI5QTlCOTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKLZwwDQYJKoZIhvcNAQELBQADggEBAMJi9Hd79wJ0ud12
Ggjwo7mYvk6jOb/FPKUFDSnP/CqQ2VySRWdzW71CSieCyGjlNmbfmaPxVN+bIBMV
xkSMGTpacrEPepzHWJ/cE/9HdI6nM9M3a3v9hTVpTO5iFVlotiyKVUo9e0b1nyl2
jpAnxPvCjiUNcZBLpN2kVtmDwWzcUntoajfXLsqekbNksTyiWMO+124pe3zEqesh
OYQwQOZWCbZGr8NRkF6U6APSvPhccrUcHA6nN1rwkkEAiPigiLHdBPmQ0/tglEp1
g0cVWAA8TycrZcLhUhU7karQo2UWut3K0JgzQEz4hREMWjy07NoC7n5erGhuBW68
O63CQRI=
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:32 2025 by rpki-client