Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/212DD5DEEFCB11EFBA51D367C4F9AE02.roa
File:                     212DD5DEEFCB11EFBA51D367C4F9AE02.roa (raw, json)
Hash identifier:          yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=
Subject key identifier:   03:C6:52:4C:3D:7E:DC:FF:DC:4E:E7:7F:35:1B:E3:58:E7:91:09:90
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0490
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/212DD5DEEFCB11EFBA51D367C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 01:47:45 +0000
ROA not before:           Thu 05 Jun 2025 01:47:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        203.32.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun  5 01:47:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6840f741-865b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:f0:aa:d4:0d:d8:94:da:89:af:da:5c:b4:
                    ef:f1:5e:f0:64:7f:22:e0:97:6d:06:b4:a7:ff:2c:
                    66:26:17:91:4b:21:89:5d:de:de:4f:f5:36:32:4e:
                    ae:fc:0c:32:85:a6:ff:4b:a3:2b:2f:21:60:1f:b4:
                    27:c8:53:11:a1:40:3f:9e:6a:b3:2d:99:3d:01:16:
                    cf:f2:75:15:d9:9e:b7:2e:95:cf:c8:aa:f3:2b:b0:
                    16:c5:86:5e:67:3d:9c:f7:cd:e7:b1:bf:96:79:d9:
                    bd:1a:92:d0:da:5a:1d:17:fe:20:3a:af:aa:82:de:
                    f3:b1:8f:35:6e:51:ea:80:b6:2f:49:c2:90:5c:d2:
                    5f:18:22:eb:df:35:31:b9:e4:1e:0c:91:c8:f9:9f:
                    35:e4:6c:68:41:6f:7d:bf:71:0a:7f:2f:15:c5:56:
                    bc:3c:4a:89:2c:b6:01:cb:0c:c1:14:d4:13:69:e0:
                    b4:58:13:db:88:66:c9:57:3d:50:d8:f9:8a:20:9f:
                    15:f5:97:68:b6:91:d6:e3:bb:58:d0:bd:77:82:94:
                    62:6d:f4:5b:dc:e7:f6:f6:35:35:e3:e1:92:8e:a1:
                    d9:90:fc:48:d3:2b:b9:ee:f2:2f:1e:37:34:58:4e:
                    96:4f:67:1a:4a:59:4b:15:41:19:b0:8f:fe:09:0a:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C6:52:4C:3D:7E:DC:FF:DC:4E:E7:7F:35:1B:E3:58:E7:91:09:90
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/212DD5DEEFCB11EFBA51D367C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:4e:e0:23:0f:31:78:f2:2f:27:67:4f:c6:e9:08:ec:50:
         04:b3:95:e2:7b:92:05:e7:11:78:e9:4f:6e:3c:17:74:f5:15:
         43:47:79:c0:52:86:f0:93:ac:21:6f:e0:ec:f7:18:0b:b7:ea:
         a9:b5:7e:b8:77:95:6e:27:8b:ed:10:05:58:16:19:0f:0f:00:
         af:a0:b8:73:f0:5e:5d:85:83:77:56:b6:74:48:bc:22:c2:36:
         83:8d:6a:16:26:56:79:24:4a:90:67:5a:b6:ac:1b:0a:1f:52:
         bb:9c:ed:13:18:a7:d6:0d:57:97:d6:ef:e9:48:7f:c1:6c:15:
         6d:85:94:53:e6:79:e6:d9:43:2c:d7:6c:ee:40:f0:6b:80:62:
         21:67:95:c9:56:91:4e:5d:f3:d8:32:76:f5:8a:b5:93:31:2e:
         b5:b7:36:9b:3f:da:78:96:9a:e9:93:e7:d6:64:0e:d1:cd:f3:
         48:b2:f6:33:d4:52:34:b1:d8:50:2e:15:6d:87:3f:6a:6f:f3:
         27:1d:b9:eb:47:fa:38:7e:d4:a6:67:7e:1a:a5:0f:fc:e0:7b:
         02:93:45:80:39:7f:52:21:a2:0d:2d:fc:7e:cb:37:49:47:d1:
         3a:6e:f2:d6:af:ab:47:4b:9c:c6:40:c4:3e:ca:b9:15:d4:40:
         8b:c7:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:31:51 2025 by rpki-client