Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/FC458FFABD2F11EFACAEDF48C4F9AE02.roa
File:                     FC458FFABD2F11EFACAEDF48C4F9AE02.roa (raw, json)
Hash identifier:          zB6o1ufSPR15qZaXVJkiDWkGqSq/IwuqWXWe0bUcf1Y=
Subject key identifier:   3B:28:97:9C:15:62:16:7C:F6:9E:42:F2:F5:BF:84:C4:5B:DE:AE:A2
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0493
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/FC458FFABD2F11EFACAEDF48C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 01:47:47 +0000
ROA not before:           Thu 05 Jun 2025 01:47:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     398343
IP address blocks:        203.32.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun  5 01:47:47 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6840f743-08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:2f:a8:a1:f7:87:a7:dd:cc:81:50:94:55:
                    d5:68:41:7d:cc:5b:cc:c8:82:61:37:a0:a0:7e:bc:
                    fc:50:10:26:11:39:4d:dc:5a:10:66:d6:80:e2:0d:
                    99:48:4a:1b:db:ea:e7:29:93:8f:47:69:5b:f6:4b:
                    97:d0:8d:a5:9c:ee:3c:8e:76:0d:0f:8d:78:bd:8c:
                    ff:bf:57:78:81:ee:96:48:46:44:cd:8c:c9:47:a4:
                    46:24:fb:6b:7d:f0:8e:84:86:f4:29:cc:d3:ae:a5:
                    86:18:5e:0b:19:a7:8c:38:6d:be:1c:ce:09:55:5a:
                    1a:9e:e2:fd:9b:df:3a:b4:4c:81:23:b5:ac:1e:62:
                    ba:9c:55:6f:12:78:60:35:e6:d8:d0:e0:a6:5e:53:
                    46:d4:96:1f:5c:71:36:37:41:c2:42:96:68:ff:1f:
                    c3:e4:6c:88:c3:bd:ad:09:e4:69:8f:15:2c:d6:51:
                    f0:59:1a:61:db:8c:f7:87:a2:d9:44:7d:80:d7:51:
                    05:15:c1:83:e4:76:c7:d8:c7:66:b5:e6:34:ff:83:
                    4a:30:75:38:18:c2:8e:2b:32:d9:c8:22:f4:9c:30:
                    e7:8a:05:51:f6:c7:a3:32:59:e4:40:2c:49:45:d5:
                    0b:40:41:02:db:42:ea:b7:14:12:57:5e:c5:ad:23:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:97:9C:15:62:16:7C:F6:9E:42:F2:F5:BF:84:C4:5B:DE:AE:A2
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/FC458FFABD2F11EFACAEDF48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a9:85:27:16:a0:9c:ca:f4:a8:e6:d5:bd:a6:81:bd:19:bf:
         cc:c4:10:10:05:4b:cc:69:e4:13:20:3a:a0:e9:ce:0c:7c:a1:
         4f:0d:9d:8c:37:b0:c6:ef:78:9d:e9:f1:a7:f1:56:1c:c5:03:
         0b:f9:3f:81:75:8f:eb:3b:12:41:ee:96:8c:92:28:cd:65:c3:
         f7:d7:69:14:6a:9b:c0:d7:a8:8c:41:ff:73:0f:5e:6c:fe:41:
         1d:2c:c2:ef:03:f4:7f:8c:1b:31:de:0a:6d:78:13:78:b3:07:
         5c:35:c2:3c:f7:31:38:d6:bb:b1:f2:da:64:2f:68:e1:d0:e3:
         25:1c:4d:98:b4:ef:67:85:02:14:00:2c:37:10:0d:e9:d4:59:
         a8:06:04:54:1b:32:1b:77:7c:3f:fc:b0:bc:c6:09:88:05:e1:
         8a:13:56:3e:14:e5:ad:3d:4d:6d:1a:8c:7c:65:62:3c:39:30:
         04:81:4c:f5:9e:1f:2e:ec:65:19:3b:b8:c3:a0:f6:84:b2:8c:
         2b:8d:38:54:8b:ae:c3:d5:b0:c7:ca:40:87:7b:01:0b:44:d6:
         02:b8:23:93:5c:9a:60:49:78:02:2a:1d:32:d2:65:72:ea:77:
         b0:a5:93:02:7d:8c:b4:81:77:73:ee:2f:73:e8:d7:01:a9:b6:
         65:f1:0e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:49:20 2025 by rpki-client