Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa
File:                     B8E7D994D00711EAB66A1255C4F9AE02.roa (raw, json)
Hash identifier:          vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=
Subject key identifier:   37:46:27:28:03:A0:37:8D:FF:BC:54:EF:FA:BE:2B:1B:6F:FF:34:FE
Certificate issuer:       /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial:       366E
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa
Signing time:             Wed 16 Jul 2025 14:50:34 +0000
ROA not before:           Wed 16 Jul 2025 14:50:34 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     20940
IP address blocks:        220.227.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
                          rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13934 (0x366e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
        Validity
            Not Before: Jul 16 14:50:34 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6877bc39-5e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:c0:01:eb:a3:fe:a4:6e:c3:8f:66:5a:b7:
                    04:37:4c:c3:ea:cc:f1:9d:de:22:0b:60:67:7c:c9:
                    24:d3:07:84:26:e3:99:2e:31:e3:8d:0d:33:4d:3f:
                    bc:1b:43:70:91:fd:fa:94:58:14:ce:db:c7:af:b8:
                    12:71:a2:18:03:ed:9e:e4:a7:fd:5a:30:dd:67:53:
                    d6:0d:b3:40:5b:11:38:8f:8d:1d:f1:13:64:88:1d:
                    9e:0c:45:9a:4f:9c:43:fd:58:0a:2e:77:46:05:fb:
                    bf:dd:f0:25:f7:00:81:c3:61:b4:9d:1a:ac:b9:2b:
                    f0:13:f3:c8:d9:5d:4b:bb:f7:d7:63:64:97:3b:5c:
                    cc:c9:f7:73:9a:29:58:95:4c:13:52:64:6c:3c:91:
                    08:37:98:bf:7d:48:0f:3a:f1:d1:d5:4d:d2:58:a7:
                    e8:5c:df:4b:7c:a1:3e:ec:f3:15:be:38:c5:6a:3f:
                    a8:05:ca:5d:66:8f:da:72:dc:d1:f2:43:5d:cd:6e:
                    f5:bb:41:b7:14:0d:5e:5d:4b:11:86:4e:86:09:2b:
                    7b:43:93:39:fd:52:97:a2:16:6b:0d:d2:1b:a4:2a:
                    c0:f3:b3:8e:db:11:15:07:39:54:5d:76:99:97:2f:
                    52:a8:ae:89:c6:16:27:81:d8:5f:d4:3d:75:64:ac:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:27:28:03:A0:37:8D:FF:BC:54:EF:FA:BE:2B:1B:6F:FF:34:FE
            X509v3 Authority Key Identifier:
                keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.227.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:42:5f:a2:3b:70:a1:e8:2d:c5:48:11:2e:fd:78:d9:b1:b9:
         e2:ce:78:44:b2:24:f9:a1:97:b1:b5:9d:9c:20:55:26:17:ba:
         07:e0:01:37:8f:7b:65:70:66:22:89:2e:b6:9b:3d:f7:60:3c:
         7a:4f:9b:69:2e:d1:af:1e:55:b3:d6:d9:5a:45:a0:d5:12:43:
         66:29:3a:50:f5:69:3b:9a:2d:d8:2b:fe:f3:09:64:40:09:9f:
         37:2f:1e:c2:c4:5e:50:c2:2f:bd:81:1d:f1:ec:01:b9:44:69:
         7c:a3:6d:97:14:b0:e3:ca:f8:32:de:02:84:97:39:e7:5a:bb:
         49:a5:22:2f:bf:5a:d5:ce:ac:9c:71:18:45:1a:e4:d5:8b:7d:
         b2:6e:ed:bb:5f:b7:7f:1d:58:41:cf:4a:d8:1c:f7:4f:1d:a8:
         16:78:8d:f2:33:04:b5:32:6f:8b:92:81:4f:6f:2d:3f:e8:bd:
         9d:67:ca:f7:f1:1b:4e:ca:4d:9b:42:5d:1d:5c:a6:31:fd:fb:
         1b:7c:9c:45:a1:d3:a3:b0:cf:90:cb:77:55:9c:00:89:e3:36:
         ca:3c:45:b1:5a:6a:e5:42:19:6a:90:38:62:87:27:0f:b0:ec:
         01:05:b0:fd:2d:68:fa:3b:26:58:d2:93:6d:b4:f7:d8:b2:ef:
         72:71:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:50 2025 by rpki-client