Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9FCDE686692911F0882CE164C4F9AE02.roa
File:                     9FCDE686692911F0882CE164C4F9AE02.roa (raw, json)
Hash identifier:          oNZyPj6D80lJCCbDNAThEBUDZiV2H/13MWSg2bFhHN0=
Subject key identifier:   EF:A6:C8:60:AD:BE:52:23:3E:5E:4D:A2:3E:AD:F0:01:5D:5F:72:F3
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       01CA
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9FCDE686692911F0882CE164C4F9AE02.roa
Signing time:             Fri 25 Jul 2025 07:33:15 +0000
ROA not before:           Fri 25 Jul 2025 07:33:14 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131162
IP address blocks:        87.124.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jul 25 07:33:14 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6883333a-7a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f9:7d:8b:a4:8f:09:92:64:cc:e7:4f:28:ac:
                    b9:e6:48:65:86:70:f8:bd:59:04:64:38:6c:27:4e:
                    8e:32:1a:69:f9:61:d3:08:1e:28:f0:61:12:2f:01:
                    9c:42:d6:2f:c9:35:d2:22:b3:d2:47:0b:ce:dd:9c:
                    6c:77:6d:3e:91:f1:dc:51:03:70:57:86:82:27:81:
                    2c:db:30:5d:6d:b5:b7:5a:35:9a:0b:43:5b:7b:04:
                    28:7f:f4:53:da:8e:4a:7d:a7:6d:e6:85:4e:ca:ee:
                    cf:95:55:14:7e:03:96:a4:09:5b:7d:3c:d7:54:f6:
                    4b:bc:39:09:cb:a8:3d:71:02:3f:a5:f8:4e:70:43:
                    07:35:3a:9c:bb:a5:12:3e:75:44:43:ae:8d:a7:f5:
                    df:83:96:09:b5:7b:a0:5c:c7:5a:ad:d1:6b:84:70:
                    e7:d5:d2:30:30:95:da:f6:1f:70:a2:49:56:fd:45:
                    40:c4:e0:fe:32:8f:52:45:12:0f:b6:71:d1:f6:70:
                    0d:cf:f9:86:7f:f2:8c:f4:ee:56:10:9e:05:00:ad:
                    3e:7f:b0:6a:5b:f5:42:fb:94:04:86:77:be:a3:8e:
                    3d:37:1f:9d:09:40:b0:38:24:8a:90:d4:77:1c:55:
                    0c:6e:49:d0:b8:4b:ef:c1:d7:b7:1b:f6:27:6f:43:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A6:C8:60:AD:BE:52:23:3E:5E:4D:A2:3E:AD:F0:01:5D:5F:72:F3
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9FCDE686692911F0882CE164C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.124.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:94:64:d4:7f:57:e3:20:f7:0f:cb:4a:f3:ea:bc:b3:9b:93:
         71:83:82:2f:4f:42:a0:1d:89:b5:3f:19:25:4c:4b:19:30:ff:
         9c:32:0b:71:46:8b:47:e0:cf:b7:1f:b6:f7:f3:a7:31:66:2b:
         db:2f:08:49:83:9f:94:89:d2:bb:c8:4f:2f:b6:c8:73:94:7f:
         8f:55:9b:08:12:d3:fa:d9:28:a4:44:bf:07:c6:9e:c4:ce:ed:
         b9:73:aa:ad:bf:55:3b:57:df:fc:f6:f9:1d:20:0e:8c:de:e7:
         1a:5b:f8:de:9d:1a:f5:7e:80:73:3f:7c:d1:b1:9d:a2:bb:5c:
         5d:61:a1:d2:51:1e:5f:38:43:b8:57:6b:74:76:5e:22:6a:b7:
         f8:22:fe:1c:21:5f:f9:b6:be:02:e4:05:45:6b:bc:9b:06:44:
         6c:cc:6c:17:9e:11:c2:be:3d:2e:c9:8c:84:df:9a:ee:00:5b:
         1f:8e:7b:54:56:99:15:64:e3:63:eb:89:84:40:0e:cf:61:03:
         5a:a8:cb:31:83:dc:2b:35:cc:de:a4:24:84:6e:f5:36:c4:c0:
         ea:30:8b:b1:a9:c2:9b:21:9d:14:bc:25:d2:5c:b8:75:70:ae:
         b3:76:ba:b3:e8:8a:7b:8a:00:92:6e:93:d3:c6:22:6d:d6:f7:
         40:f5:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:35:46 2025 by rpki-client