Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/E7729178378211EF822BAA6EC4F9AE02.roa
File:                     E7729178378211EF822BAA6EC4F9AE02.roa (raw, json)
Hash identifier:          9LBAFHVyWvEKSALgxe/WVtOrUQqJ4PPcHQSe6I3XcVM=
Subject key identifier:   A9:AC:B7:E5:0F:78:59:15:D7:DF:C3:FD:AF:61:35:6A:92:8C:E1:8C
Certificate issuer:       /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial:       19AD
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/E7729178378211EF822BAA6EC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 16:54:52 +0000
ROA not before:           Thu 31 Jul 2025 16:54:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4620
IP address blocks:        198.246.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 16:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6573 (0x19ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
        Validity
            Not Before: Jul 31 16:54:52 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688b9fdc-706c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:71:ae:02:b4:f9:b4:86:97:07:20:b3:a0:
                    01:f4:1a:67:08:af:23:20:96:73:94:65:1c:26:bd:
                    3f:d5:2e:29:11:77:5f:4e:d2:87:f7:50:04:50:3d:
                    e4:17:f7:b7:ce:a0:6b:25:aa:1f:db:e9:92:67:53:
                    6e:c7:c5:79:d7:9f:f5:1b:b7:a9:b1:eb:7b:dd:b5:
                    d7:00:47:29:c5:14:ed:0f:61:3f:2d:94:df:32:e5:
                    7b:fe:52:7c:43:6f:8d:5b:33:0b:f0:b4:1e:bb:b6:
                    84:d6:09:92:f5:a1:cb:00:92:c7:9d:14:e0:3b:ec:
                    f9:0d:c5:7c:24:fd:29:97:54:51:0d:49:50:36:b5:
                    ed:86:82:e3:48:77:7e:6e:de:29:9a:cc:30:54:e5:
                    0f:22:5e:9b:68:1d:ba:89:86:b6:6d:ff:1b:38:c1:
                    11:eb:49:17:75:22:64:2a:78:5c:3d:f9:ed:ee:a1:
                    68:af:0a:cc:45:4e:3e:f2:92:a6:8a:23:c8:fb:c1:
                    83:67:2a:87:ff:9b:60:0b:15:b2:f4:e6:48:4a:b4:
                    b2:b7:62:0d:47:63:e5:93:72:6b:22:94:c8:0f:36:
                    3d:ba:43:76:06:3e:b7:b1:66:65:60:27:9d:68:94:
                    1b:a4:a7:42:58:0a:4a:e0:49:23:0f:7c:49:14:62:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:B7:E5:0F:78:59:15:D7:DF:C3:FD:AF:61:35:6A:92:8C:E1:8C
            X509v3 Authority Key Identifier:
                keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/E7729178378211EF822BAA6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.246.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:1d:63:e7:8c:a4:0e:c3:09:4d:f2:30:89:5b:25:59:d8:
         8e:d5:e1:ac:d7:63:8a:07:e7:72:d2:da:4a:97:08:6c:2c:34:
         f1:3c:df:9a:e0:ea:03:46:9e:5a:fe:eb:86:09:cb:ec:0c:0e:
         da:e9:ac:dd:8a:74:74:dd:a8:ee:2b:d8:d0:e4:4f:a0:07:ce:
         3a:70:e0:55:3a:39:b6:4e:0c:3e:65:9f:c7:cf:eb:53:63:fc:
         a7:22:8e:21:fb:6f:3b:47:f3:0c:40:be:bb:ee:ad:e6:5e:fb:
         7b:31:4d:73:ba:fd:84:39:e0:9d:6a:ea:16:df:7f:3f:b3:25:
         87:ad:56:b2:ab:d9:04:85:12:0b:76:5e:2d:31:32:cc:0e:21:
         5f:a0:c5:96:14:ad:3a:27:fd:19:3b:67:17:39:5a:09:d8:d7:
         ed:89:5d:28:e3:38:8b:3a:32:db:fd:75:b8:6e:61:42:22:04:
         b6:85:8e:ad:4f:18:06:af:65:da:de:8c:1e:bb:75:ff:54:bb:
         4b:51:7e:e4:d8:e2:77:65:cf:48:b5:b2:8e:8c:cb:c8:f8:36:
         6a:1f:4f:73:a6:ff:87:c3:ec:73:70:2f:70:00:a3:0f:e9:59:
         f4:a4:3b:2c:41:67:26:fa:7e:47:19:c6:99:ce:7a:f5:5c:26:
         d8:d3:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:31 2025 by rpki-client