Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/268DF20A940C11EE9B034255C4F9AE02.roa
File:                     268DF20A940C11EE9B034255C4F9AE02.roa (raw, json)
Hash identifier:          aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=
Subject key identifier:   95:B9:EC:50:97:81:F8:73:D2:34:88:95:0C:EF:37:7F:2A:11:AD:F2
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       018C
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/268DF20A940C11EE9B034255C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 04:10:37 +0000
ROA not before:           Sun 03 Aug 2025 04:10:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136897
IP address blocks:        116.204.232.0/24 maxlen: 24
                          116.204.233.0/24 maxlen: 24
                          116.204.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Aug  3 04:10:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688ee13d-1303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:02:b1:bc:8e:d4:b7:63:ed:fa:10:f7:c4:
                    6e:3c:9a:3b:c0:47:e9:ca:a7:c7:ec:a5:67:f4:23:
                    fa:f6:ba:42:c4:bd:d8:da:14:9a:1f:69:db:7b:f4:
                    5d:9d:9a:bf:b2:45:57:b2:bd:d0:0f:a6:e1:28:31:
                    e8:16:57:bb:dc:39:0a:5c:b6:9a:23:18:d3:20:d0:
                    43:58:c1:68:9c:8c:7e:c7:4f:3e:4b:bd:6d:56:b7:
                    54:48:05:30:d1:7c:74:ae:a2:68:19:d7:11:39:17:
                    0d:3d:6f:56:d8:7a:31:21:40:c4:5a:1a:c4:81:ae:
                    1d:eb:38:ee:7e:56:4c:9a:1f:bd:55:5a:cf:f7:6d:
                    10:83:0d:15:2a:1d:ed:ca:7d:0a:78:3c:d2:de:1d:
                    ec:7b:ba:87:86:2c:a5:21:8a:f9:a2:f1:84:8f:94:
                    55:3c:d7:1e:18:bf:81:eb:88:11:be:77:e4:0e:a1:
                    d1:6c:80:b6:b3:06:e1:28:50:b5:91:b1:cc:ed:d6:
                    3e:88:92:34:f7:8c:67:6d:58:a6:b5:8b:97:9e:dc:
                    2a:68:da:11:d7:61:53:b1:60:e8:7c:46:da:a4:3a:
                    c4:b9:c6:db:21:9b:b5:70:27:8d:33:d9:89:57:87:
                    6c:26:a4:b2:40:42:11:bc:d2:98:c7:3f:98:65:e3:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:EC:50:97:81:F8:73:D2:34:88:95:0C:EF:37:7F:2A:11:AD:F2
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/268DF20A940C11EE9B034255C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.232.0-116.204.234.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:58:c7:f7:5b:d4:c9:3d:a3:bb:4b:6b:80:79:8a:35:99:
         fc:8b:71:ac:81:01:35:2c:ca:ce:ba:5b:aa:d2:be:7d:3c:d3:
         ce:d7:90:08:01:22:8c:a9:fe:ce:f8:d5:64:3b:dd:e9:bc:cf:
         12:c1:96:4f:5a:ab:7e:eb:d5:7e:13:6e:ac:da:25:7f:7c:bb:
         50:c1:81:97:7a:35:e3:07:2c:cf:ea:81:81:89:b2:ff:c9:62:
         63:d1:53:34:f3:6f:ee:41:4c:18:fd:3d:29:56:07:db:5c:3a:
         4d:20:fc:e4:71:ad:0f:c6:5b:99:65:a6:19:9b:5d:63:d1:20:
         a1:00:f0:71:bb:80:54:52:ce:03:0d:61:c0:f7:dd:72:0d:f1:
         94:86:6f:b3:13:71:3c:e8:0a:a5:f2:5a:d4:b6:b4:a6:33:0f:
         dc:14:28:01:31:8b:b3:1f:de:f9:7e:1e:6e:87:06:41:dc:c4:
         66:cf:d5:9f:15:43:c1:09:fe:06:13:e7:04:50:85:03:32:b2:
         aa:80:f0:7d:20:c8:6d:84:10:ec:4a:ec:a9:36:83:4f:d8:ec:
         87:b2:cb:15:a2:fd:35:2d:a4:46:0c:1f:c5:a9:a0:dd:ec:f1:
         db:16:db:e4:2c:63:ec:5f:9e:fa:52:6c:11:f4:39:76:5b:d2:
         89:f3:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:34 2025 by rpki-client