Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
File:                     005C56227B2411EEBB6FC444C4F9AE02.roa (raw, json)
Hash identifier:          CU1eAGsMx6RBXgQiGyjyh8LzUYQ2aW60OCXtvFpuRVA=
Subject key identifier:   9F:84:24:54:41:74:D6:6E:6E:33:FA:27:1D:DF:A7:BA:38:7A:B4:EF
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       025C
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:49 +0000
ROA not before:           Thu 05 Jun 2025 03:10:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     399641
IP address blocks:        125.62.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410ab8-f7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:30:a3:8c:80:3a:c4:de:6e:1b:e6:b6:0d:
                    15:4c:02:3d:bb:4c:74:3c:af:d5:39:91:b8:29:f2:
                    b0:01:02:ae:86:aa:83:21:d7:d3:4d:7c:5b:70:f4:
                    bf:42:ab:48:fe:92:98:4c:a8:b0:ac:f9:05:29:a4:
                    e8:b3:6f:64:44:96:b4:94:8f:30:df:ac:b3:3a:92:
                    84:9b:37:6b:27:16:e7:2a:3d:4d:85:06:78:e5:32:
                    d1:6f:bf:fe:29:c1:65:2c:86:3c:9d:bf:5f:07:bf:
                    ca:3f:91:9f:40:d5:3f:4c:27:d5:2f:c4:b9:cf:5c:
                    ca:69:a4:e6:f3:40:c8:e6:d0:35:2e:c8:26:e6:f4:
                    12:80:cc:e3:91:c8:2b:ff:aa:3e:cf:bc:fb:ca:aa:
                    2d:23:92:62:82:34:d0:b8:a2:fd:1d:43:07:13:90:
                    27:de:36:c9:c7:fc:22:82:0c:94:60:0a:04:05:8c:
                    a6:17:2d:48:00:0c:51:fe:21:74:5e:3c:68:3a:94:
                    80:8a:c6:68:6d:6b:8b:f4:c0:0c:b5:ef:68:0f:2c:
                    65:32:85:72:74:8e:40:1b:ec:12:94:4d:d7:72:43:
                    b2:92:0f:80:da:a9:f1:3e:38:ce:1e:ff:a7:7f:73:
                    c6:8e:6b:83:f8:e0:59:97:76:d0:97:8c:12:5f:14:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:24:54:41:74:D6:6E:6E:33:FA:27:1D:DF:A7:BA:38:7A:B4:EF
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:11:ae:f2:c6:7c:16:1a:4d:2f:a8:4f:8e:d5:39:d9:05:75:
         b1:ce:11:ff:a2:b1:74:c6:e4:61:b9:6e:c1:df:b1:06:3f:f3:
         a4:ae:58:dc:54:2f:80:17:5b:30:21:81:e9:24:69:fa:10:a0:
         1b:fe:98:87:46:1c:d4:c4:57:5c:f9:95:8d:50:41:8a:e5:ad:
         2f:07:ee:17:ca:27:12:07:89:73:69:da:3c:04:9f:5f:5c:4f:
         77:9f:25:83:bf:1b:ed:be:aa:3c:fb:c6:63:61:9f:b7:14:e6:
         d9:06:9d:0e:95:d4:41:62:3f:86:5d:d9:0c:16:c8:e5:fd:15:
         30:c5:85:f6:a4:c4:6c:a7:e2:08:fe:e1:1e:ab:44:9c:25:b5:
         05:da:b4:05:6b:47:f9:e7:07:45:84:e5:b1:6a:ab:3a:b2:f5:
         5c:43:80:55:17:a8:1b:bf:9e:37:84:0c:4d:40:44:12:fe:c1:
         b0:0b:28:e9:ed:fe:c1:f5:32:21:48:f0:d1:e7:80:d4:9f:69:
         ac:6f:6e:fb:e8:b5:fe:83:b6:e6:2d:68:ad:ea:5e:b5:31:6d:
         17:d1:8b:ed:18:2e:d6:cc:bf:c2:46:0d:3c:7f:07:25:ff:10:
         db:a7:ee:49:ca:a4:8c:c6:a8:c4:86:b5:b3:21:03:26:24:e6:
         9d:15:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:37:24 2025 by rpki-client