Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4E18D51C40F211F09CFBD641C4F9AE02.roa
File:                     4E18D51C40F211F09CFBD641C4F9AE02.roa (raw, json)
Hash identifier:          FkElb4DzhTSYipziJhzQfy939UGrt2VbKugFp5a4qR0=
Subject key identifier:   9E:39:DC:B9:93:91:C4:C9:ED:8E:1C:69:7E:F9:96:2D:C6:4E:49:04
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0262
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4E18D51C40F211F09CFBD641C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:54 +0000
ROA not before:           Thu 05 Jun 2025 03:10:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        202.134.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410abe-775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:6c:c5:ff:cc:25:f6:56:86:8c:c7:01:1c:
                    60:2c:29:aa:83:61:97:31:df:f3:7d:8c:7e:55:74:
                    9c:1f:b8:aa:a0:38:c6:f6:f7:c4:07:af:cc:21:63:
                    94:d2:65:bb:31:52:1d:d5:b8:a2:cb:4f:65:eb:e5:
                    45:2a:50:df:fa:45:3e:5e:b3:e6:a8:79:68:a4:d0:
                    90:8d:68:a3:ee:02:b8:54:d8:c2:3a:b3:65:ac:ec:
                    3f:c9:dc:cd:a0:ec:0e:d7:56:42:0a:2e:f7:1e:53:
                    70:f3:94:a2:7f:8e:82:33:bc:1c:2e:ac:a9:fa:ec:
                    d3:78:0f:74:b2:d5:a2:1c:ab:e8:d4:9d:82:6b:d6:
                    7d:2d:54:64:43:22:9c:aa:28:01:2b:57:8c:0b:07:
                    eb:94:3e:eb:4c:ee:b9:ff:83:85:48:88:06:a9:4a:
                    7e:c3:39:a8:22:4b:50:4b:f5:b0:89:eb:a6:53:7c:
                    86:f0:5c:85:56:23:1f:13:05:4b:42:77:a5:f0:c3:
                    b8:dc:93:77:f9:15:10:1d:27:aa:27:5f:bc:fd:db:
                    a8:a4:ac:d6:da:e6:35:03:7f:d4:12:13:b0:ba:98:
                    d8:d2:6a:15:5a:c5:4a:55:8a:b8:af:ab:b1:27:49:
                    26:97:9a:40:61:cd:91:ce:aa:41:d8:01:08:a6:2b:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:39:DC:B9:93:91:C4:C9:ED:8E:1C:69:7E:F9:96:2D:C6:4E:49:04
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4E18D51C40F211F09CFBD641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:36:1f:e3:1d:bd:03:0e:34:9d:3d:6a:35:35:14:23:0f:c7:
         07:f2:8d:a2:89:36:28:ee:74:5f:38:87:de:0c:33:a9:e5:c0:
         ad:55:52:d9:23:27:a6:b0:2d:74:de:97:c7:ed:4c:36:22:73:
         3d:15:53:28:c0:5d:52:84:2a:1c:a3:d9:fc:28:a5:f1:c5:8f:
         4d:8e:21:cf:5b:d8:6d:ed:ee:97:f1:56:49:f6:3e:6a:8a:13:
         9d:95:7b:75:fa:57:98:66:bf:6c:fe:b3:64:7a:18:b6:37:5e:
         77:8a:6e:eb:60:ab:c8:af:76:ee:ed:86:2a:5f:26:b7:8a:97:
         32:9c:13:ed:72:5c:24:db:45:21:39:20:25:ba:a0:a2:ba:42:
         29:b9:7a:f8:bb:25:97:31:37:72:da:4e:1a:a1:da:26:35:28:
         17:1d:c2:f5:43:42:c7:32:2f:6d:33:d1:ff:09:29:44:4f:e0:
         3a:15:84:c8:03:e3:cd:ae:d0:b5:0e:cd:19:fe:a8:0d:4b:ea:
         be:7d:fa:9c:b0:fa:f0:31:c4:1b:54:ce:8f:d0:79:44:c1:a3:
         8c:64:ef:dc:0f:09:6a:ff:5d:b2:61:e8:ec:de:0e:db:70:57:
         60:cc:bb:12:06:4e:79:53:7c:75:64:4c:86:6f:3b:5a:c3:80:
         95:1b:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:41:06 2025 by rpki-client