Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/63FFD6349A6611EEA0301E57C4F9AE02.roa
File:                     63FFD6349A6611EEA0301E57C4F9AE02.roa (raw, json)
Hash identifier:          OMXt5cwDpuTWEaY7/B3Qmvuufr9QMT9qpc3zvIWwq8E=
Subject key identifier:   44:44:A4:5F:D3:56:0E:8A:48:CB:91:3F:D9:A3:97:A0:ED:98:64:7D
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0259
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/63FFD6349A6611EEA0301E57C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:46 +0000
ROA not before:           Thu 05 Jun 2025 03:10:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23679
IP address blocks:        202.134.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410ab6-8819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:a7:f3:bc:0d:21:0d:81:f7:89:26:12:1e:
                    17:bc:a8:88:5c:c2:b4:7a:8e:eb:94:6d:c2:50:da:
                    26:da:1f:dc:40:a4:73:5c:c1:af:98:d3:0b:6b:4e:
                    eb:b2:43:62:f1:24:67:3f:22:aa:d6:ea:8b:06:ca:
                    8d:4b:cf:c5:92:66:ed:da:4f:80:c7:ce:78:21:e1:
                    bb:ac:02:dd:6b:1c:c0:99:10:98:64:2f:2e:3b:c2:
                    23:0a:a0:e1:96:c6:7d:c2:64:1c:86:ea:63:0b:2a:
                    4d:5f:f1:dc:da:26:22:46:96:4f:2f:ed:13:a5:15:
                    bf:61:40:40:c2:ef:6a:4d:b3:30:29:72:f4:a6:c1:
                    56:61:5d:5b:09:36:ec:59:aa:98:7c:09:ef:c5:00:
                    c1:d6:a1:1a:0b:f6:0b:e2:ba:1c:57:ba:ca:22:32:
                    93:47:dd:36:3c:10:ea:1e:1e:b3:e4:c3:eb:2f:f9:
                    d4:5b:a3:36:24:c3:34:e1:d8:3f:d6:26:7a:a0:a0:
                    a7:10:71:76:9b:6a:0d:5d:91:59:f2:64:49:9e:e0:
                    0c:da:75:c6:c4:18:c3:ac:98:29:5b:2f:90:7e:5a:
                    e1:61:78:13:48:9a:0d:bd:87:1d:d8:88:54:1e:c9:
                    69:7e:50:a6:99:c5:83:ba:10:58:54:28:51:54:2f:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:44:A4:5F:D3:56:0E:8A:48:CB:91:3F:D9:A3:97:A0:ED:98:64:7D
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/63FFD6349A6611EEA0301E57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:38:a7:f5:31:e9:27:6b:bc:cb:08:33:98:15:50:e9:d2:fb:
         5d:97:3e:17:fc:94:c5:2e:4e:f4:7a:a9:f0:8c:9f:6a:d4:38:
         1f:60:dc:6d:9b:d0:dc:49:84:b1:28:72:0a:66:ac:68:81:7b:
         82:db:7e:f6:22:17:de:94:d3:7d:cb:93:e4:c4:86:99:a1:d5:
         4b:1b:d7:72:1b:b4:26:ea:68:27:92:0e:2f:18:cb:60:78:dd:
         21:22:ba:94:e4:44:85:55:b4:75:2a:61:2d:36:d2:83:28:71:
         3b:30:9f:ae:7a:bc:8c:0a:e9:61:91:7d:fd:54:5d:1e:9b:27:
         00:c2:e9:40:f5:50:8c:f4:e0:5a:b4:9b:47:a0:5e:80:58:74:
         bc:11:8e:58:5e:51:41:a3:fd:62:42:eb:b3:b9:06:ff:40:e5:
         ae:cc:64:57:65:3b:dc:1c:77:a0:0f:6b:a6:cc:7c:bf:c2:87:
         69:9d:58:1b:41:a5:c2:23:67:3e:1e:04:1b:19:42:00:e7:66:
         1d:bf:ea:a6:45:d6:26:59:1a:00:fa:0c:d3:3b:bc:98:33:4b:
         e4:27:1d:db:6a:c7:1d:02:9f:5d:e6:21:00:ac:72:d6:b1:1d:
         3b:b5:2f:36:cf:bc:72:3b:7a:07:55:d2:12:3a:8f:a2:4f:b0:
         35:bc:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:48:57 2025 by rpki-client