Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E4788F02DB4511EE89BB2666C4F9AE02.roa
File:                     E4788F02DB4511EE89BB2666C4F9AE02.roa (raw, json)
Hash identifier:          bdMpqweGHQ8qYmb9RO8i4UuvSp3euKlaooXxG9piwDc=
Subject key identifier:   A6:F8:66:44:ED:CA:2E:BA:3A:8B:E1:A9:77:58:F1:64:80:03:82:15
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0260
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E4788F02DB4511EE89BB2666C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:52 +0000
ROA not before:           Thu 05 Jun 2025 03:10:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     59253
IP address blocks:        202.134.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410abc-feb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:de:bb:d6:cf:a3:51:f1:08:3f:b1:2e:f2:
                    95:98:12:8c:60:6f:05:c8:88:fb:ae:96:c0:64:50:
                    7c:d8:65:da:e3:50:2b:c4:f8:94:7a:53:48:35:d9:
                    c2:07:d6:ce:f1:34:d9:9b:16:4d:bb:d1:90:a6:cc:
                    eb:0e:32:54:7c:25:6f:87:41:c2:33:4f:22:e7:a8:
                    13:c1:e2:58:91:ca:0e:5e:ed:c2:5b:92:af:e3:ef:
                    e3:4e:30:8c:3b:54:fc:be:f1:91:6c:01:17:05:87:
                    d3:f1:a5:e2:f2:4b:26:b2:5a:db:ba:91:bd:21:f0:
                    9c:db:28:9e:75:fc:99:30:1c:43:56:6c:f5:fd:70:
                    b2:85:64:00:86:b5:2e:fe:f0:c6:c0:81:09:c4:99:
                    75:cd:3e:f7:2b:cb:14:90:1c:6b:5d:5a:87:43:46:
                    4d:f0:a8:09:ee:f7:c2:f8:6d:28:f0:15:47:81:26:
                    ab:de:4d:23:73:e9:45:71:13:1a:5a:14:25:dd:be:
                    6d:29:75:2a:31:0a:f6:79:e5:32:a3:ac:b0:47:e8:
                    55:fb:a4:59:bc:50:57:cf:aa:3e:07:bf:fb:be:43:
                    d8:3b:2f:00:79:e8:6f:2f:54:1e:88:fe:98:2e:3b:
                    4d:0c:b8:7e:92:89:1a:be:e0:8f:68:ce:d8:eb:f0:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:66:44:ED:CA:2E:BA:3A:8B:E1:A9:77:58:F1:64:80:03:82:15
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E4788F02DB4511EE89BB2666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:91:f1:a0:9d:63:46:dc:1f:7b:89:25:90:f9:36:d2:f4:63:
         e4:f4:55:c9:6b:d8:e2:7b:2b:fb:9b:8d:9d:fe:4f:1b:2d:87:
         80:e4:c5:21:14:ce:72:03:12:f1:46:fd:6f:39:5d:1a:cb:72:
         8a:b9:ef:05:5c:ed:b6:3c:83:9f:6e:47:03:49:94:17:a9:1d:
         f1:82:73:fb:0e:46:0e:53:a8:1d:6a:d6:67:b0:86:5f:59:d6:
         a8:87:d6:7d:34:a3:b9:8b:08:ad:18:64:98:cf:1b:4f:36:7b:
         79:2b:42:8f:b2:0a:9a:f3:ef:b6:5b:63:fd:60:e1:91:cd:6e:
         c9:0b:32:fb:55:45:81:69:26:f3:74:19:5e:b8:a5:ec:43:4d:
         eb:1f:14:1b:6d:5d:14:7f:02:5d:8f:18:04:3d:ec:df:cd:f2:
         1d:38:4e:59:59:04:bc:9c:58:5f:bb:6b:ab:eb:8b:4f:64:9e:
         87:86:7b:73:59:ac:28:16:3d:4b:dd:b7:61:21:ce:fc:b4:49:
         45:de:b8:a2:1a:c3:24:a3:1c:b0:20:f7:6f:2d:44:db:72:f5:
         61:85:bf:ff:f7:8e:dc:5a:c9:1e:2c:95:1a:87:0c:6e:53:be:
         75:58:7d:12:9b:20:98:0a:8c:a1:68:6d:1f:81:cc:71:3f:99:
         84:f3:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:22:43 2025 by rpki-client