Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa
File:                     EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa (raw, json)
Hash identifier:          VnmTHaDUGNJwft48dbCNehvnHHWUdIH5CaEstRHifCc=
Subject key identifier:   1B:6D:2E:6F:18:90:9C:02:09:AD:33:46:E3:16:42:41:87:AE:7C:2E
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0252
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:40 +0000
ROA not before:           Thu 05 Jun 2025 03:10:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        202.126.97.0/24 maxlen: 24
                          202.134.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410ab0-0fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:1d:b4:f7:bb:4d:eb:cb:fb:52:8f:23:23:
                    e2:de:a0:6c:fc:01:4e:53:f1:93:5e:3f:7a:65:f0:
                    7e:f3:0d:81:d9:c9:75:76:22:ff:37:b0:9f:ef:1f:
                    33:f7:9f:bd:5f:ec:0f:04:a2:6f:e3:75:6f:d3:4a:
                    2a:0b:73:fb:f1:50:2e:04:81:36:f5:0c:80:88:64:
                    a0:fb:92:08:83:d3:31:c2:a5:59:73:57:a5:fa:2b:
                    98:2a:f4:ec:53:cf:46:b5:08:0b:d6:1e:c5:81:94:
                    c4:ac:af:21:ad:7a:ff:92:3e:d7:11:3f:00:51:20:
                    3b:a4:4c:77:86:7d:52:6d:f5:71:d4:5c:9c:17:4f:
                    9c:47:74:50:68:bf:bb:3f:aa:27:f5:bf:bf:e0:7b:
                    1e:f8:13:b2:38:dc:eb:90:06:26:76:86:1a:c5:a0:
                    71:31:57:6d:df:84:4b:1c:70:e1:29:b2:f7:c4:fd:
                    a3:b4:72:14:bf:11:26:ad:dc:8f:b6:da:47:75:fd:
                    f0:49:a0:a8:aa:5e:6f:48:73:25:74:65:73:7e:5b:
                    8a:93:56:10:52:a8:ca:46:a2:6a:96:b9:90:26:da:
                    7e:5d:ff:4e:64:f0:55:70:ed:91:5c:29:2b:8a:c9:
                    63:dc:5f:73:81:4d:32:e1:d6:af:c0:11:b2:d4:49:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6D:2E:6F:18:90:9C:02:09:AD:33:46:E3:16:42:41:87:AE:7C:2E
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.97.0/24
                  202.134.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:8a:66:65:bb:88:76:fe:42:a9:96:b0:54:40:7a:65:44:60:
         ad:63:3b:66:ad:9b:69:3a:30:93:e2:dd:c8:50:fe:21:8b:24:
         e0:39:8e:d9:f7:e9:3e:fe:f4:95:38:bd:55:00:88:b1:7f:a6:
         46:5b:46:e2:b8:32:69:7d:68:6a:1d:6d:d2:a8:03:0c:b8:5c:
         2b:7a:0b:dd:c4:11:ed:2f:41:a4:71:7e:10:ca:d2:1a:ba:f6:
         4d:82:88:7c:88:b1:ae:41:6d:20:d7:4f:42:33:34:b9:ff:91:
         5a:99:e1:5f:ba:1c:39:08:af:6f:27:52:17:ac:3d:43:33:c8:
         be:6a:29:f5:c1:9d:4c:4a:24:00:ee:78:f7:bc:50:e1:54:fa:
         21:44:2c:65:4c:34:c9:36:8b:6f:e5:54:33:10:23:c4:06:f2:
         6d:d5:0e:08:25:26:b8:b3:52:ab:f6:1d:0d:c1:6d:aa:6b:07:
         1a:38:13:8f:93:5d:59:17:86:13:37:c9:f5:a4:d1:81:83:d2:
         f3:4a:e4:ee:96:33:0f:d7:7a:d3:74:11:77:ae:2a:9e:13:ea:
         96:bd:eb:cd:2b:41:12:ba:b7:6f:33:ed:9f:ca:a3:9c:bc:89:
         5d:fd:b3:dd:45:19:8a:74:5e:7a:eb:eb:d9:fe:3b:6c:91:59:
         a3:d4:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:22:43 2025 by rpki-client