Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
File:                     1484B210B52A11F0ADCFA344C4F9AE02.roa (raw, json)
Hash identifier:          Yc09XwGEfCqS6vy80bJm6PuDshmb9p3zGiyEjL1dHRA=
Subject key identifier:   9D:69:84:EB:71:B3:1D:86:57:6D:66:A8:A4:97:6D:BA:67:FA:37:E4
Certificate issuer:       /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial:       0140
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
Signing time:             Thu 30 Oct 2025 00:49:36 +0000
ROA not before:           Thu 30 Oct 2025 00:49:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     154324
IP address blocks:        202.47.134.0/24 maxlen: 24
                          202.47.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
        Validity
            Not Before: Oct 30 00:49:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6902b620-f371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:75:c2:d7:5a:a0:0b:66:97:3f:f1:e4:10:
                    67:94:c6:b2:52:e5:a6:9e:f7:18:25:e2:4e:60:c6:
                    71:b1:89:2b:25:ed:f7:99:d4:bb:63:41:42:d8:1a:
                    0e:0b:10:7e:98:59:b5:dd:16:ab:37:ee:1e:b6:e3:
                    c6:05:da:36:e0:16:d1:90:22:c1:3a:ef:cb:82:ee:
                    f7:14:b3:ea:2f:6f:01:42:c9:fc:90:37:5e:d4:37:
                    14:b5:e5:90:bd:c7:5f:a9:aa:8b:0e:0b:c1:d3:49:
                    1d:1d:ff:ae:b3:7a:37:34:d6:4d:5f:8b:a6:68:2f:
                    c6:d8:27:5c:0e:fd:a5:8d:24:2c:6e:78:cc:48:03:
                    5b:be:72:fc:af:a8:ba:7b:10:5c:12:fe:11:b1:07:
                    ee:1c:1c:96:c9:9d:6a:65:d0:2e:01:81:7c:65:fc:
                    a3:11:ef:76:a3:d3:f9:83:a4:59:57:d0:a9:40:aa:
                    a3:76:20:18:ab:d9:4d:bc:82:a1:77:44:31:6f:18:
                    31:6a:f0:40:87:21:68:fa:98:6c:07:01:65:5f:db:
                    a1:47:7a:8a:87:14:f4:7f:88:4c:49:12:23:b5:a5:
                    a2:93:b9:a2:12:ca:96:c8:9c:e7:20:1f:c9:b8:1e:
                    32:a6:89:6c:d7:79:79:cb:2f:e7:70:dc:d5:4e:67:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:84:EB:71:B3:1D:86:57:6D:66:A8:A4:97:6D:BA:67:FA:37:E4
            X509v3 Authority Key Identifier:
                keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:12:f3:f8:f6:ec:de:22:29:ad:1c:87:c0:03:4c:84:f4:1a:
         02:d1:94:9f:dd:f4:10:e2:3e:e6:bf:df:5e:1b:53:05:8d:5a:
         4c:da:71:0f:aa:36:ea:6f:5b:75:f9:93:b9:f9:e2:b1:5a:e7:
         f1:a7:8a:1d:8e:7e:50:09:0a:87:03:7b:2b:a4:be:b8:8d:49:
         5a:d1:ca:73:d5:9a:74:c3:f7:cc:7c:15:c9:b0:d7:aa:79:66:
         4c:1f:d8:e0:68:b0:53:88:bf:6a:0c:5f:da:16:ce:d1:8a:f4:
         52:c9:f2:71:77:70:de:5a:44:ab:29:73:02:0d:6b:2c:0a:83:
         77:cc:4b:86:50:fc:ab:15:13:58:b6:a0:f3:ab:b1:9c:1e:5d:
         b2:cb:ba:91:b6:44:23:78:c1:65:c7:5a:ed:7f:6e:5e:65:e3:
         54:c5:0e:a8:0d:d2:c3:a6:81:27:40:b4:27:35:bd:58:f9:ce:
         73:6f:6d:87:f5:a6:bf:0f:86:1b:97:c4:fa:9c:b9:70:5e:b7:
         26:a7:6c:b0:6a:51:82:79:e1:7a:30:ee:cf:08:7f:f0:67:da:
         7f:e0:86:f0:5e:41:9f:96:c0:9f:3a:91:8a:c1:0a:7c:8a:81:
         20:44:5f:08:c3:5f:86:c7:f2:e3:a2:6a:a7:1d:ec:49:97:82:
         9d:83:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:39:26 2025 by rpki-client