Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/9EA99558465511F08EDD9E3EC4F9AE02.roa
File:                     9EA99558465511F08EDD9E3EC4F9AE02.roa (raw, json)
Hash identifier:          cWoNQ8oC/1Wsplva0paV3Wc+NwujWAt5ZzODK9sNbiM=
Subject key identifier:   E1:DF:28:90:AC:CA:71:AE:1C:37:A5:72:CF:91:46:46:30:93:91:7A
Certificate issuer:       /CN=A91D22E7/serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
Certificate serial:       02
Authority key identifier: EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/9EA99558465511F08EDD9E3EC4F9AE02.roa
Signing time:             Tue 10 Jun 2025 23:49:59 +0000
ROA not before:           Tue 10 Jun 2025 23:49:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153855
IP address blocks:        163.227.244.0/23 maxlen: 24
                          2402:760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl
                          rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 07:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D22E7, serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
        Validity
            Not Before: Jun 10 23:49:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6848c4a7-3cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:0b:c5:22:c3:cf:26:52:c6:e9:a3:9f:fa:
                    0d:ed:1d:c7:98:05:cb:e4:b0:89:eb:82:c1:1d:fd:
                    bd:56:4c:ff:1d:76:c1:63:b2:17:30:69:fa:7f:ee:
                    1d:d5:e2:d4:3c:00:af:8f:36:e6:12:81:f5:a1:2c:
                    fb:08:06:9e:8d:4f:a3:a9:3d:82:28:79:65:71:68:
                    cf:f9:45:41:56:f9:92:97:39:c2:c7:79:2c:c9:a3:
                    40:ec:a0:7d:16:af:c0:2c:c4:2f:44:90:44:70:6e:
                    b8:e6:10:ff:13:6b:75:96:94:32:9f:b4:b1:a3:0a:
                    a2:8f:9e:b6:b6:11:54:9e:2a:c1:4c:c3:73:d0:4d:
                    01:f3:14:fc:3b:5b:68:c9:ab:2e:ab:f8:3c:ee:fe:
                    24:53:81:c9:1d:d3:67:f1:52:62:33:fb:ef:04:f7:
                    6d:a8:97:5a:78:80:40:8c:df:dd:6a:17:08:0f:09:
                    5d:eb:d8:67:cf:ba:28:fa:87:79:7c:f4:c2:ee:75:
                    d3:b0:4a:94:86:ca:35:e4:7e:99:ba:ef:a0:8f:33:
                    50:04:09:ff:9a:b7:aa:31:fc:39:46:61:b7:32:6e:
                    b4:21:00:c5:5e:f0:d5:fd:2e:90:53:e4:c3:3c:71:
                    76:9d:51:ea:cb:92:80:79:0b:b3:5e:a6:9b:88:f3:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:28:90:AC:CA:71:AE:1C:37:A5:72:CF:91:46:46:30:93:91:7A
            X509v3 Authority Key Identifier:
                keyid:EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/9EA99558465511F08EDD9E3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.244.0/23
                IPv6:
                  2402:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:f8:8f:59:5f:96:c6:e2:d0:2c:61:a6:06:ca:e9:9d:ad:aa:
         86:21:de:4c:25:3e:de:f7:ab:05:44:ea:c0:07:69:76:7d:04:
         58:a0:bb:6d:ff:1a:7d:b6:89:58:2e:b1:41:6e:03:b0:80:7b:
         3f:ee:8c:9e:b0:28:37:6c:31:d3:37:2a:92:65:65:34:ba:c9:
         c9:f0:38:65:8c:41:e4:51:ef:df:b1:12:b1:e3:b3:b7:0f:d5:
         01:92:11:a8:b2:a1:96:23:04:c1:5b:57:b7:5f:68:e2:6f:82:
         8c:ef:dc:9a:25:28:6c:02:e2:93:ad:84:08:b3:97:95:4d:51:
         06:f9:b7:e3:0d:4b:a1:00:ff:ae:0f:fc:f9:3f:24:86:fb:49:
         6e:bb:0b:db:bb:4e:eb:42:04:c7:42:00:b3:8b:12:a1:e9:69:
         85:28:3b:d8:97:df:f4:f6:34:bd:80:74:b5:fc:e7:b9:40:a8:
         42:c0:8b:de:69:38:2c:c3:19:65:85:7f:b4:1b:79:25:c7:5d:
         2c:08:56:2d:bb:59:7e:a6:e5:80:19:28:4b:05:f2:69:b4:de:
         3e:f9:c3:9b:b0:fb:e3:7f:99:56:96:d4:08:05:a3:4c:1d:af:
         8e:54:7e:16:a6:26:27:38:3c:73:89:1f:58:4a:cd:bb:2e:8d:
         b3:dc:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:40:51 2025 by rpki-client