Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
File:                     7CC500A86DEC11F0BD1BF429C4F9AE02.roa (raw, json)
Hash identifier:          an5FBHdExL03BomoR3qCdi2JEtigEIvsA7HXj74aq6Q=
Subject key identifier:   75:64:E4:37:E6:51:0A:C0:5D:2A:11:A1:67:31:9E:66:31:24:AF:98
Certificate issuer:       /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial:       18
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 08:58:12 +0000
ROA not before:           Thu 31 Jul 2025 08:58:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141199
IP address blocks:        165.101.48.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
        Validity
            Not Before: Jul 31 08:58:12 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=688b3024-c097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:2d:fd:24:be:98:40:53:cb:be:28:b3:de:
                    b1:15:7e:a2:2b:25:50:11:40:98:fa:54:8a:e9:13:
                    bb:0c:87:69:0c:a5:8f:84:9e:34:d5:70:5b:8a:c9:
                    e4:26:2a:de:54:fe:dd:db:9f:ee:f9:58:bb:42:35:
                    52:bd:a2:b2:96:97:6b:95:87:2a:eb:1b:02:30:84:
                    c8:a9:f5:06:44:b7:24:80:b5:b7:87:fb:58:d7:b9:
                    ce:1d:da:94:6f:26:27:01:dc:0c:09:81:6d:6d:46:
                    bd:6a:1f:40:ef:f3:27:68:6f:ba:f5:b3:45:2b:df:
                    e6:fb:2d:7b:36:66:ad:87:88:c5:9f:52:90:fa:32:
                    5f:db:ad:b4:4e:1a:e5:8b:96:7c:ea:7f:20:89:43:
                    9a:51:fe:b3:43:25:a6:83:3f:c2:e5:50:46:65:60:
                    38:e0:9c:4c:83:45:e9:ec:82:84:be:26:4e:da:ca:
                    96:33:4e:6f:1e:39:01:33:b1:e6:0a:ed:16:ea:47:
                    8d:19:82:c1:62:de:a0:71:ea:2c:bd:8c:f9:79:53:
                    35:44:26:56:d7:55:b4:4e:a6:79:87:18:a2:94:d7:
                    4a:4f:21:bf:98:cb:48:b8:78:17:8d:53:42:fe:00:
                    b7:fb:cb:29:ce:db:c1:eb:71:d3:fc:6c:04:21:d7:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:E4:37:E6:51:0A:C0:5D:2A:11:A1:67:31:9E:66:31:24:AF:98
            X509v3 Authority Key Identifier:
                keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:f3:2e:a3:39:78:2e:11:f1:f4:36:61:1d:a5:89:cc:0d:
         f0:3a:03:df:d3:ca:38:8f:23:e4:7b:c4:59:3a:88:c6:ce:86:
         eb:24:84:f8:ab:8f:d0:4c:db:db:13:80:94:5d:84:e8:0b:6b:
         e8:df:97:04:af:58:3c:40:8e:97:66:f8:01:8a:2b:72:50:b3:
         74:e0:d1:1f:d3:c3:39:ce:e3:ad:0e:8a:70:cc:95:3b:6a:16:
         41:52:84:00:90:70:92:1e:b7:a2:68:fb:8f:26:18:90:a0:14:
         b0:51:97:11:ef:c1:b2:6a:e5:7c:64:33:f0:1e:75:99:a1:6d:
         36:20:98:32:e6:67:2b:0b:71:b1:2c:f7:9d:64:60:f1:a9:78:
         76:1d:61:1f:ff:c8:61:73:8c:e7:9b:b0:2b:2d:e7:13:b3:1f:
         f9:a4:1a:89:e6:ee:e3:29:ef:5c:b4:69:b5:0c:56:e4:21:3d:
         0f:6f:47:61:bc:94:dd:45:da:37:cc:50:14:06:32:8c:b1:9e:
         39:fa:08:a7:db:d0:4a:48:5b:a1:33:95:53:74:2b:56:53:21:
         42:62:26:a1:69:49:49:d9:8b:80:d7:6a:7c:e7:3b:0a:83:56:
         66:93:52:3f:d9:b4:5a:25:0e:5c:48:50:19:7e:08:92:a8:91:
         e7:db:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:34 2025 by rpki-client