Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
File:                     B0C47BF26CFE11F09B124778C4F9AE02.roa (raw, json)
Hash identifier:          n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=
Subject key identifier:   F5:FF:EC:0E:68:9D:FD:A2:2B:D5:D0:DF:A4:37:83:13:D7:22:AB:FD
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       4E
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 04:35:59 +0000
ROA not before:           Wed 30 Jul 2025 04:35:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     395793
IP address blocks:        163.223.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Jul 30 04:35:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6889a12f-5346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:cc:62:c0:7e:59:11:a5:94:13:08:4b:6f:
                    82:4c:7e:56:7d:0a:bd:db:fb:cd:a5:33:e2:6b:1f:
                    d8:be:6b:81:21:3b:3f:e9:72:c5:e0:61:62:9e:5b:
                    fd:ce:fd:7e:6f:af:a2:a5:58:e2:eb:1c:6a:c9:48:
                    31:be:53:09:2c:2c:cb:2b:4a:f0:06:27:55:2d:06:
                    71:40:7f:eb:12:ee:3c:19:3e:fa:e3:be:08:dd:12:
                    c5:49:75:dc:48:6f:06:d0:09:e5:3d:77:7f:60:77:
                    6a:47:f7:40:e5:4d:84:c5:06:4e:b3:1c:c5:61:0a:
                    45:b7:23:88:98:5e:fc:99:ce:57:06:cf:7e:07:ba:
                    c7:42:27:20:e0:5b:de:09:1a:09:b5:f7:f6:d0:63:
                    e0:90:2c:d2:22:ff:46:56:65:4c:b2:65:ef:8e:81:
                    db:39:fd:3d:ef:86:b9:da:f0:63:9c:bb:28:46:8c:
                    79:27:48:b6:15:4c:6e:76:ca:7a:c9:22:5f:42:18:
                    7b:00:95:66:31:81:a5:e1:31:87:65:10:ca:63:08:
                    81:5d:af:6a:0e:77:b7:bc:19:9f:2b:65:7e:c6:4d:
                    84:1c:08:e2:6b:64:d1:ce:fb:1e:35:83:39:c5:89:
                    66:89:a0:12:fb:d3:7b:d9:b9:45:a4:6b:50:73:33:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FF:EC:0E:68:9D:FD:A2:2B:D5:D0:DF:A4:37:83:13:D7:22:AB:FD
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:19:d8:bc:ad:c5:9d:8b:5e:3a:19:23:59:5f:b6:c5:3b:84:
         12:ff:44:96:e4:40:49:0a:5a:8f:40:e6:eb:6c:41:5a:1a:da:
         96:71:ef:fb:01:78:45:7d:f0:d7:75:de:34:b6:2e:ce:de:a2:
         f1:c0:c9:d8:44:5f:b0:43:fb:f1:26:13:7e:26:7c:c9:cb:bb:
         cd:6f:66:e6:87:4c:81:6b:2b:22:37:cd:38:bc:bd:11:b1:d2:
         4c:e0:1f:c1:e0:5b:ac:83:09:da:3e:0f:46:71:1b:79:4b:55:
         de:65:9d:a1:81:2d:00:76:4c:2f:3e:04:66:f4:d5:8c:7c:23:
         36:3b:4c:f8:82:18:b5:9f:13:1e:e3:3e:e0:8f:40:16:e2:98:
         53:af:c8:af:b0:2e:31:6f:bd:1c:c2:f5:b6:c5:a5:3a:0d:33:
         0b:0f:95:7b:4c:ed:22:ec:96:30:6f:ca:d0:3a:7f:4d:35:8f:
         56:45:ff:9c:d2:93:08:16:b5:d6:1d:fb:87:4d:12:54:0e:59:
         74:40:bd:07:1f:58:84:12:31:d4:f8:d7:3a:2c:27:3f:91:85:
         bd:2d:40:50:6d:b2:d8:16:59:0c:dd:06:88:36:9c:ea:c1:23:
         70:74:1c:b3:6e:20:11:1a:b9:e6:d2:31:c0:91:bc:a9:13:fe:
         21:d8:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:41 2025 by rpki-client