Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
File:                     6EC9CC12746911F0B5BCC83EC4F9AE02.roa (raw, json)
Hash identifier:          obljP3RXfrVGEpE3yYP91fJo6xaTDVgNzc+FKAwytnw=
Subject key identifier:   83:27:8B:9F:A3:01:12:10:08:4C:DB:1B:C6:20:88:D3:BA:C6:A3:69
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       06D4
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
Signing time:             Fri 08 Aug 2025 15:07:43 +0000
ROA not before:           Fri 08 Aug 2025 15:07:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        122.10.140.0/22 maxlen: 24
                          122.10.196.0/23 maxlen: 24
                          122.10.221.0/24 maxlen: 24
                          122.10.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Aug  8 15:07:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689612bf-75c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:b2:6e:f8:34:3e:88:e6:82:02:e1:39:50:
                    d8:2a:ac:c7:c9:a7:ca:67:c1:29:8f:57:ce:95:bf:
                    3c:b3:cd:40:b6:b8:d5:c8:22:be:dd:35:1b:94:cd:
                    ca:c0:d3:57:51:81:d5:70:8d:e9:a1:bc:a3:aa:f1:
                    be:da:d4:c1:bf:76:9a:2f:24:c3:9f:b7:73:6a:62:
                    ad:c0:23:93:c0:64:e9:d7:a7:52:fb:c1:a7:15:0d:
                    67:26:c8:0c:02:80:74:d0:bc:4a:fb:d0:c1:26:54:
                    27:4c:59:41:11:5a:b7:d1:1f:42:72:c6:02:06:ae:
                    6e:1f:da:6b:18:15:82:bd:a2:d8:de:27:b0:b2:a4:
                    cb:ab:53:d1:58:61:31:b0:94:ee:82:83:1d:8c:b6:
                    e2:73:55:68:39:a7:90:e6:66:08:38:d0:87:a2:4a:
                    d7:98:66:5d:e5:4f:00:6e:d6:c3:49:15:7d:a5:80:
                    91:2b:07:62:f3:9a:e4:42:4c:9f:3b:49:86:b4:9a:
                    e6:56:e3:be:d2:bb:22:8e:88:a8:e6:e2:ec:14:fd:
                    42:28:59:c9:10:83:83:fb:48:b1:71:81:67:f7:19:
                    4e:5a:1d:0f:4b:7b:24:bf:99:06:68:12:84:cf:3e:
                    b2:ec:6a:ca:4a:e0:18:10:86:60:b5:36:84:d6:cf:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:8B:9F:A3:01:12:10:08:4C:DB:1B:C6:20:88:D3:BA:C6:A3:69
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.140.0/22
                  122.10.196.0/23
                  122.10.221.0/24
                  122.10.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:dd:1f:95:9d:a4:2d:64:45:a0:d8:eb:73:f1:4e:47:6e:
         ea:8a:5a:f9:a3:a9:07:27:35:9c:b0:51:a6:7b:da:c1:ca:bd:
         9d:e0:38:a1:9c:d9:ef:bf:8b:d0:fc:ef:a3:18:5b:fe:37:a5:
         29:13:0c:f8:26:00:f9:5e:7e:4a:e9:df:f6:87:bb:be:71:fb:
         5a:17:1f:0c:51:16:a1:ca:4a:a0:f0:6f:51:89:ba:d0:40:dc:
         9f:0e:f9:d6:d6:35:5b:d7:f9:ca:6f:55:c7:23:59:68:66:2b:
         b1:2d:96:b1:11:5f:fe:ed:8e:64:05:ac:85:57:01:d4:63:3c:
         cb:53:bc:3a:0f:6d:cf:b5:65:47:d9:e3:2c:fd:83:32:71:20:
         45:48:98:7d:7f:d1:13:97:35:ae:ec:7a:3e:64:a3:69:55:75:
         f1:47:8b:ff:e5:1f:9d:0d:ad:ed:d1:09:a2:b9:32:95:ec:46:
         93:e8:d1:e8:c0:28:cf:2a:70:ae:22:42:23:49:cf:fa:b7:12:
         25:99:ce:fe:3f:3f:e1:6d:41:85:7e:66:2c:6f:21:da:41:ff:
         e2:a1:ff:e7:4c:17:f3:65:75:14:a0:da:f7:53:83:56:4e:e9:
         9f:f1:1c:4e:0c:f3:cc:f9:4c:50:2f:be:b6:73:31:d9:12:e7:
         a0:25:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:14 2025 by rpki-client