Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
File:                     DE7B831C37DA11EDBEF9D050C4F9AE02.roa (raw, json)
Hash identifier:          Y3wS66fd5YHhzaA4qhuEKsiBBLTblPlxdtXJBZSBnBU=
Subject key identifier:   5A:3C:63:8D:52:04:58:3C:DD:15:02:70:A9:BA:86:7E:98:66:00:61
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       06B8
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
Signing time:             Thu 24 Jul 2025 22:34:45 +0000
ROA not before:           Thu 24 Jul 2025 22:34:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        122.10.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Jul 24 22:34:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6882b505-1ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:b9:16:3e:b6:6f:e0:b0:6c:e8:c5:c8:5e:
                    f8:3c:61:9e:61:f3:2e:6d:9c:6e:9a:bf:21:c1:0d:
                    1f:74:f4:ee:b9:64:9d:53:a9:9e:6b:b3:19:c6:c5:
                    fa:99:b0:79:9c:47:78:b0:11:4d:31:cc:31:a6:16:
                    12:9d:68:b3:ae:2b:bb:39:bd:40:11:93:0c:75:88:
                    d7:05:4e:38:7a:73:9a:fc:6f:2c:ac:2d:20:12:ef:
                    6d:84:51:ff:16:9c:ea:d3:86:2a:7f:d0:95:e5:f5:
                    2e:75:55:83:91:11:d5:78:54:e1:f9:fc:39:81:3c:
                    93:25:5b:45:5e:44:5b:d0:c9:df:fc:75:6c:58:7a:
                    6c:e8:7c:07:31:cf:fe:dc:c5:76:ca:9e:5e:ae:bd:
                    9f:a8:d5:84:61:6f:0b:b4:7f:df:f6:cf:56:a0:55:
                    ad:fa:dc:2a:df:d9:04:ce:fa:8f:23:29:9a:75:79:
                    92:05:3e:0e:e5:9a:92:7c:e8:e5:df:b1:78:31:f4:
                    eb:c8:64:c3:87:0e:5a:5c:e5:2d:af:37:c5:da:f0:
                    09:41:30:86:96:9a:26:86:cf:9a:3c:f8:22:86:f7:
                    1a:39:2f:34:8e:be:52:e5:32:84:59:53:dc:be:31:
                    d4:f7:c7:d3:74:09:b8:f5:18:f5:3b:4f:6c:36:fa:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3C:63:8D:52:04:58:3C:DD:15:02:70:A9:BA:86:7E:98:66:00:61
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/DE7B831C37DA11EDBEF9D050C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:39:74:ef:b8:bc:08:b2:67:33:35:9e:54:90:50:a1:b8:
         c1:d2:36:a9:3d:12:f4:d4:c7:6c:9e:ab:26:30:45:28:37:fc:
         6d:ae:f2:9d:b0:80:84:1e:8c:65:f8:3b:e8:d5:fe:0a:13:76:
         23:bc:5d:71:ff:2f:ae:66:61:f3:a4:46:ea:69:1a:98:dc:d6:
         4c:9a:f2:aa:ef:88:63:93:58:53:84:37:5b:5a:17:60:46:07:
         e2:ba:4f:17:69:9c:3e:ae:32:11:4d:e3:80:9c:02:e3:2e:41:
         31:66:3b:28:ae:50:f8:ab:4e:ce:78:26:d7:25:ad:ef:3b:9c:
         81:e8:31:8a:fc:34:bc:6a:cd:ac:29:d7:32:b6:d1:66:32:25:
         18:e9:e8:4f:03:96:71:6f:24:c6:34:ec:97:c4:f7:51:c3:7d:
         ff:bf:65:56:41:63:26:85:eb:32:c2:81:46:47:d8:01:06:26:
         60:96:e6:a8:3e:af:6f:11:2d:9e:c9:51:d4:65:be:c2:99:86:
         89:70:f3:3f:d3:9e:7d:97:5b:2d:2e:ea:59:08:2c:44:be:d8:
         b3:ca:ca:48:d5:e5:5d:fc:bc:98:f1:11:56:9a:bb:d9:b8:8d:
         ae:11:ea:46:70:cf:56:c4:9f:75:6a:a8:8d:27:47:99:2b:45:
         6a:56:87:b0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD
RjY4RDY5MjQwHhcNMjUwNzI0MjIzNDQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODgyYjUwNS0xZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0G5Fj62b+CwbOjFyF74PGGeYfMubZxumr8hwQ0fdPTuuWSdU6mea7MZxsX6
mbB5nEd4sBFNMcwxphYSnWizriu7Ob1AEZMMdYjXBU44enOa/G8srC0gEu9thFH/
Fpzq04Yqf9CV5fUudVWDkRHVeFTh+fw5gTyTJVtFXkRb0Mnf/HVsWHps6HwHMc/+
3MV2yp5err2fqNWEYW8LtH/f9s9WoFWt+twq39kEzvqPIymadXmSBT4O5ZqSfOjl
37F4MfTryGTDhw5aXOUtrzfF2vAJQTCGlpomhs+aPPgihvcaOS80jr5S5TKEWVPc
vjHU98fTdAm49Rj1O09sNvr+lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFo8Y41S
BFg83RUCcKm6hn6YZgBhMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvREU3QjgzMUMz
N0RBMTFFREJFRjlEMDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF6CsQwDQYJKoZIhvcNAQELBQADggEBAIG1OXTvuLwIsmcz
NZ5UkFChuMHSNqk9EvTUx2yeqyYwRSg3/G2u8p2wgIQejGX4O+jV/goTdiO8XXH/
L65mYfOkRuppGpjc1kya8qrviGOTWFOEN1taF2BGB+K6TxdpnD6uMhFN44CcAuMu
QTFmOyiuUPirTs54Jtclre87nIHoMYr8NLxqzawp1zK20WYyJRjp6E8DlnFvJMY0
7JfE91HDff+/ZVZBYyaF6zLCgUZH2AEGJmCW5qg+r28RLZ7JUdRlvsKZholw8z/T
nn2XWy0u6lkILES+2LPKykjV5V38vJjxEVaau9m4ja4R6kZwz1bEn3VqqI0nR5kr
RWpWh7A=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:17 2025 by rpki-client