Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/52F0E8B46AF911F0B29D9D34C4F9AE02.roa
File:                     52F0E8B46AF911F0B29D9D34C4F9AE02.roa (raw, json)
Hash identifier:          xZnW3g1gFw2ktRTKPPmLxfvcd2JTw7e0FCtTO49keTk=
Subject key identifier:   0C:41:C9:0B:19:12:C5:47:62:52:04:73:7D:4A:CA:A2:CD:F4:E2:7D
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       0660
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/52F0E8B46AF911F0B29D9D34C4F9AE02.roa
Signing time:             Sun 27 Jul 2025 14:52:32 +0000
ROA not before:           Sun 27 Jul 2025 14:52:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48024
IP address blocks:        202.8.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Jul 27 14:52:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68863d30-28c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:11:80:2b:f2:a0:6f:b3:5e:b4:ed:30:b0:
                    71:5c:70:2c:b7:67:fe:da:55:a3:ea:d4:5c:4e:64:
                    e3:71:00:8b:1e:54:a2:1d:38:be:2b:41:d3:c9:e2:
                    11:e2:5e:8a:a0:d3:8f:c9:b1:65:38:9d:38:99:62:
                    36:c1:1c:62:1c:b3:79:ad:10:ae:fa:81:cc:f2:bc:
                    7c:ca:44:86:fe:b0:0a:fa:27:0e:63:f3:d4:c9:16:
                    98:e2:64:1c:08:af:b4:b4:8c:19:be:33:ce:78:13:
                    5d:08:c3:b7:e4:a6:32:35:77:7f:f1:56:04:9a:6a:
                    8d:d4:6f:9e:2e:9b:14:be:0d:67:90:9d:89:98:30:
                    e6:be:e1:e6:71:85:05:7d:7e:00:ee:4e:f3:a7:c7:
                    da:e3:2b:72:d0:ed:17:1a:4f:f2:40:cb:dc:58:73:
                    17:1b:ba:c1:01:9d:a1:77:d4:a6:7f:92:2d:fd:f9:
                    01:37:52:bd:97:60:d3:00:75:1c:d4:a0:87:f0:0e:
                    91:b4:ed:a3:11:1c:69:9d:49:32:e3:3e:5c:60:77:
                    74:ab:d1:07:33:5c:6b:6b:6c:8d:ab:27:4c:d8:eb:
                    c0:1c:78:00:b6:11:e1:a6:8f:cc:32:0e:5c:82:98:
                    ca:2c:a8:0a:45:a8:4c:3c:1d:e0:5e:ed:a4:e9:e2:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:C9:0B:19:12:C5:47:62:52:04:73:7D:4A:CA:A2:CD:F4:E2:7D
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/52F0E8B46AF911F0B29D9D34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:51:5b:03:05:78:e3:20:d4:09:4a:bb:49:97:cb:ca:5d:da:
         ee:3e:45:8d:69:03:2b:9b:93:22:ae:b5:bf:38:fd:72:76:9e:
         77:2c:c7:59:99:9c:16:f4:4b:97:9f:e8:73:a7:d1:45:cd:d1:
         3a:6e:6d:ea:bd:94:43:d0:89:29:8e:fa:9c:08:e7:0a:01:11:
         16:ee:7d:1b:af:5f:e8:4d:63:2f:86:00:78:40:a6:77:30:59:
         e4:42:bb:1a:18:40:11:44:44:b7:6d:52:fe:cf:18:8c:7a:da:
         c4:70:82:2a:91:30:94:c0:47:f8:0c:ba:8c:66:72:76:64:af:
         55:c6:25:be:f0:35:5d:9c:ce:a1:24:f9:e6:0d:90:a5:12:92:
         0d:73:f6:78:f4:70:d3:e4:50:64:21:f9:54:00:ad:66:84:38:
         e5:29:72:27:1b:2f:6a:c0:9b:07:b6:74:ee:31:f7:e0:d5:a8:
         06:dd:b0:d9:a5:5c:e8:af:7c:57:45:16:0a:06:91:a3:2f:fb:
         b6:d1:bc:19:cf:90:64:d7:77:97:b1:4d:2e:c3:f0:6e:be:53:
         11:77:97:d1:40:55:08:08:d9:d9:b8:09:7c:bd:5d:2a:a5:c3:
         cd:8e:0a:74:ed:43:3a:67:7f:2b:62:ce:eb:77:c6:70:1e:37:
         f8:6e:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:17:50 2025 by rpki-client