Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa
File:                     AC1CD860039511EBBE8C7F47C4F9AE02.roa (raw, json)
Hash identifier:          cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=
Subject key identifier:   A3:09:85:D7:07:C2:CD:0A:C0:E4:E7:34:08:E3:A6:57:59:AA:CA:9B
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       07AD
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa
Signing time:             Fri 06 Jun 2025 21:40:18 +0000
ROA not before:           Fri 06 Jun 2025 21:40:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4850
IP address blocks:        203.169.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
        Validity
            Not Before: Jun  6 21:40:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68436041-c5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:10:c7:84:03:6c:75:58:02:04:b2:d7:57:
                    a8:1f:a3:22:d6:57:cc:16:a5:18:2a:96:f0:84:d5:
                    eb:a3:c9:95:7f:1b:96:0f:63:d0:31:90:04:31:8d:
                    d4:89:30:63:29:6c:01:d0:f1:b7:6e:f9:43:9d:d2:
                    f2:76:fb:b2:b2:30:b9:8d:0f:fe:2a:8a:64:0c:3a:
                    c8:52:a0:35:a8:2b:b2:64:84:37:d1:5a:5f:9a:c7:
                    79:60:5a:eb:99:37:fe:91:0b:33:2e:83:f2:87:81:
                    ab:d0:e8:9d:9e:6b:1b:75:5b:da:8d:30:19:32:5f:
                    e8:10:1a:28:30:3e:78:f1:2c:ec:0d:28:ad:59:ba:
                    ea:ee:b9:33:40:5b:e8:a8:cf:27:fd:e2:ee:c4:dd:
                    68:c1:b4:76:92:f8:5f:57:b3:3c:c7:25:c7:a8:ef:
                    af:8b:c2:23:c2:e5:8e:ef:98:24:b0:a4:1e:38:a2:
                    28:8f:b8:98:0c:1a:2b:38:ba:9e:6d:b1:91:8b:09:
                    7f:f7:86:58:85:fb:df:65:c3:b4:7d:27:fa:19:92:
                    df:a5:1a:2d:d3:4d:66:62:08:87:59:e7:67:1a:84:
                    9a:e3:a2:7e:d8:5f:56:22:e0:73:39:4d:bd:04:13:
                    6f:2e:c5:28:91:3b:08:bd:6b:3a:9e:46:fc:a2:4d:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:85:D7:07:C2:CD:0A:C0:E4:E7:34:08:E3:A6:57:59:AA:CA:9B
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:7f:fa:4d:c1:94:e7:f2:2a:f4:f6:17:e2:25:ab:b7:1c:
         c9:14:f1:a4:a9:c8:1b:c9:7e:29:ca:9e:b2:82:be:13:ea:cb:
         fe:66:89:31:76:38:df:42:22:a0:c4:db:52:a0:46:03:d7:41:
         b9:f2:5f:73:86:4b:d6:1a:fb:ce:f4:2e:55:f1:81:6b:06:f5:
         5f:88:a1:1d:0c:cc:02:5a:f1:b4:27:2c:f9:b7:5f:30:be:82:
         7b:5d:f0:78:50:57:5d:5a:38:ba:ab:bb:3e:94:70:c6:22:2f:
         45:49:2e:ab:0d:09:76:98:60:5b:62:4b:be:2f:42:2c:48:09:
         7a:53:12:c8:05:61:9a:96:da:2d:ed:74:1c:6c:94:1d:89:3a:
         3a:12:be:75:a3:54:d5:79:a6:98:b0:9d:76:af:a3:88:d9:7d:
         a9:79:60:af:e4:26:a2:db:0a:0b:cb:b8:02:eb:4d:fc:ca:e7:
         c0:23:a9:0f:30:7a:70:04:6f:d1:40:7c:26:b3:ec:c4:9f:56:
         ff:a2:42:96:9f:f9:19:96:04:28:b6:b8:50:ad:cb:e0:90:b6:
         42:5f:01:d7:dc:d4:15:a5:80:3a:e0:54:c1:d5:a9:3e:26:7b:
         21:ba:fe:fd:39:81:63:73:03:a0:7f:7b:67:85:91:3f:23:93:
         15:93:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:45 2025 by rpki-client