Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
File:                     F00A66308A9C11EB9B2E044BC4F9AE02.roa (raw, json)
Hash identifier:          HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=
Subject key identifier:   1F:FF:C2:93:58:BE:EB:86:D9:D5:D2:D8:6B:52:90:E6:D5:5A:4E:8B
Certificate issuer:       /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial:       0696
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 23:03:39 +0000
ROA not before:           Thu 24 Jul 2025 23:03:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7575
IP address blocks:        155.205.200.0/24 maxlen: 24
                          155.205.208.0/24 maxlen: 24
                          155.205.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
        Validity
            Not Before: Jul 24 23:03:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6882bbcb-c557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:75:fc:83:82:84:cc:26:44:b8:8b:9f:d8:
                    5d:61:8c:46:9b:34:0b:84:39:48:cf:f3:8b:6d:ad:
                    c1:54:9a:bf:39:eb:b8:21:9a:8a:0f:29:78:3d:82:
                    e9:ce:50:6e:7e:6c:88:e2:a0:38:50:e1:8e:0a:ff:
                    7c:7e:f2:32:a4:21:bd:0a:9d:20:08:c5:eb:92:b5:
                    fd:0c:e7:b6:61:55:e5:28:9b:89:d1:d3:79:c5:c9:
                    c3:c5:9f:ec:00:2b:95:26:6f:08:f3:aa:33:b3:9a:
                    5f:63:27:f1:1a:4b:79:55:f0:03:44:63:2a:31:81:
                    eb:85:93:7f:5b:80:9f:93:09:97:c3:e6:b2:11:aa:
                    a3:35:96:e1:b9:e1:a2:70:89:16:a8:d2:18:72:3f:
                    12:95:70:08:67:e0:54:f5:cd:e9:a4:31:50:7c:0e:
                    d8:fd:05:56:9c:4a:12:18:90:ef:1d:3d:b3:34:b9:
                    8d:32:82:3e:68:ed:a9:bd:28:50:a1:04:06:6c:4e:
                    2d:44:e2:f3:6a:88:1f:c6:54:d4:4b:5f:f1:29:3e:
                    3e:d5:40:5f:32:cb:a4:6f:e5:52:ea:8e:88:f4:13:
                    ea:6a:0c:a8:6e:7b:0c:e1:f1:a4:83:e1:b6:2f:5f:
                    6c:9d:8f:b7:45:d4:aa:1c:b8:75:fe:85:a3:61:da:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:C2:93:58:BE:EB:86:D9:D5:D2:D8:6B:52:90:E6:D5:5A:4E:8B
            X509v3 Authority Key Identifier:
                keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.205.200.0/24
                  155.205.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:c5:b8:01:8a:03:d9:b8:50:be:17:88:d5:41:3d:18:cb:
         61:fc:2a:d3:4b:58:4c:71:b0:9d:e4:73:5b:4c:f7:a5:e7:24:
         91:1a:b1:0b:84:f7:9a:26:42:3c:1c:81:24:dd:51:a4:2f:2a:
         da:b8:b4:4f:4f:cd:3d:f4:72:2d:42:f5:fc:09:a0:d2:46:15:
         e6:05:fb:dc:d1:fd:13:14:24:bf:85:d4:76:c5:d4:32:8d:37:
         5c:57:12:a8:fb:9e:3a:ea:7c:63:a4:15:bc:6f:23:3e:a6:be:
         33:10:cb:c4:fa:63:55:29:23:36:c7:ef:e3:a4:6d:3c:1f:70:
         72:11:e4:a9:cd:4d:30:45:fe:38:97:ec:87:6c:9c:18:ba:9d:
         b7:78:5e:1a:f0:8e:08:67:0e:4a:0d:18:5d:0a:f9:0e:32:bf:
         80:b1:7f:3a:5e:59:fc:1e:95:e0:94:6a:7b:e4:ed:7e:4f:e2:
         70:44:82:17:74:7b:51:33:86:eb:36:f9:cd:41:87:e7:58:12:
         c2:ed:b0:38:d3:a1:7f:67:5f:f7:bc:81:1a:8d:c8:f5:25:e7:
         39:7e:cd:a3:45:34:99:b6:1b:f2:ba:86:57:88:58:b7:29:48:
         ee:d5:11:73:e1:5b:d2:4a:dd:74:f3:73:7c:10:66:a0:aa:5d:
         ce:27:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:54:49 2025 by rpki-client