Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/AE811872614711F0B811645EC4F9AE02.roa
File:                     AE811872614711F0B811645EC4F9AE02.roa (raw, json)
Hash identifier:          n6Y55/ceR16qJJFVpXKIJxFXBfe/NuJGfnCy2fEW8mM=
Subject key identifier:   39:5E:63:B7:F9:6D:3A:F2:72:36:FC:96:44:91:B1:D8:02:70:33:04
Certificate issuer:       /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial:       02
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/AE811872614711F0B811645EC4F9AE02.roa
Signing time:             Tue 15 Jul 2025 06:48:15 +0000
ROA not before:           Tue 15 Jul 2025 06:48:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149430
IP address blocks:        122.10.100.0/24 maxlen: 24
                          122.10.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 08:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
        Validity
            Not Before: Jul 15 06:48:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6875f9ae-0f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:f6:68:d2:6d:be:ab:5d:71:4d:98:ea:33:
                    90:4c:aa:ae:7d:c7:c6:9f:de:84:9d:cc:d9:23:c6:
                    98:20:e2:fd:d9:20:55:2b:51:58:c4:5e:e3:60:ee:
                    37:6c:36:eb:99:c4:36:74:e6:8a:94:2f:c4:0e:4d:
                    53:22:84:d9:5c:43:cb:0a:77:ac:98:79:60:36:25:
                    5e:5a:db:0f:32:a1:0b:1b:03:77:82:da:c8:bf:f1:
                    bf:eb:10:57:95:ab:66:c9:b6:7f:31:24:b6:60:42:
                    b6:2f:de:99:23:25:64:ae:87:3f:e6:4f:a9:9f:02:
                    a9:41:b4:75:44:1a:29:01:0f:0e:25:94:1e:c3:88:
                    cf:88:92:9c:9e:4e:af:1c:b1:7f:d5:8a:20:30:f2:
                    3c:d1:f5:ca:99:87:c0:b8:f6:02:f4:18:0c:50:b0:
                    f6:83:fb:f7:a6:92:b6:5f:69:1d:2f:fa:9c:74:3a:
                    62:27:5b:a8:3d:3b:92:e9:4e:10:19:e3:6b:de:ff:
                    2f:bd:42:a3:ff:43:6b:d2:73:31:79:a7:23:8a:bf:
                    60:b6:a4:d8:d9:b7:91:f9:fb:43:6d:37:0a:c8:a6:
                    10:3c:b3:a3:6e:c2:23:ab:44:60:c3:6a:7c:6f:6c:
                    9f:05:97:38:6f:f6:71:e4:70:85:e7:e0:3a:e8:d4:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:63:B7:F9:6D:3A:F2:72:36:FC:96:44:91:B1:D8:02:70:33:04
            X509v3 Authority Key Identifier:
                keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/AE811872614711F0B811645EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.100.0/24
                  122.10.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:28:86:db:30:3a:4e:2a:ec:00:b6:8d:d2:a8:76:c6:e8:f3:
         b0:55:c9:1a:a9:4a:2d:d2:d5:51:18:39:7c:d2:c3:69:21:c0:
         8d:6b:49:15:01:d2:0d:a1:e5:25:47:6b:9e:05:7a:d4:2a:f6:
         93:2b:f2:13:f9:77:5a:7d:9a:29:60:69:5e:d5:47:cd:9f:8a:
         da:4b:f3:39:33:7f:65:e4:aa:89:f4:ce:1b:90:d9:35:d4:44:
         3f:9a:41:fd:00:f9:45:5c:48:e1:2b:d8:cb:84:c0:9d:72:bf:
         d9:f0:b3:a0:17:18:59:70:4e:f2:e5:88:f4:9f:98:7b:fd:95:
         fa:40:0a:f6:d4:a4:f6:09:99:96:eb:e7:47:90:3b:f9:61:2a:
         ba:94:4a:76:5a:ef:e9:fa:e1:19:11:95:b4:1c:0f:8d:ae:1b:
         0d:54:5a:b3:4b:2a:df:e6:a2:93:be:51:3d:4b:77:a2:93:dd:
         c0:e4:f3:c4:3c:16:d0:43:dd:f4:29:3f:81:2a:ea:78:2c:65:
         c6:c4:ec:9b:65:96:7c:6b:23:3f:e2:fc:45:a7:97:79:0a:be:
         b1:4c:ee:4a:38:6b:77:dd:e8:c7:6d:ce:0c:df:ec:89:6d:82:
         c1:69:0c:90:b8:39:f9:c7:f8:32:d4:b3:01:6d:47:42:db:03:
         0e:73:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:22:37 2025 by rpki-client