Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2E4E8CBCF60D11E9BB1F4666C4F9AE02.roa
File:                     2E4E8CBCF60D11E9BB1F4666C4F9AE02.roa (raw, json)
Hash identifier:          kugys0e+kO147pq3GANQHc6Nx0MbVJV3vJba37bXPOo=
Subject key identifier:   55:65:9E:B2:9E:75:0A:3F:39:39:F1:1E:03:A0:60:27:6C:C2:2C:D2
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39B6
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2E4E8CBCF60D11E9BB1F4666C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:15 +0000
ROA not before:           Mon 14 Jul 2025 14:50:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132061
IP address blocks:        58.97.115.0/24 maxlen: 24
                          119.46.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14774 (0x39b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751927-e088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:9d:59:23:6d:f6:b7:52:78:00:91:45:c2:
                    96:13:8f:28:d0:ad:77:b4:af:1b:05:e1:a3:dd:26:
                    2d:91:1f:1d:a6:08:a0:66:8d:b8:0d:c3:ac:3b:97:
                    80:e9:49:58:6b:ef:b5:08:11:9c:50:1a:b6:eb:97:
                    34:5c:ed:06:79:81:51:77:02:b9:ea:b2:74:82:33:
                    78:86:5e:bf:85:31:8b:42:7e:41:4c:70:c5:0d:66:
                    57:8b:8d:8a:0d:d0:72:b8:0c:a8:bd:81:d3:02:cb:
                    bd:d0:94:76:41:cd:80:c3:1f:8c:d4:9f:4b:87:3b:
                    9f:af:22:b9:a3:9a:eb:35:35:d0:a6:3f:84:80:1b:
                    47:a5:4c:b1:44:2d:14:4d:c4:66:fc:6a:ed:e1:08:
                    b0:a8:2f:5c:9f:b2:38:4a:97:38:d1:63:2b:5b:4e:
                    22:92:f1:cf:62:ce:5f:8d:af:0a:be:0c:7e:18:ad:
                    13:43:fb:e0:dd:ac:24:74:e4:2e:ea:84:a7:ef:71:
                    95:1c:f8:ce:c9:09:88:53:39:a4:8d:8e:0a:0c:33:
                    37:70:ed:b4:8a:5b:41:c9:25:47:09:c9:3f:64:5b:
                    fa:1f:2a:a0:e3:40:b7:9f:83:07:24:4f:59:f8:5c:
                    e0:fd:6c:c2:8a:49:4d:65:d3:5b:fc:99:d4:31:28:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:9E:B2:9E:75:0A:3F:39:39:F1:1E:03:A0:60:27:6C:C2:2C:D2
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2E4E8CBCF60D11E9BB1F4666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.115.0/24
                  119.46.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:4a:31:f5:22:40:9a:3f:43:e6:88:28:0a:25:1f:1a:9c:
         d3:b5:eb:a2:39:9c:ce:c4:be:9e:41:ee:18:f9:8d:fc:c9:27:
         9b:80:db:22:09:a6:cb:de:aa:1b:10:ee:7c:47:ca:d4:9c:15:
         55:84:fa:e0:6f:5c:f6:aa:63:88:b4:93:b1:5c:3f:ce:e6:11:
         c3:13:0f:ee:e7:29:ec:a5:85:7b:7a:10:50:c7:df:9a:7b:4a:
         d8:d8:e2:ff:eb:a3:c7:4a:44:24:95:a4:72:11:88:44:54:11:
         5a:88:f8:a0:60:f4:7e:f9:2d:8e:49:ae:b0:d6:ba:a4:11:d5:
         a8:1b:89:41:f9:9e:95:64:cd:97:76:8c:6d:5a:51:f9:05:f1:
         a2:df:c4:56:88:ab:50:7e:3f:92:87:05:d4:19:ab:c0:90:f6:
         8d:7e:8a:96:dc:dc:44:48:ed:7c:04:ef:20:08:94:22:4c:17:
         87:af:03:f2:29:0e:09:7c:d7:2f:82:97:a9:22:3f:ec:a5:34:
         d9:ae:00:e5:29:45:99:88:08:a3:ea:16:8b:f4:1b:1b:fd:4b:
         e8:8a:d9:48:63:58:7c:84:28:08:91:bf:b5:a2:50:ec:17:b3:
         e7:15:e0:d5:ef:9b:1a:99:f4:97:7a:76:1f:16:9f:b1:7b:3f:
         37:02:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:56:22 2025 by rpki-client