Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/172C2B96197711F0A993397AC4F9AE02.roa
File:                     172C2B96197711F0A993397AC4F9AE02.roa (raw, json)
Hash identifier:          8Qo70bxIag9X+h+p9rkvEiGVmiiK66r021Qwo1g6tkk=
Subject key identifier:   61:E1:33:53:5D:D8:E9:DF:0D:7E:33:A6:4F:F1:5F:8D:BF:87:0E:8E
Certificate issuer:       /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial:       0861
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/172C2B96197711F0A993397AC4F9AE02.roa
Signing time:             Wed 16 Jul 2025 16:55:18 +0000
ROA not before:           Wed 16 Jul 2025 16:55:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138677
IP address blocks:        45.64.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
        Validity
            Not Before: Jul 16 16:55:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6877d976-655f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:7b:fb:ad:fc:04:f7:52:97:ec:4e:be:7b:
                    84:28:2f:c0:cd:90:c5:ba:b7:0b:16:31:33:f8:26:
                    c9:b6:85:34:69:d8:b4:a8:cb:cc:d5:af:86:2e:62:
                    30:6f:49:3a:96:a0:23:3e:de:52:4d:c4:95:e1:51:
                    08:68:35:82:82:63:5e:68:f4:c4:73:e9:c9:7e:e1:
                    a9:ce:6a:f4:00:a1:37:44:44:1b:1a:66:2c:f7:17:
                    cd:32:bf:35:57:4c:ef:b4:40:3a:a7:46:98:e6:87:
                    e5:7c:2b:54:3c:18:6f:6b:35:49:dc:e7:fe:4b:60:
                    a0:14:be:3f:3e:0f:39:ce:95:13:12:8c:b9:35:d7:
                    15:75:3d:13:61:01:4a:fd:e0:bf:68:db:8d:24:0f:
                    6b:16:16:06:ff:0e:ef:9b:c2:ba:78:25:0a:5a:3c:
                    1a:55:91:02:fe:5c:4d:ca:49:96:b7:e9:94:89:b7:
                    de:88:a5:9a:ae:0d:79:90:f8:cc:65:e0:b2:7f:7f:
                    29:d1:89:3e:bb:c5:43:fe:b7:5b:c4:fc:83:d8:bf:
                    43:8f:f6:7c:3d:6a:51:70:52:75:b2:a7:f7:af:8a:
                    53:b0:9a:f3:fe:cc:c9:45:e5:55:f5:15:46:f5:88:
                    83:4e:82:b4:69:90:c9:d7:23:1e:fb:fc:0a:9d:72:
                    e3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:33:53:5D:D8:E9:DF:0D:7E:33:A6:4F:F1:5F:8D:BF:87:0E:8E
            X509v3 Authority Key Identifier:
                keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/172C2B96197711F0A993397AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:7b:a9:47:f2:56:2d:44:81:40:c9:89:7a:65:6a:1e:32:
         1a:c2:01:d1:95:be:9e:53:e4:01:75:56:2a:e7:74:4a:bd:64:
         74:2f:12:b0:15:33:70:14:27:8f:d3:a1:5b:c3:dc:4c:a9:bc:
         53:db:73:ee:a5:28:66:39:37:72:80:fb:00:d5:2f:b0:67:40:
         f6:d7:02:1e:bc:68:68:a8:b3:6b:97:07:4b:49:39:3e:b6:55:
         83:08:99:b2:f4:74:9f:68:ea:6d:23:57:30:d6:34:88:bf:fc:
         67:84:a1:0f:0a:f5:f9:f9:6d:05:60:88:b2:3e:5c:a6:5f:5d:
         c3:09:2e:2a:f0:a8:95:8c:90:a0:11:c6:7d:b0:f2:9e:ba:9b:
         31:c2:11:76:54:56:8d:ee:5f:e8:7d:7c:48:25:40:11:fe:6e:
         2c:53:93:f9:41:06:5f:8c:0c:9d:3b:74:db:e1:b0:10:ac:e1:
         70:f1:90:35:10:9f:b6:9e:ea:d0:b3:69:f0:b8:2d:1c:71:6e:
         d5:93:e1:ab:54:af:51:dc:55:7a:43:9b:7f:8a:ef:d2:a4:0c:
         19:a2:d2:de:23:98:40:31:a7:06:d9:de:35:a2:86:66:8d:35:
         9c:d6:62:c3:60:7d:38:f4:1b:96:fe:9f:6a:32:71:5a:fd:d7:
         b8:7c:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:50:25 2025 by rpki-client