Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/D616F9C45CB011F09DD6183AC4F9AE02.roa
File:                     D616F9C45CB011F09DD6183AC4F9AE02.roa (raw, json)
Hash identifier:          ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=
Subject key identifier:   E0:E5:15:61:A6:64:B2:F1:84:99:E1:45:D9:EE:4D:73:5C:C1:BC:DA
Certificate issuer:       /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial:       04
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/D616F9C45CB011F09DD6183AC4F9AE02.roa
Signing time:             Wed 09 Jul 2025 11:22:24 +0000
ROA not before:           Wed 09 Jul 2025 11:22:24 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152635
IP address blocks:        202.0.81.0/24 maxlen: 24
                          2001:df3:8940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
                          rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
        Validity
            Not Before: Jul  9 11:22:24 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=686e50f0-0546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:f9:b1:d5:94:61:95:14:df:2e:e2:e7:94:
                    20:e0:88:c0:61:7b:34:c5:34:53:55:23:b1:c8:34:
                    14:7b:08:e1:f5:1e:d9:d2:07:fa:54:95:7b:f4:d2:
                    56:66:ab:48:0f:16:6f:0b:2a:64:33:e2:0f:d0:20:
                    0e:ca:a8:2b:7b:86:41:1e:7e:b3:b9:49:02:12:65:
                    c0:f0:4c:30:96:13:c3:3a:a3:01:f5:68:ee:27:f6:
                    4b:1d:f7:e0:1f:22:54:cd:af:f3:7f:98:d7:b3:a0:
                    8c:51:67:26:d7:10:e1:7a:13:fc:b4:27:b2:bd:0e:
                    50:e0:c2:59:46:b7:82:a9:95:7a:55:2e:cc:4e:81:
                    fb:03:51:f0:36:50:b5:32:02:de:c2:65:85:bc:2f:
                    08:b1:1a:a0:01:35:7a:2b:c2:3d:7a:53:05:57:2f:
                    7f:8e:80:91:92:5c:bb:13:fc:2f:22:1d:0c:34:f6:
                    5e:9e:ab:ee:cc:06:de:2b:4e:71:41:f4:c6:2c:95:
                    0a:27:3c:6a:58:84:fb:7c:35:c7:c1:0b:74:75:d6:
                    46:a6:2a:49:af:29:50:c8:b3:a8:07:a7:00:4d:74:
                    28:42:13:b2:8a:34:3b:25:52:13:7e:c9:5f:84:44:
                    a0:45:9a:be:d9:1c:46:cf:11:6f:3f:1b:7f:14:a0:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E5:15:61:A6:64:B2:F1:84:99:E1:45:D9:EE:4D:73:5C:C1:BC:DA
            X509v3 Authority Key Identifier:
                keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/D616F9C45CB011F09DD6183AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.81.0/24
                IPv6:
                  2001:df3:8940::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:70:59:d2:b7:b0:84:3c:73:9c:81:9b:9d:54:b5:32:e8:3e:
         1a:20:1f:98:28:55:94:2a:f9:8e:64:bd:b9:5b:e0:47:13:10:
         d0:54:b4:65:b5:72:1e:70:a0:a4:1b:b5:96:d2:f7:46:85:4f:
         6c:3d:b8:52:ea:c4:a0:6a:18:b5:2d:46:0e:dd:b1:88:b4:3c:
         ae:05:f3:07:4a:01:d2:09:f5:df:3f:c8:ec:cb:be:28:93:ad:
         f6:e1:a9:59:fa:0d:42:f4:5e:23:a3:58:24:c1:da:98:c4:d8:
         fc:08:26:77:78:63:a2:0e:e6:7f:59:23:44:5a:e6:8d:34:9c:
         f8:f7:b0:21:b8:ea:f9:27:d9:a1:5c:6e:7d:71:3c:1d:dc:6e:
         53:67:ad:bf:bf:94:a3:24:45:41:7f:f5:79:bc:d2:cc:90:16:
         4e:9a:5f:f2:10:97:ba:9c:27:12:0f:3b:51:2a:16:64:a9:51:
         ed:33:0b:0f:d9:3e:af:84:7e:7a:34:85:5f:45:94:7c:23:85:
         be:dd:8a:1d:24:ef:c2:86:94:13:d1:f3:c9:a5:f8:83:4a:b3:
         bf:9a:eb:9a:77:38:6c:99:de:83:96:94:89:c0:13:3e:75:32:
         79:31:06:ee:d2:47:9e:d3:29:dc:e0:56:f7:65:b3:76:36:ab:
         fa:3b:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:49:03 2025 by rpki-client