Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
File:                     413AD9F852E411EC9E19AA2FC4F9AE02.roa (raw, json)
Hash identifier:          Y2Z1jehKepnssjRVP8joGvXLmK9adM98wErhHrOtaeg=
Subject key identifier:   BB:FB:CE:A1:06:77:1F:7C:01:01:33:4B:EA:C5:E9:9C:E5:BB:F9:69
Certificate issuer:       /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial:       04AF
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
Signing time:             Sat 19 Jul 2025 00:37:24 +0000
ROA not before:           Sat 19 Jul 2025 00:37:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        202.92.192.0/24 maxlen: 24
                          202.92.193.0/24 maxlen: 24
                          202.92.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
                          rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 00:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
        Validity
            Not Before: Jul 19 00:37:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687ae8c3-15f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:bd:c1:80:c0:55:d5:e8:6d:71:3e:8c:4a:
                    76:d4:1c:e7:b5:fe:d8:a1:40:50:d9:17:fa:26:2c:
                    65:3c:15:82:1a:ac:71:08:6a:96:bf:9a:85:39:82:
                    c6:c1:a1:02:83:57:15:80:3e:3d:7a:60:c8:e7:42:
                    5d:54:74:59:de:9f:f4:30:ae:10:19:df:28:ab:a9:
                    ae:30:0a:92:de:21:a0:6e:73:e3:95:f1:a4:66:ac:
                    7a:e0:75:d4:f4:d7:df:30:f3:0d:ca:7f:db:cc:c9:
                    40:72:f4:9d:cc:49:39:69:1e:87:ce:07:fb:8f:2e:
                    30:d2:0b:41:f9:de:ab:7b:08:d3:0e:78:34:97:ba:
                    e6:63:33:42:e7:08:67:57:f0:41:c3:98:cb:41:05:
                    b6:15:66:e5:f7:3c:f8:e7:a2:27:33:c3:3c:6c:b1:
                    f0:0b:f4:45:e0:4e:7a:4f:91:76:ea:66:83:13:39:
                    a6:81:9a:e3:40:0d:02:0b:a2:4c:79:35:b1:9f:4b:
                    74:14:04:1c:92:95:c1:b9:57:be:52:a1:19:81:7d:
                    02:68:2f:f2:bc:6d:9c:a0:5e:c4:0d:db:f4:d0:08:
                    af:ee:7a:5f:19:67:8c:a0:1d:22:2e:60:df:ab:6a:
                    a4:38:0c:4f:60:38:7c:7a:1a:32:2d:84:5b:86:a8:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:CE:A1:06:77:1F:7C:01:01:33:4B:EA:C5:E9:9C:E5:BB:F9:69
            X509v3 Authority Key Identifier:
                keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.192.0/23
                  202.92.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:db:1f:b7:39:d0:07:4e:57:f2:0e:fc:b7:38:91:4a:35:
         54:de:1e:4c:4e:21:ac:f7:d4:ae:ab:5e:0b:64:6e:98:02:8a:
         50:41:c7:6a:93:60:07:d3:8e:ec:e1:82:6c:b8:73:0d:f7:22:
         58:d8:8e:35:57:5b:9e:37:ef:07:84:18:48:1a:ba:b1:6b:ab:
         5c:64:0c:f0:89:a7:82:a5:ce:e3:b8:96:8a:93:a9:df:d0:c0:
         56:2a:eb:65:d4:93:27:b7:b4:d0:e9:88:fc:42:b4:1e:30:1c:
         95:a7:e1:e2:08:91:d0:b9:5b:b4:85:ab:2f:ee:ad:b9:ec:80:
         4a:44:64:2c:19:04:c2:27:dd:df:14:0d:85:22:11:59:7c:f7:
         97:f3:45:28:91:58:d0:f3:d6:b2:90:ab:c4:6e:d8:f4:32:22:
         86:93:31:84:dd:68:f7:24:da:f4:1c:07:78:29:90:05:9d:72:
         3c:46:44:4c:bf:a2:c7:c3:1a:6c:7e:eb:36:36:69:04:95:fc:
         e9:4a:b6:22:08:77:17:c3:78:fb:45:28:8d:8c:47:a8:a1:5c:
         57:05:ab:b1:37:96:0e:e0:72:4a:59:1b:4b:4c:c7:fa:a8:cd:
         1b:fa:99:5b:9c:05:7f:ae:12:09:1c:36:c2:2d:1f:f0:0c:25:
         92:39:47:55
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx
OTAwNzE1RUQwHhcNMjUwNzE5MDAzNzIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODdhZThjMy0xNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUe9wYDAVdXobXE+jEp21Bzntf7YoUBQ2Rf6JixlPBWCGqxxCGqWv5qFOYLG
waECg1cVgD49emDI50JdVHRZ3p/0MK4QGd8oq6muMAqS3iGgbnPjlfGkZqx64HXU
9NffMPMNyn/bzMlAcvSdzEk5aR6Hzgf7jy4w0gtB+d6rewjTDng0l7rmYzNC5whn
V/BBw5jLQQW2FWbl9zz456InM8M8bLHwC/RF4E56T5F26maDEzmmgZrjQA0CC6JM
eTWxn0t0FAQckpXBuVe+UqEZgX0CaC/yvG2coF7EDdv00Aiv7npfGWeMoB0iLmDf
q2qkOAxPYDh8ehoyLYRbhqisowIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLv7zqEG
dx98AQEzS+rF6Zzlu/lpMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2
RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvNDEzQUQ5Rjg1
MkU0MTFFQzlFMTlBQTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAHKXMADBADKXMQwDQYJKoZIhvcNAQELBQADggEBAI+I2x+3
OdAHTlfyDvy3OJFKNVTeHkxOIaz31K6rXgtkbpgCilBBx2qTYAfTjuzhgmy4cw33
IljYjjVXW5437weEGEgaurFrq1xkDPCJp4KlzuO4loqTqd/QwFYq62XUkye3tNDp
iPxCtB4wHJWn4eIIkdC5W7SFqy/urbnsgEpEZCwZBMIn3d8UDYUiEVl895fzRSiR
WNDz1rKQq8Ru2PQyIoaTMYTdaPck2vQcB3gpkAWdcjxGREy/osfDGmx+6zY2aQSV
/OlKtiIIdxfDePtFKI2MR6ihXFcFq7E3lg7gckpZG0tMx/qozRv6mVucBX+uEgkc
NsItH/AMJZI5R1U=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:07:55 2025 by rpki-client