Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
File:                     E3C4A4EE777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier:          he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=
Subject key identifier:   45:E8:CB:B6:EC:52:4C:89:B6:1D:CB:9B:64:90:17:8D:BB:83:3E:28
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       AE
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
Signing time:             Wed 09 Jul 2025 07:43:18 +0000
ROA not before:           Wed 09 Jul 2025 07:43:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     63997
IP address blocks:        45.254.38.0/24 maxlen: 24
                          2405:a280:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Jul  9 07:43:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686e1d95-0d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:90:d5:80:0a:39:88:cb:41:91:50:0f:76:
                    65:f6:58:8a:85:75:4c:54:71:c8:d0:e1:43:e6:d9:
                    91:50:af:81:13:e5:34:21:fb:b0:58:1a:61:fe:70:
                    75:bb:49:82:fc:f6:5e:80:5f:70:1e:7f:e8:f9:53:
                    9e:18:8d:80:69:98:8a:1f:c1:e8:a8:50:d3:f0:8d:
                    23:64:96:2c:9c:f1:c3:5b:22:e8:fe:07:1d:f5:67:
                    1f:d5:14:3b:10:dd:51:82:c2:62:5f:2f:10:a8:6b:
                    66:aa:ad:16:88:8f:ff:53:79:d8:1b:0c:19:09:80:
                    a7:6c:80:2c:08:5a:3f:78:85:e9:6b:3b:2e:a1:84:
                    84:23:93:af:44:cb:05:4d:7a:1f:06:e3:f9:e4:57:
                    9f:16:84:92:1e:ec:62:73:6f:27:b7:5f:c9:69:c9:
                    0f:f1:42:3b:76:f2:e5:21:82:a8:40:be:97:e2:98:
                    9e:ef:60:8e:e5:ea:dc:33:2d:61:8e:44:db:d3:74:
                    21:19:2b:3e:aa:a4:57:59:07:47:b7:0f:ba:be:c6:
                    90:d1:30:c9:ab:23:b4:8e:ea:37:be:2f:07:ac:0a:
                    19:19:4b:b7:56:16:7a:b8:1b:64:17:ec:94:16:cf:
                    61:6b:b5:7c:e4:5f:f7:2e:8d:9a:8d:60:6e:db:ae:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E8:CB:B6:EC:52:4C:89:B6:1D:CB:9B:64:90:17:8D:BB:83:3E:28
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.38.0/24
                IPv6:
                  2405:a280:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:59:28:20:14:bb:d9:df:11:94:95:65:06:e9:11:10:66:5d:
         37:2e:bd:1f:c5:b5:41:ee:d9:8a:9c:f6:98:80:b8:07:72:e1:
         33:12:d6:43:41:2e:99:1b:bf:d2:9f:07:36:83:ed:78:55:e4:
         ac:0b:a8:0d:2b:99:2d:a9:53:9f:2b:bb:52:ea:ed:bd:69:ea:
         3a:e4:b5:8e:3e:5d:22:e9:61:90:c5:41:cb:16:c9:43:f4:3a:
         e8:a1:1a:97:08:52:3a:c6:f9:99:d4:5e:57:dc:22:52:04:c1:
         16:c9:b3:a7:b7:6f:e5:f0:0a:f5:97:0a:c3:8d:13:b8:f6:54:
         b4:54:67:7f:e1:90:0a:29:59:86:63:ce:00:00:de:9c:c2:91:
         bf:63:f6:e4:53:13:fd:20:77:e4:99:dc:1e:68:31:b6:9e:5c:
         33:e7:0f:e5:57:47:02:01:dd:7a:fa:8d:78:8e:4c:c6:ae:8a:
         e0:2e:f3:6e:73:17:4a:64:1e:fe:14:34:eb:12:28:22:71:a5:
         70:ef:3b:81:06:71:59:7c:ec:cb:79:b8:6f:63:41:4d:cc:73:
         d5:04:f5:53:2b:ca:10:56:46:0a:16:28:1c:af:cb:0c:3e:47:
         68:ad:f0:2a:c3:a1:24:b2:7d:b0:0c:d0:a2:37:c2:e8:61:91:
         f1:87:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:07:07 2025 by rpki-client