Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
File:                     A937C2200FA511EFBDB06936C4F9AE02.roa (raw, json)
Hash identifier:          7elI6AMeNa1Ca+M4fsrsmJ6YMM78ASd0PDly2IpzKgA=
Subject key identifier:   3A:8F:95:CA:73:9C:89:C7:88:3A:D3:7A:4C:E1:58:B1:D6:B5:9B:DF
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       E4
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
Signing time:             Mon 07 Jul 2025 06:12:53 +0000
ROA not before:           Mon 07 Jul 2025 06:12:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     46015
IP address blocks:        45.127.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Jul  7 06:12:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686b6565-90fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:6d:5d:dc:c6:56:cf:5a:f2:d8:a2:fa:dc:
                    12:df:94:3e:9b:45:5b:48:24:4d:81:c4:ab:23:39:
                    4d:02:15:35:91:62:4a:90:4e:54:b5:75:6e:39:a6:
                    77:6b:67:18:eb:ed:32:4b:b5:16:39:19:f7:95:a4:
                    cb:d1:b7:87:24:6d:04:71:72:fc:53:d0:31:f8:5c:
                    9c:a4:91:d0:82:47:c2:00:da:ab:de:38:0f:ca:7c:
                    02:37:7a:b6:7e:9d:16:5e:9c:89:3f:a8:3a:5c:79:
                    05:8f:0e:24:c4:df:cc:fb:2e:57:cd:1a:a1:38:a7:
                    d8:c6:8b:42:3a:07:4d:22:7b:4d:02:7a:ae:f0:83:
                    2d:ed:d7:94:2a:a7:a3:04:ea:9d:f3:67:8a:cc:3e:
                    18:bf:9e:00:5e:b8:84:94:07:40:af:20:37:c5:21:
                    eb:bf:c7:de:d6:61:28:fd:aa:91:b3:27:05:95:71:
                    7c:ce:13:96:06:91:e6:10:e4:d0:a7:09:c7:88:2e:
                    e3:72:bf:cb:45:26:9f:e6:87:f4:58:91:cb:26:aa:
                    0d:7b:d1:fb:07:1b:62:52:e9:68:95:33:94:d2:4e:
                    57:c8:e4:87:66:7c:9c:11:a4:89:76:86:db:ce:7e:
                    a8:24:ba:fa:45:2b:03:f6:86:84:77:4f:4f:05:6f:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8F:95:CA:73:9C:89:C7:88:3A:D3:7A:4C:E1:58:B1:D6:B5:9B:DF
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:4f:0c:d8:42:4e:e6:a7:a0:01:20:f0:6e:d6:fd:c3:62:
         41:3e:09:7e:8c:83:fe:98:06:53:5f:dc:67:e5:f8:99:f5:32:
         e2:f1:23:95:dd:f0:0e:4d:d3:54:aa:df:4c:37:cd:c5:2d:0f:
         3f:18:1a:1b:4f:cf:c9:85:03:8f:5a:01:13:13:3c:60:c6:67:
         76:99:59:fd:2a:4e:cc:20:f8:be:02:e5:1d:c9:c3:09:19:2e:
         b1:88:23:86:a6:c8:a1:1e:37:1d:c6:56:4f:43:f9:ab:2f:97:
         4c:ac:c9:bd:a8:c8:98:2b:fe:9e:01:db:0c:20:b9:c0:f8:8f:
         ae:ab:76:fe:eb:76:a2:d9:c2:f9:c6:9f:bb:80:e8:7f:07:db:
         0f:00:0b:f4:d3:ea:fb:68:98:c2:f0:bf:d0:6a:d6:48:de:50:
         2a:02:6e:67:b4:51:a0:ed:bc:e3:fe:51:9e:12:cb:67:90:f1:
         54:1b:58:7d:0e:45:5f:39:19:0e:e1:43:71:17:7d:45:cd:20:
         ce:26:4a:77:d2:7f:52:44:0d:65:11:f4:86:a3:55:43:d8:f6:
         85:37:f5:3a:0e:31:55:be:d8:b0:a6:4d:53:1a:d1:c2:1b:2b:
         d2:54:2c:c9:be:0b:45:24:1b:dd:c2:e6:51:74:ca:8e:de:eb:
         51:c9:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:59:28 2025 by rpki-client