Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/EA61BF885BA011F0B7D9FB0DC4F9AE02.roa
File:                     EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (raw, json)
Hash identifier:          aOZDWn1qMroB3T8wskNnWN128J45BAOnAdMKsBqc0yc=
Subject key identifier:   1E:95:8E:59:98:3A:9E:31:42:5B:A9:C5:22:B6:36:15:C6:51:BF:A9
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       025A
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/EA61BF885BA011F0B7D9FB0DC4F9AE02.roa
Signing time:             Tue 08 Jul 2025 02:11:53 +0000
ROA not before:           Tue 08 Jul 2025 02:11:53 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        202.179.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Jul  8 02:11:53 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=686c7e69-0136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:21:41:b3:3b:23:10:fa:a7:67:f8:dc:53:
                    47:15:ca:f3:6d:8c:12:b5:75:f6:02:ea:cb:0d:c5:
                    d5:59:f9:d9:eb:53:d0:ae:45:b0:3b:36:d2:22:14:
                    fe:54:74:61:eb:fc:ba:e2:61:ab:d8:86:5a:dd:59:
                    34:39:56:1d:42:6c:4a:ab:f4:0e:41:0b:9b:1f:d3:
                    2f:c4:c8:41:4c:41:1c:9d:75:ea:93:28:7a:e7:83:
                    c7:1c:dc:94:32:28:47:b2:7b:f5:39:4b:02:1b:c7:
                    f7:8b:4d:59:16:4a:7a:be:81:16:08:c1:15:3e:02:
                    de:bf:56:6f:39:3b:10:2c:3a:ae:77:06:a2:bc:ba:
                    8c:c5:fc:a5:31:04:9c:6a:76:a3:42:6c:75:63:fd:
                    9e:55:17:8b:26:11:75:81:1a:d1:a4:d5:85:bd:41:
                    00:1c:82:35:60:42:4e:69:6d:30:33:a0:41:13:dc:
                    a4:0b:60:97:0d:7d:b7:c1:a1:53:ca:a1:e5:ed:16:
                    ab:2e:ea:0b:b7:af:e5:c0:de:6c:5a:a8:63:bc:b7:
                    03:fc:50:b7:96:95:92:e2:6d:a6:92:f2:bf:f6:a3:
                    f2:16:80:36:3b:0e:1c:1e:72:67:c6:09:4f:44:52:
                    db:56:1e:ec:3d:b1:e4:6a:9d:15:0e:e3:ee:dd:b8:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:95:8E:59:98:3A:9E:31:42:5B:A9:C5:22:B6:36:15:C6:51:BF:A9
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/EA61BF885BA011F0B7D9FB0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:fb:19:38:c2:60:46:8f:bb:09:8f:e3:50:79:29:7a:84:
         63:cb:9a:e4:ed:57:d0:c4:df:ee:f6:96:cd:b4:59:b9:09:45:
         e3:73:99:8c:5c:27:5b:b1:69:20:99:c6:c3:37:73:21:73:f0:
         ce:9d:11:90:d2:9f:ac:ef:ce:d2:a6:74:81:3b:ed:92:c6:44:
         b2:e9:35:f0:6e:8e:76:d6:c1:29:0d:c0:da:ae:18:5b:1c:d1:
         d9:07:e3:c8:11:01:db:c3:83:56:d7:17:19:cf:b2:d5:89:90:
         f1:24:45:d4:4e:76:96:92:19:3c:b1:a8:ff:6f:13:f6:22:06:
         96:d7:d6:2c:6e:0d:54:1f:4f:8f:a4:5c:d8:79:1b:bc:19:38:
         84:2a:f2:29:8d:ed:fa:52:93:6b:88:f4:51:06:91:e8:a4:0f:
         04:66:57:0e:c4:dd:f0:52:1c:5d:b5:f3:79:70:2a:1c:a5:eb:
         42:d7:ab:d8:23:eb:08:c9:14:3b:65:a1:b0:85:30:ce:fa:2d:
         2a:29:60:b8:c1:5c:37:14:f6:22:c9:c1:43:d1:1c:a2:57:9e:
         88:43:d4:8a:76:69:dd:ae:a5:af:06:fe:f7:61:5c:94:0e:f4:
         77:ff:84:93:25:4d:d1:8f:75:94:fe:1d:10:46:a2:07:c0:13:
         2e:41:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:42:18 2025 by rpki-client