Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1465D252621C11F0AAE4E551C4F9AE02.roa
File:                     1465D252621C11F0AAE4E551C4F9AE02.roa (raw, json)
Hash identifier:          pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=
Subject key identifier:   19:F6:D8:99:14:D2:7A:8B:4E:C3:FD:5F:ED:56:24:E4:58:DB:D2:53
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       04B1
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1465D252621C11F0AAE4E551C4F9AE02.roa
Signing time:             Wed 16 Jul 2025 08:08:39 +0000
ROA not before:           Wed 16 Jul 2025 08:08:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     43641
IP address blocks:        203.32.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul 16 08:08:39 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68775e07-a0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4e:f0:69:0b:f6:18:9b:42:71:ef:49:03:ed:
                    9e:94:d4:79:c1:cd:73:8f:95:e2:66:e1:0d:6a:1b:
                    64:e1:10:e0:72:2a:e6:f0:05:a6:c0:2b:2d:b4:fa:
                    fc:15:78:0d:8a:81:aa:7d:45:28:83:bc:96:86:c2:
                    39:45:9b:cf:ab:0c:75:4a:7e:ae:f4:8e:31:42:56:
                    87:e7:ba:7d:b7:0c:8b:31:b9:e1:04:29:3c:cb:de:
                    b7:9a:13:ea:58:5d:86:20:8d:81:08:30:1a:b6:04:
                    be:c4:3a:e5:13:b4:b0:5d:fb:60:ee:c9:a2:6e:dd:
                    ff:92:56:fb:52:5a:50:2e:e0:df:79:3f:9b:cc:20:
                    98:53:aa:4e:e6:86:a1:67:9f:03:17:09:57:96:d6:
                    2d:e2:fe:cd:30:1c:a8:27:8f:c5:0a:2d:50:d5:c2:
                    92:18:8e:53:88:81:e3:48:a6:fe:07:d9:63:e1:61:
                    77:1a:24:d1:c2:d0:e9:d8:7b:1c:4b:a8:98:6a:0b:
                    a7:37:a9:f5:ae:9e:fd:fc:fd:0e:ba:ae:c3:37:14:
                    86:7d:15:da:dd:06:03:9e:62:0a:16:92:45:0d:3d:
                    85:76:76:1d:c0:9a:52:86:8a:8a:35:9b:61:37:c1:
                    86:06:e8:4d:33:66:26:45:d7:ba:89:a7:37:41:15:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:D8:99:14:D2:7A:8B:4E:C3:FD:5F:ED:56:24:E4:58:DB:D2:53
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1465D252621C11F0AAE4E551C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:40:9b:ba:41:e9:9c:af:0a:26:7e:70:f7:e1:21:5d:f5:
         60:b3:22:00:04:8a:31:db:f2:cf:cc:ad:9a:05:64:84:d7:c2:
         62:ca:5e:2d:84:41:62:a4:4c:bc:c9:07:0f:1d:a4:9f:f1:a4:
         21:b6:5f:d2:b3:e4:8c:bc:dc:32:41:cc:46:e3:52:3e:8f:d9:
         20:2b:45:c0:ff:64:22:71:d7:d8:8d:69:5b:6a:e8:d5:0e:35:
         5f:3a:a4:22:99:94:23:74:a8:87:67:99:33:cc:cb:40:31:d2:
         d9:f4:8b:c4:43:15:7b:84:63:49:32:5e:a2:a1:5d:01:57:8d:
         3c:0b:0b:32:ae:1e:7d:63:2e:2d:e3:60:a7:85:20:6c:38:20:
         fb:da:11:e4:27:55:33:50:f0:f1:1e:cc:e0:1f:9f:55:61:07:
         6d:d5:27:bd:d1:be:59:29:e2:94:bc:78:75:8b:2a:2a:13:49:
         3e:71:5c:e3:5d:92:d2:8c:9d:97:3f:b9:68:3b:8b:08:48:a2:
         94:1b:21:15:70:73:d0:bd:4f:9a:12:b2:85:86:55:db:ca:4f:
         7c:80:2a:49:6a:aa:d7:08:2c:3f:da:13:69:27:44:53:3b:b4:
         0c:50:1c:80:21:0e:a5:e7:f6:c2:83:e8:dd:c2:b3:4d:c3:b6:
         62:59:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:50:09 2025 by rpki-client