Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/AF00AECABBF511ECAA816D52C4F9AE02.roa
File:                     AF00AECABBF511ECAA816D52C4F9AE02.roa (raw, json)
Hash identifier:          GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=
Subject key identifier:   01:A0:EE:2D:0A:B6:15:13:98:28:15:A6:41:AA:B3:26:F8:14:F3:C5
Certificate issuer:       /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial:       34E8
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/AF00AECABBF511ECAA816D52C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 15:20:56 +0000
ROA not before:           Thu 31 Jul 2025 15:20:56 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45871
IP address blocks:        180.94.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
                          rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 15:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
        Validity
            Not Before: Jul 31 15:20:56 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=688b89d8-527f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:85:d0:1f:2b:37:fd:fc:37:2a:92:a5:3d:
                    47:08:39:bc:ba:31:29:cd:6b:f1:58:c6:6d:12:46:
                    c6:20:87:26:10:17:15:42:08:13:d2:0b:f2:42:07:
                    f1:1d:d9:3f:b5:92:d2:5e:b2:86:03:71:b7:5f:7f:
                    3a:3a:1c:78:5b:bd:e6:cf:07:f4:d0:6e:4a:40:90:
                    e7:86:03:eb:52:b4:66:73:5b:e3:85:26:66:ab:34:
                    e5:bc:26:e6:0d:ba:23:f4:75:a6:48:f9:19:cd:be:
                    bd:2f:da:c2:f8:c6:18:a0:35:8c:2f:93:fb:a8:1a:
                    50:a7:83:94:00:ca:11:f3:e1:96:99:86:5f:c2:e7:
                    82:33:d0:9a:bd:64:22:97:8f:77:1c:d9:1a:fc:e6:
                    71:a2:a8:0c:9c:5a:d6:ef:a1:fa:27:85:ee:9c:3b:
                    67:52:65:4a:84:de:61:a2:80:3e:dc:83:a1:eb:f9:
                    17:f3:00:81:95:12:cf:e7:bd:4e:c2:ab:6b:72:3e:
                    90:30:cd:2a:c1:4e:6e:24:e6:c5:04:29:0e:3b:5a:
                    3b:28:8d:6d:62:a9:96:bd:fe:5e:1f:09:0d:ee:e2:
                    01:3c:eb:24:8d:23:b9:6a:de:ce:74:04:fe:0a:24:
                    d5:e1:d1:e9:dd:46:5a:1e:b0:30:fb:a3:b6:8b:84:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A0:EE:2D:0A:B6:15:13:98:28:15:A6:41:AA:B3:26:F8:14:F3:C5
            X509v3 Authority Key Identifier:
                keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/AF00AECABBF511ECAA816D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:33:86:63:d6:c1:25:45:3a:17:70:1a:ad:36:a7:c5:4f:
         b0:64:ae:98:23:46:e6:e9:58:6e:36:65:4e:e4:df:ad:e3:3f:
         7d:82:d7:05:dc:21:86:fd:9e:2b:c4:eb:7d:47:6b:b7:cb:14:
         97:ad:2b:d6:c0:34:39:23:a2:0f:71:ec:4c:70:1e:9d:39:b7:
         8b:12:da:ad:ab:f7:95:2c:16:12:a7:6d:34:89:94:e6:53:fd:
         e9:b8:e5:8d:14:1b:cc:37:a1:8a:11:fe:45:d4:19:6f:c5:32:
         1e:0c:32:ed:88:88:53:bd:39:e7:c7:28:a6:3c:47:02:80:e5:
         12:f7:e5:23:25:7e:ee:c9:d3:7f:ff:aa:eb:25:14:73:b1:8e:
         81:62:ec:fe:b8:94:fa:06:7a:c5:8b:24:9a:98:42:44:b1:6a:
         aa:60:f2:7c:f2:ba:f3:de:90:a5:53:14:fc:16:0d:ad:e4:3b:
         1f:64:ae:73:13:a6:d7:71:d1:02:2a:0e:f7:d9:ab:6c:2a:c0:
         d2:58:ed:f8:fa:53:4e:ca:39:99:b5:ed:90:66:3f:a7:e6:dc:
         2f:bb:b7:10:9d:13:e3:3a:f8:eb:eb:ea:be:80:a6:56:a0:a0:
         1a:7f:89:ae:5e:5e:42:92:88:a5:1d:76:85:4b:cc:e7:01:bf:
         72:bf:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:18 2025 by rpki-client