Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/0AF12B12DDA411E88E25E96FC4F9AE02.roa
File:                     0AF12B12DDA411E88E25E96FC4F9AE02.roa (raw, json)
Hash identifier:          u2n7hXJfpPkswx+8ZUw3IUUcjyPvy2JG1QnFE+FNubg=
Subject key identifier:   16:5D:7F:5D:CC:99:DD:94:58:3E:E3:80:8F:9F:49:64:3B:EB:90:CA
Certificate issuer:       /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial:       1261
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/0AF12B12DDA411E88E25E96FC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 17:26:37 +0000
ROA not before:           Thu 24 Jul 2025 17:26:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56037
IP address blocks:        122.129.216.0/22 maxlen: 22
                          122.129.220.0/23 maxlen: 23
                          122.129.223.0/24 maxlen: 24
                          210.56.83.0/24 maxlen: 24
                          210.56.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
                          rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 02 Aug 2025 17:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4705 (0x1261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
        Validity
            Not Before: Jul 24 17:26:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68826ccc-b02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:6e:33:0d:c7:59:7d:4c:c8:a0:8b:09:93:
                    25:d9:16:2f:18:d0:7c:36:92:7e:02:0b:a9:4a:a7:
                    52:85:61:8a:bc:a0:15:e4:f6:8d:8d:cf:fe:57:85:
                    26:28:8a:97:3a:f5:da:9b:1b:e6:1f:07:44:db:75:
                    44:68:8e:2c:e5:16:12:4f:e0:52:47:e2:7d:ba:5b:
                    43:0b:23:65:66:a6:48:c4:7b:d0:80:86:1f:55:ed:
                    f7:fd:f8:20:70:f1:55:f6:fe:c5:3b:c6:d0:db:54:
                    b6:05:6e:4f:28:b6:c4:0d:c6:0e:9a:22:eb:af:de:
                    d8:96:99:2f:e7:60:13:25:da:de:dd:5f:0b:b8:59:
                    ca:39:1c:e3:87:60:d6:ee:df:82:fd:27:e1:3f:e3:
                    e3:87:ee:29:da:36:9b:26:f0:86:09:95:18:48:61:
                    cf:29:a8:8e:3f:8a:79:ae:46:bf:ef:9e:1d:3d:cf:
                    8b:5e:63:e1:07:87:6d:0f:fd:7f:c1:0f:58:c9:fb:
                    e1:f6:71:1c:00:16:18:c1:c5:8a:08:82:d0:70:10:
                    94:88:0c:2e:b8:82:07:98:dc:6d:73:88:f2:14:f7:
                    2d:55:fd:14:bf:c7:b2:87:11:f8:fd:47:dd:f4:34:
                    4d:cb:f8:d4:dc:e4:b3:90:58:bf:05:82:4a:86:b4:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:7F:5D:CC:99:DD:94:58:3E:E3:80:8F:9F:49:64:3B:EB:90:CA
            X509v3 Authority Key Identifier:
                keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/0AF12B12DDA411E88E25E96FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.129.216.0-122.129.221.255
                  122.129.223.0/24
                  210.56.83.0/24
                  210.56.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:6e:db:22:54:f1:b1:61:30:57:ed:cb:d5:6a:1a:69:32:22:
         c8:1e:12:42:74:5d:0b:03:f3:9c:7b:e1:b8:43:55:44:ca:87:
         d5:84:8a:d7:9d:cc:0c:ae:83:61:f0:eb:66:b6:11:2a:10:65:
         7b:ff:f8:b6:df:7e:77:23:e1:f1:c4:9b:4f:36:49:01:f1:f6:
         d7:55:a6:ee:b9:d0:f5:81:2c:4e:b8:49:d6:fe:39:97:d0:44:
         31:2b:89:b2:12:41:a9:6c:49:30:98:9a:79:d4:fb:5f:91:1b:
         01:27:92:db:dc:88:6f:85:8d:24:4f:3a:13:e6:d6:1d:92:11:
         06:1b:49:93:a1:63:e6:2d:d1:33:52:6c:f7:76:d2:73:c7:b3:
         12:f8:52:5b:ef:c9:38:11:33:41:62:ce:0d:5b:b6:22:46:7a:
         66:40:a8:2a:11:98:bd:64:66:2e:d9:8a:09:1b:8d:b4:7e:dc:
         ac:22:bf:f8:c3:db:34:86:94:63:c5:83:96:5e:8c:4c:2c:b2:
         7b:a6:be:83:b9:1a:c9:f1:c1:3e:51:85:55:86:ad:b9:bf:94:
         86:ca:3a:93:dc:4f:be:72:22:b7:32:61:91:67:af:91:8e:3c:
         ac:95:10:c8:db:d9:a3:7a:a7:e0:22:94:97:30:93:29:c4:e2:
         08:b5:4a:0f
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICEmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy
M0ZBRUVBMDgwHhcNMjUwNzI0MTcyNjM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODgyNmNjYy1iMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWduMw3HWX1MyKCLCZMl2RYvGNB8NpJ+AgupSqdShWGKvKAV5PaNjc/+V4Um
KIqXOvXamxvmHwdE23VEaI4s5RYST+BSR+J9ultDCyNlZqZIxHvQgIYfVe33/fgg
cPFV9v7FO8bQ21S2BW5PKLbEDcYOmiLrr97Ylpkv52ATJdre3V8LuFnKORzjh2DW
7t+C/SfhP+Pjh+4p2jabJvCGCZUYSGHPKaiOP4p5rka/754dPc+LXmPhB4dtD/1/
wQ9Yyfvh9nEcABYYwcWKCILQcBCUiAwuuIIHmNxtc4jyFPctVf0Uv8eyhxH4/Ufd
9DRNy/jU3OSzkFi/BYJKhrSVcwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFBZdf13M
md2UWD7jgI+fSWQ765DKMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE
QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjI2OEEvODRGQjRDOUNEREExMTFFOEEyRTc4QTY5QzRGOUFFMDIvMEFGMTJCMTJE
REE0MTFFODhFMjVFOTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMCYEAgABMCAwDAMEA3qB2AMEAXqB3AMEAHqB3wMEANI4UwMEANI4XjANBgkq
hkiG9w0BAQsFAAOCAQEASG7bIlTxsWEwV+3L1WoaaTIiyB4SQnRdCwPznHvhuENV
RMqH1YSK153MDK6DYfDrZrYRKhBle//4tt9+dyPh8cSbTzZJAfH211Wm7rnQ9YEs
TrhJ1v45l9BEMSuJshJBqWxJMJiaedT7X5EbASeS29yIb4WNJE86E+bWHZIRBhtJ
k6Fj5i3RM1Js93bSc8ezEvhSW+/JOBEzQWLODVu2IkZ6ZkCoKhGYvWRmLtmKCRuN
tH7crCK/+MPbNIaUY8WDll6MTCyye6a+g7kayfHBPlGFVYatub+Uhso6k9xPvnIi
tzJhkWevkY48rJUQyNvZo3qn4CKUlzCTKcTiCLVKDw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:19 2025 by rpki-client