Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/669892085D5D11F0AAE8C847C4F9AE02.roa
File:                     669892085D5D11F0AAE8C847C4F9AE02.roa (raw, json)
Hash identifier:          YloUxGTrxFqJdGX0eY4LvrEEn+EXGL+0rN59a1XKXIY=
Subject key identifier:   C8:57:CB:FF:B5:D9:C1:6B:05:98:75:4C:62:2B:5F:B2:50:68:8F:C4
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       08CC
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/669892085D5D11F0AAE8C847C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 07:13:38 +0000
ROA not before:           Thu 10 Jul 2025 07:13:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     24389
IP address blocks:        169.136.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252 (0x8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jul 10 07:13:38 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686f6822-b08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cd:e1:2c:c8:d5:ac:86:fe:4e:36:4f:87:c5:
                    ed:32:3b:76:b7:c5:3d:24:d2:28:e7:b2:a8:b4:d8:
                    41:74:d0:5a:e9:d9:3d:89:7c:5c:3a:87:bb:cd:10:
                    68:62:b1:3a:d5:11:83:e8:25:56:71:64:72:80:e6:
                    af:f6:03:5f:14:cc:81:73:3b:fa:2f:bb:fb:b3:16:
                    1d:f4:f3:39:f8:bb:29:66:f7:57:01:59:10:76:ff:
                    de:d1:08:7f:2f:40:c0:f4:08:39:69:11:e5:ff:a8:
                    ef:b6:e6:b5:b1:fa:f1:e0:18:19:dc:4b:19:fa:fd:
                    3e:80:d3:bb:ae:d0:cc:83:cb:e5:ee:44:06:7d:79:
                    61:16:ef:b4:d1:c8:25:83:33:55:bc:8a:6f:46:04:
                    80:f6:6f:b4:fc:2d:ff:27:fb:d2:b5:c6:81:32:f6:
                    0c:39:cf:dc:e0:44:4f:61:1d:d6:80:b7:34:94:95:
                    ac:d6:73:c3:1b:82:e8:8a:e2:9b:f3:77:90:15:6d:
                    83:f4:b1:2e:00:1d:6d:4a:f3:54:19:0f:10:f1:d2:
                    80:3b:ce:56:ee:4f:dd:f5:be:22:7f:9b:b8:ed:2b:
                    62:13:e4:6f:79:d5:fe:1f:7b:70:b3:fa:8b:81:6f:
                    8b:41:0c:87:d3:10:4f:8d:03:8c:53:96:ce:9e:c2:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:CB:FF:B5:D9:C1:6B:05:98:75:4C:62:2B:5F:B2:50:68:8F:C4
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/669892085D5D11F0AAE8C847C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:3c:1d:47:8c:d8:c8:01:9f:41:0b:48:f2:d9:6b:30:85:
         b7:2e:db:ec:59:cd:b3:ca:c8:b3:a1:b3:e6:24:21:c2:79:84:
         f9:8e:1e:be:6b:36:ca:d8:9a:8d:5d:93:0e:fc:0c:b0:dd:e4:
         8d:75:ad:40:12:e6:fa:c7:c2:fd:1c:80:1b:80:27:28:de:bf:
         fc:36:82:96:f0:cc:78:f9:e0:de:5a:a9:4b:28:ab:b0:68:7e:
         7a:a7:e1:d9:ef:15:6a:87:8b:21:03:8e:3f:02:07:f7:18:f4:
         20:4b:2f:74:c6:03:93:cd:c3:90:50:cd:01:05:4a:96:a8:dc:
         d9:c8:9f:c4:24:5d:4b:a5:45:67:9d:21:e2:22:85:7f:e9:d3:
         ad:ef:78:9e:81:9c:ae:ea:79:f8:98:28:51:20:5c:b6:b0:ea:
         5d:f4:b7:db:f0:c6:eb:e0:c8:61:15:18:8d:9a:ad:62:4f:9a:
         a2:db:59:e6:b6:0f:4b:e4:cb:17:b1:3b:77:23:ea:cb:16:0d:
         37:67:cb:84:ea:1c:43:49:0a:06:e0:7f:b1:af:66:5b:7e:7e:
         8d:da:46:ab:d4:06:f3:57:46:0d:1b:fb:0e:3f:33:43:bc:e4:
         11:c4:a7:0d:58:70:e1:02:1e:c6:e5:14:56:d4:1a:46:b1:31:
         27:74:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:26:40 2025 by rpki-client