Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B6B65E76852411EFA67F8144C4F9AE02.roa
File:                     B6B65E76852411EFA67F8144C4F9AE02.roa (raw, json)
Hash identifier:          62+I0JCsjnrf/+FC3fWOyVd0FAIFAMqGALGtyUh/ptw=
Subject key identifier:   77:BA:BD:D1:86:8E:B8:D7:C6:B9:16:46:D4:32:95:D4:B1:F9:02:8D
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2588
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B6B65E76852411EFA67F8144C4F9AE02.roa
Signing time:             Tue 26 Aug 2025 10:19:19 +0000
ROA not before:           Tue 26 Aug 2025 10:19:19 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     45430
IP address blocks:        147.50.80.0/24 maxlen: 24
                          147.50.207.0/24 maxlen: 24
                          184.82.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 15:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9608 (0x2588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Aug 26 10:19:19 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68ad8a27-a099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:b0:d7:e7:d0:15:30:2a:e7:07:3c:9d:ff:
                    6e:bf:55:e1:97:66:c5:5e:b9:ff:52:5b:ca:42:ac:
                    b3:89:74:08:bb:44:92:d3:92:98:bb:9a:11:68:89:
                    89:ed:49:c5:63:11:17:ff:50:20:e4:b7:99:7a:f3:
                    aa:4d:31:9b:33:1d:1e:d1:2a:9a:bf:68:59:6e:bc:
                    a6:4a:25:70:fc:67:2a:bc:01:93:f8:c1:4a:fb:1f:
                    ff:37:b8:da:2c:29:48:f0:a2:66:e2:71:c2:14:84:
                    20:d4:a7:46:d9:7e:5b:df:64:ae:c6:e9:09:35:78:
                    dd:5b:73:c6:23:b3:e4:53:ab:e5:54:dd:0a:6a:c8:
                    bf:e6:e4:72:1a:2e:88:13:01:48:2f:2e:21:b0:4c:
                    31:ea:d2:64:4a:cb:11:6d:d5:ae:fc:cf:b7:09:e9:
                    ed:c0:f5:e4:ce:31:cf:05:9f:b9:d1:1b:79:e3:99:
                    4d:37:bd:66:a5:f6:e7:59:2f:b7:32:c5:73:ab:35:
                    b3:03:58:b9:2c:ef:98:aa:c8:96:22:a7:a8:f6:8e:
                    f9:81:54:80:2a:28:de:52:d4:c7:fb:fa:f3:68:97:
                    16:b5:79:06:25:98:9b:0c:86:66:89:3c:07:db:0d:
                    1b:20:7d:c3:f2:1a:f0:72:4a:73:42:e4:07:44:34:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BA:BD:D1:86:8E:B8:D7:C6:B9:16:46:D4:32:95:D4:B1:F9:02:8D
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B6B65E76852411EFA67F8144C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.80.0/24
                  147.50.207.0/24
                  184.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:6d:d6:65:fe:c5:74:12:b4:bd:86:41:48:5f:ce:c1:55:
         53:cc:7f:2f:40:1c:fe:13:db:54:77:bf:0b:5e:1b:6a:a1:02:
         3a:38:58:5c:be:ac:a4:4c:86:d1:31:c9:f8:14:ef:a3:4f:f5:
         13:7f:a9:94:9d:94:e1:e0:e0:fc:d2:d7:cc:ea:1c:14:6e:0f:
         b0:54:68:3c:f7:6e:29:1f:29:e3:d6:b8:42:47:a0:d0:c1:a8:
         ff:7e:0b:ee:8d:72:41:f2:59:9c:79:70:2a:b4:84:37:59:0a:
         fa:df:98:07:bd:fd:c4:ce:8e:53:01:1d:91:3b:35:3b:fd:ba:
         05:39:e5:6a:10:b0:c2:96:b6:3a:4c:d9:68:db:85:9d:fa:c5:
         d2:39:46:0e:86:75:08:d0:46:2e:ab:ff:d5:d7:89:36:56:9b:
         20:be:5d:0e:d5:1f:87:af:d3:84:3a:b9:83:c8:31:27:aa:9d:
         1c:9c:16:24:f2:cc:b0:38:97:71:1e:cc:47:ed:41:db:f2:04:
         64:07:ef:ac:f6:6c:f5:91:5d:11:99:83:bc:2e:87:36:69:b6:
         6b:fa:c6:d4:c2:ec:52:f0:01:7d:e5:74:cb:90:a0:0e:c6:b2:
         10:ff:08:f6:87:cc:31:eb:11:de:49:87:b7:08:88:e7:63:04:
         50:09:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:36:48 2025 by rpki-client