Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa
File:                     F539311C7DA011F08A71610EC4F9AE02.roa (raw, json)
Hash identifier:          sGFVeVlQiEcMhmkTknSI/d7oBH7XwuBkFL1jG9NNeJQ=
Subject key identifier:   4B:B4:03:37:4A:47:C4:FC:63:63:D1:09:4D:99:A2:26:3B:8C:5D:40
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       0847
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa
Signing time:             Thu 04 Sep 2025 21:31:55 +0000
ROA not before:           Thu 04 Sep 2025 21:31:55 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134202
IP address blocks:        61.4.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Sep  4 21:31:55 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ba054b-8390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:f3:c6:d4:53:90:c9:82:ed:c8:8f:01:61:
                    fc:f9:ac:a6:a7:0a:ed:a2:c4:d7:04:f8:eb:a3:8f:
                    f3:22:68:1b:cd:1b:ef:f4:51:81:02:b3:6d:8b:57:
                    1f:a7:7a:b3:58:a9:84:08:d1:44:a2:78:0a:f7:ea:
                    d5:b7:8d:29:d4:c7:ad:4b:8e:05:e4:42:a8:eb:9d:
                    28:af:eb:ca:dc:54:53:f4:0f:0b:9e:b5:d7:5d:aa:
                    66:57:12:b0:88:d8:8a:7e:49:8f:ff:6a:79:f3:a0:
                    ef:dd:1a:77:db:41:c6:1b:a6:78:73:d5:b3:0a:12:
                    2f:3e:f2:3e:23:6d:c2:3f:0e:5d:a7:d4:3d:43:a0:
                    02:ba:62:89:0b:90:2a:d1:e1:6e:1e:8d:c2:7d:a9:
                    66:8f:ac:6f:85:00:a7:1e:0f:62:6b:49:5b:7f:f2:
                    c0:f1:d5:6e:a5:78:ae:c7:f7:0b:a4:d1:2e:7f:d1:
                    29:5f:a2:8d:f4:06:5c:2b:e1:1b:3b:27:c6:d4:96:
                    65:33:db:3b:0e:1a:52:22:8c:fd:5f:0f:a2:9e:b2:
                    cb:ec:db:d7:3c:06:3a:c7:7a:3c:b6:a0:92:a7:33:
                    b2:25:1b:82:7c:8a:20:07:0e:ee:33:fa:b2:36:30:
                    26:d8:8c:5a:85:43:ec:15:a4:03:36:dd:a9:90:b6:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B4:03:37:4A:47:C4:FC:63:63:D1:09:4D:99:A2:26:3B:8C:5D:40
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.4.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:fd:74:50:ff:41:29:29:8c:3f:00:92:07:14:b0:ee:c6:
         6f:71:a0:a4:5a:ed:8d:d5:b2:09:35:84:af:b6:7b:cf:f5:b9:
         25:74:d7:85:43:24:29:11:bf:9d:b7:24:33:d1:29:71:91:be:
         3b:d1:c3:be:2f:03:d7:cc:4e:ba:7b:fa:e5:6b:d5:cb:ec:29:
         d6:9b:d4:71:61:a1:14:a0:0f:f8:33:63:63:3d:0a:6d:c9:e5:
         45:ce:5a:ef:98:ee:f9:0a:a2:f3:cf:e8:8b:fc:01:0b:0f:07:
         b8:b0:87:56:e5:3a:e1:bc:0f:3d:3b:a8:7c:08:f1:6f:58:cf:
         37:02:25:2a:ce:5e:26:d9:c7:d8:ed:d7:65:e4:70:64:eb:b1:
         81:4c:9c:97:1f:da:11:a1:12:e6:d9:42:0a:da:63:d3:95:76:
         e2:92:80:d9:96:70:d7:74:15:e3:61:50:96:7d:71:fc:ab:a3:
         10:4b:4e:0b:36:49:04:2f:58:7b:93:f5:ce:aa:0f:93:3a:93:
         0c:49:8e:80:ce:bb:81:c4:6c:e6:51:52:ff:d6:f3:86:cf:22:
         41:5f:e8:05:d7:a3:25:c5:11:e4:7d:08:52:2f:e7:69:f5:f3:
         00:7f:3d:a6:c3:5e:2a:cc:04:ef:4e:ff:f1:1e:26:db:07:a9:
         18:b8:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 14:39:39 2025 by rpki-client