Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/5DF9C3AA8CD411F0940A1C19C4F9AE02.roa
File:                     5DF9C3AA8CD411F0940A1C19C4F9AE02.roa (raw, json)
Hash identifier:          awc5JlpvJTr7m5xsi1U56Go7cHXjlV8DTb49ZtxjcIk=
Subject key identifier:   C3:5F:62:FA:E3:2A:E8:F2:23:1F:DF:F1:AF:D3:A7:03:E8:91:69:40
Certificate issuer:       /CN=A9125026/serialNumber=518F677AE726A4BC378BF1EEFDA498DE9419FAC3
Certificate serial:       51
Authority key identifier: 51:8F:67:7A:E7:26:A4:BC:37:8B:F1:EE:FD:A4:98:DE:94:19:FA:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/5DF9C3AA8CD411F0940A1C19C4F9AE02.roa
Signing time:             Mon 08 Sep 2025 16:53:39 +0000
ROA not before:           Mon 08 Sep 2025 16:53:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136396
IP address blocks:        163.227.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl
                          rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125026, serialNumber=518F677AE726A4BC378BF1EEFDA498DE9419FAC3
        Validity
            Not Before: Sep  8 16:53:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68bf0a12-3b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:dc:96:9c:97:22:02:c5:9f:7c:dd:48:b0:
                    13:3b:cc:33:77:1c:69:39:23:ca:eb:2f:65:98:41:
                    f2:12:94:49:04:25:b1:a8:64:ba:3f:41:74:e3:e3:
                    4c:ea:32:c4:83:8b:c8:ab:6b:02:fd:40:d3:29:eb:
                    08:a6:a6:f8:f5:7b:85:85:f4:61:f0:51:8c:b9:4b:
                    6c:b7:c7:c2:f0:ba:9e:8f:91:c0:77:60:ca:d8:05:
                    b3:af:4b:98:f9:ad:2a:67:78:e9:60:1b:59:ff:0a:
                    65:40:c0:21:5d:c7:06:7e:8a:c8:bc:d6:44:35:df:
                    05:04:6b:62:ef:3d:1a:41:3e:fd:5a:4f:b3:2c:61:
                    8d:19:f2:44:d0:31:bb:1e:9e:d8:5b:03:9d:7a:e9:
                    2e:1e:e6:d8:2b:ad:b0:79:c7:ac:29:24:84:33:fc:
                    56:59:89:ab:66:07:e7:91:70:87:9f:e3:3a:ac:dd:
                    5d:f2:95:f2:a4:cc:33:aa:4b:2b:64:8f:4d:e2:94:
                    5c:c1:4b:3f:aa:4e:7c:fe:8a:74:d9:d9:98:b1:8c:
                    dc:a3:7c:8a:ae:82:c7:03:44:7d:a6:21:e8:34:3d:
                    09:03:d3:0d:b0:ff:c2:dc:b9:51:1b:b6:6f:cb:8a:
                    1e:95:a4:06:08:f4:48:9d:3f:a5:d1:8b:6b:b9:c3:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:62:FA:E3:2A:E8:F2:23:1F:DF:F1:AF:D3:A7:03:E8:91:69:40
            X509v3 Authority Key Identifier:
                keyid:51:8F:67:7A:E7:26:A4:BC:37:8B:F1:EE:FD:A4:98:DE:94:19:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/UY9neucmpLw3i_Hu_aSY3pQZ-sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UY9neucmpLw3i_Hu_aSY3pQZ-sM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125026/EBC2CF4A168E11F084F93477C4F9AE02/5DF9C3AA8CD411F0940A1C19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:8b:e3:c0:6f:f3:3b:f8:c4:28:16:27:9f:ed:9f:0b:46:4e:
         d6:5e:fb:5a:9f:9d:47:45:ff:e0:cb:6b:5c:dd:15:cd:4a:8b:
         9f:3b:e9:5c:6e:eb:e8:85:a7:92:3e:37:a1:d8:24:97:f3:29:
         e5:f6:23:ae:2e:d8:57:e9:9d:fb:a5:17:7e:3b:08:f3:1e:34:
         11:5c:be:8b:db:7f:bf:58:c1:79:00:89:40:f0:5a:5b:9d:a2:
         9e:12:44:87:8f:5c:4c:39:2c:2e:0a:f0:c4:94:a3:59:45:02:
         81:44:8c:6c:be:bb:c0:9c:62:5f:42:6d:9f:1c:91:4d:b5:fc:
         f8:1d:fc:24:ce:5e:7a:44:5a:af:aa:66:f1:c4:a8:8e:dc:21:
         ec:bb:37:73:98:67:3e:37:86:4a:d0:7f:34:57:af:42:d2:2f:
         a4:bc:38:d5:b1:f0:71:72:ef:24:08:91:58:2d:fe:c7:70:40:
         01:e1:b8:28:30:d4:08:c5:fb:36:cb:e3:8c:ca:46:88:fa:29:
         67:31:26:3c:a2:d8:9c:76:83:bf:b7:6e:f4:37:51:4a:8c:17:
         ef:02:31:3b:76:4b:e7:99:e9:6d:90:64:9f:d3:56:92:d6:c5:
         07:c7:d0:2a:42:f6:0f:92:af:46:db:70:bc:a5:f7:ac:21:17:
         2f:76:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:45:53 2025 by rpki-client