Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1DFB74B4693511F098DA961FC4F9AE02.roa
File:                     1DFB74B4693511F098DA961FC4F9AE02.roa (raw, json)
Hash identifier:          P1znYhl/eQ/i09BqcFgYUncqu9PsKuk8MGDDrGmikWA=
Subject key identifier:   4C:C1:F3:6E:C5:79:33:4E:9F:BD:85:4A:00:17:5C:CF:9F:38:C1:65
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0497
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1DFB74B4693511F098DA961FC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:29 +0000
ROA not before:           Wed 27 Aug 2025 01:05:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154088
IP address blocks:        147.50.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:28 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59d8-93b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:22:97:29:5a:31:5e:47:df:d2:8b:d4:24:
                    b8:26:a6:15:d3:93:34:be:13:ce:11:6e:c6:92:b6:
                    05:3c:90:a4:69:68:86:37:2b:b9:a8:81:aa:6a:07:
                    f4:ea:d4:69:8f:ce:aa:8b:e2:af:dd:52:e6:46:37:
                    16:6d:96:64:5e:b3:51:fa:ca:9e:03:af:96:9f:d1:
                    63:06:e3:bc:dc:6b:6d:c2:cc:19:bc:74:5e:9e:4c:
                    75:86:a6:c6:61:31:e2:f2:e1:ab:51:73:6b:6d:35:
                    35:14:9a:43:01:51:cf:99:1e:35:16:1f:d9:30:de:
                    f1:78:bc:67:3f:c5:21:1c:62:f7:21:15:3c:4e:b7:
                    ee:0b:5e:27:e8:df:51:37:0a:1e:4a:0a:60:38:1d:
                    1c:3d:8c:db:94:52:4e:e4:98:c4:ff:a3:e4:3b:4c:
                    2c:0a:0d:63:18:70:84:5e:13:db:6c:63:b7:28:8a:
                    8c:75:8a:74:b4:ee:df:a0:cf:3e:df:f5:62:5f:d9:
                    a6:78:3c:98:91:80:28:7e:7e:e1:c0:4e:cb:56:95:
                    4a:c3:ee:6b:a3:2a:1d:2f:a8:d4:14:6a:21:46:1e:
                    46:59:53:22:4e:9b:ab:cc:20:ec:43:70:75:c1:94:
                    23:90:4b:5b:4c:a7:4c:ed:d4:b4:38:fd:02:ac:4e:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:F3:6E:C5:79:33:4E:9F:BD:85:4A:00:17:5C:CF:9F:38:C1:65
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1DFB74B4693511F098DA961FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:50:87:ec:72:78:c4:00:7a:07:db:0d:f4:61:75:2c:7a:6b:
         a9:7d:28:eb:a9:f8:91:39:59:f9:9a:73:de:f4:68:12:e6:1a:
         61:54:e0:c0:dd:4b:c2:3b:be:e1:a5:d7:23:e7:6b:8d:5f:1d:
         7a:54:7b:2d:80:ee:a5:6d:58:59:4b:57:c4:35:7d:12:f5:c4:
         ef:1d:87:7a:9f:3b:dc:d7:55:36:c4:59:63:59:88:93:0e:19:
         ec:2f:ac:9e:dc:b2:55:5b:7b:c8:18:54:d3:83:68:56:c5:2d:
         e1:3a:0d:63:7c:34:8b:03:e1:44:fd:4e:24:1f:82:04:81:e5:
         d1:00:22:91:7b:55:f3:53:ca:6e:a0:4e:27:b6:cd:27:5d:1c:
         3e:a5:36:65:5b:7f:02:16:36:5a:97:c0:50:01:1b:5f:c7:3a:
         3f:54:7b:d6:1b:11:44:12:3a:5d:1a:51:79:5c:94:9d:72:4c:
         ed:14:63:a7:cf:14:7d:44:25:04:13:40:da:7a:14:54:11:67:
         03:93:dd:30:6d:2a:ac:06:fd:10:d8:f7:51:46:89:56:93:f6:
         7d:61:e9:53:91:5e:fe:2f:46:d1:60:99:49:0b:e0:29:17:55:
         43:06:96:d4:91:74:11:74:31:2f:3f:2d:3e:55:90:ad:85:c0:
         bf:d2:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:59:56 2025 by rpki-client