Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa
File:                     9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          SFtqEei/cNuFxoRwcmV0ulAeh3eMTUDtIcuJGqQ9i50=
Subject key identifier:   03:4F:60:12:1A:BB:2E:E2:33:BF:5A:D6:4B:C2:4A:97:89:9B:88:E1
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       048F
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:21 +0000
ROA not before:           Wed 27 Aug 2025 01:05:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137545
IP address blocks:        147.50.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59d1-0693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:54:40:71:aa:5c:11:57:0e:5b:e4:10:97:
                    eb:a2:47:1f:18:bc:8a:fb:3c:37:86:33:31:5b:32:
                    39:7d:06:81:83:72:15:ec:42:0a:10:94:ce:20:18:
                    fe:8c:a7:74:93:3f:ec:51:03:80:81:17:18:95:64:
                    bc:cf:a1:36:54:2d:75:4f:41:ed:ee:0f:ff:f0:05:
                    00:37:59:c4:fb:9a:19:db:9a:28:24:da:4b:18:ff:
                    b5:0d:3f:fa:2e:5e:8e:50:c1:f5:08:c3:7b:03:a7:
                    5a:26:41:7a:ac:95:c3:c4:e9:be:df:34:1d:d2:b1:
                    0d:fc:fb:ac:1e:c7:00:4e:33:f8:75:82:b8:3d:f8:
                    c7:08:72:ae:37:1f:01:e5:d6:f6:be:92:b4:a1:39:
                    9c:9e:cd:06:61:c2:d8:47:ff:c9:8b:46:47:a3:7a:
                    ee:73:bb:ba:f8:08:de:d0:5c:e5:93:f2:a7:e7:da:
                    25:60:0a:0b:d7:89:75:45:b0:07:8c:c3:58:49:35:
                    a2:68:df:a2:b2:01:31:38:03:79:6d:01:01:71:ef:
                    56:63:99:d8:e1:ea:7c:2f:74:fd:64:22:9e:58:ba:
                    c1:8f:e4:67:42:d6:e4:4a:75:62:a2:af:8e:a2:06:
                    84:b6:b7:e0:b3:38:63:01:13:7b:be:65:6c:58:22:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:60:12:1A:BB:2E:E2:33:BF:5A:D6:4B:C2:4A:97:89:9B:88:E1
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:72:e9:e7:b7:85:dc:bc:ec:a5:e9:0b:5c:79:25:49:cc:
         b3:22:73:01:6c:45:40:50:43:21:98:a6:32:fe:ea:05:d0:df:
         18:8a:aa:c5:92:b9:85:68:d8:84:0e:8c:83:33:66:06:f1:88:
         f4:65:1f:18:25:79:31:6a:34:52:71:77:13:d0:ac:8b:a0:6a:
         1f:bf:5d:7c:78:45:04:93:09:71:fd:c5:9f:ad:03:0e:4f:dd:
         01:bd:af:33:73:93:9d:bd:0a:24:38:6e:4f:f4:19:5a:cf:2d:
         01:0a:ff:b7:a2:be:85:ab:4e:f4:6b:d7:b6:29:aa:c2:2e:ef:
         6b:3e:a2:ca:43:c4:5f:f2:69:8f:4e:a0:aa:bd:49:3e:67:9b:
         bd:c6:44:71:08:3a:e2:ad:12:f4:fc:0a:ec:1a:e7:85:a9:81:
         5b:d2:ad:59:c2:32:55:ad:69:8d:70:11:dd:a0:15:b8:b4:40:
         5f:a9:73:04:7a:26:c6:31:d9:9f:5c:9c:69:bf:87:93:29:32:
         64:87:5c:e2:d4:02:72:80:d8:f2:90:fb:cf:ed:a3:4f:c8:1a:
         e4:a2:05:69:1b:bc:86:fd:ac:f2:a3:e6:c0:68:64:d4:c5:20:
         c5:5c:fa:a8:03:04:3e:b2:fa:f6:3e:62:99:d0:f3:23:32:48:
         0f:11:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:11:03 2025 by rpki-client