Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A15115E6DF3E11EC83CCFE1EC4F9AE02.roa
File:                     A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          abj/lLGFaHcnznksM80abqsRFzwo6V6mDWUcL5ZKF2Y=
Subject key identifier:   D7:1E:51:FA:61:21:AA:B8:6C:9F:E1:3B:34:7F:1D:FF:52:E5:0E:F3
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0494
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A15115E6DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:26 +0000
ROA not before:           Wed 27 Aug 2025 01:05:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140662
IP address blocks:        147.50.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59d6-458f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:d4:0b:a3:84:10:2b:e4:18:d2:8f:b8:70:
                    4b:5c:ff:2e:d2:ef:df:74:61:46:ee:bc:0d:a0:a8:
                    34:cc:5d:3d:b2:12:aa:c7:0f:af:3f:99:a1:86:8b:
                    bf:90:ea:18:a6:8c:87:5a:71:e1:55:d6:1d:77:82:
                    51:5f:e8:6d:22:47:3a:e6:2b:74:4a:db:4b:20:dc:
                    fa:50:6f:aa:92:8c:b8:cd:d8:78:41:72:ed:8f:f1:
                    0b:e7:43:b3:95:88:ce:bf:ff:c6:3f:ea:2f:19:f9:
                    17:12:5d:40:b1:21:35:88:b8:1d:76:57:11:3f:16:
                    42:e1:27:64:e4:63:e1:fe:0b:fc:0c:a9:96:01:83:
                    af:40:fe:82:17:fa:fe:17:99:56:3a:a4:97:19:e1:
                    6a:cd:10:e9:de:6b:0c:a4:d3:95:e3:89:e0:d4:94:
                    49:7a:ff:54:4f:01:13:d2:a1:9b:79:d8:c0:e9:e6:
                    f9:6c:55:6d:1e:e2:56:55:7b:33:e3:36:f0:ca:44:
                    50:3e:35:b5:62:0a:43:d5:1e:1b:6d:74:80:bf:be:
                    c7:4e:41:3f:36:4d:54:6d:a7:74:08:90:72:b4:4a:
                    d7:c6:79:80:ab:5d:f1:6e:48:f2:6f:07:79:2f:03:
                    59:e6:d0:e7:0b:c0:15:ed:27:e8:18:f7:b2:a2:c9:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1E:51:FA:61:21:AA:B8:6C:9F:E1:3B:34:7F:1D:FF:52:E5:0E:F3
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A15115E6DF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:74:19:34:de:4d:4a:62:39:27:70:b4:47:87:70:8a:a4:b8:
         a8:81:d1:77:c4:82:c7:d2:f1:02:36:be:78:ea:49:13:70:60:
         f8:2f:27:a5:77:61:2d:4a:1a:f9:76:c8:ba:c9:1d:19:70:59:
         fa:51:8c:89:a9:42:37:09:4c:97:bb:9e:ae:11:00:c3:5b:71:
         63:20:6b:2d:e6:46:a9:26:c7:c4:17:5c:51:03:a6:58:6e:5c:
         9e:84:65:ba:55:e4:41:00:f6:7a:c6:af:9f:c8:a2:88:e9:47:
         a8:97:5a:f9:fa:40:72:7b:ba:09:dc:5a:70:7f:bc:01:d0:c0:
         b4:40:15:eb:b4:69:07:5e:a7:f2:24:ae:dd:88:00:56:68:89:
         e0:b5:dd:01:4b:ce:1c:da:f2:ee:0a:a2:4c:2d:72:36:34:24:
         b3:57:72:ad:ed:9a:04:7b:3b:ea:a8:03:bc:3c:f1:b0:f3:c6:
         2d:a6:5b:c8:6e:ac:d3:86:ae:cb:40:ca:52:8a:2c:a5:c5:bc:
         52:c2:85:d2:d1:24:6e:ca:d8:3d:cd:fc:8e:f2:7f:87:b3:62:
         66:5a:1a:5e:cc:a1:78:a3:14:08:36:77:0f:bf:a2:27:74:95:
         d6:15:b9:53:fc:76:ae:63:a6:e7:eb:e8:1a:55:24:93:2c:18:
         a1:51:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:11:04 2025 by rpki-client