Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
File:                     605B17F8E19611EC8AD57C6CC4F9AE02.roa (raw, json)
Hash identifier:          VwZyYoVqHuf3S49y3Bcz0CVVUxFRuftft76N8t4N7DA=
Subject key identifier:   45:57:D7:B2:9E:D8:12:27:80:92:77:48:6B:6E:59:DF:34:36:32:E8
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0654
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:44 +0000
ROA not before:           Wed 27 Aug 2025 01:05:44 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137392
IP address blocks:        203.172.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:44 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e7-535f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:12:51:c5:6e:ae:15:d4:bc:1e:2f:33:d0:
                    0e:df:80:c0:eb:83:7e:c7:33:0d:ba:2d:a2:55:bb:
                    c1:08:5c:e0:86:0c:76:ee:64:54:e2:ec:c2:f4:15:
                    e1:1b:7a:0e:27:64:e8:e8:7e:e8:4a:d8:2f:af:78:
                    b2:24:82:3e:26:ae:c4:58:ea:4d:29:67:83:41:56:
                    e9:0a:90:d2:aa:fa:20:0d:ae:74:df:c9:2a:3d:d6:
                    9e:2c:30:46:9f:42:bb:ff:da:71:f1:52:6c:a8:16:
                    57:ce:4d:da:d0:5f:b3:ab:33:31:3b:93:b5:a9:cd:
                    c6:fa:62:6b:1c:a2:36:1b:33:2e:b7:75:3c:21:96:
                    29:dd:b8:df:1e:70:85:c8:51:c7:f8:6f:98:db:ef:
                    07:b6:c2:6a:29:15:9d:73:1f:fb:7d:5f:a5:ee:b8:
                    13:dd:61:69:a7:50:90:34:2a:c0:7d:a9:3c:09:e1:
                    cb:a5:0f:cf:66:e5:20:f2:4f:70:b2:b4:71:d2:d5:
                    a3:4a:57:ee:62:38:46:38:fc:87:b7:76:f0:78:fa:
                    a2:1b:49:ab:5b:b1:42:b6:b8:dc:35:5f:f3:fb:63:
                    47:b1:7a:d2:ff:f7:64:79:30:15:12:3d:84:80:d5:
                    95:b5:68:b4:18:71:72:99:d5:19:cf:a1:f0:ff:4b:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:57:D7:B2:9E:D8:12:27:80:92:77:48:6B:6E:59:DF:34:36:32:E8
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.172.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:80:ed:1d:1d:7c:22:0d:06:d6:ca:28:eb:75:dc:4e:ef:
         34:34:cc:a7:2e:02:83:8c:df:c8:f6:68:f0:b5:3e:91:20:95:
         fd:3c:40:62:3c:aa:2e:b3:5c:af:9a:07:fc:d4:52:52:8d:c4:
         42:bf:64:43:aa:83:cd:8b:f0:11:20:ef:71:48:ef:ee:a3:2c:
         3b:e5:d8:27:77:9b:ab:f0:39:05:e2:dc:bf:cb:dd:b2:93:a6:
         3a:0b:40:c3:d7:36:10:83:99:31:95:75:85:4c:28:16:f5:d5:
         98:e0:a4:f2:a3:93:02:f3:af:00:38:4b:a6:76:8f:a1:75:75:
         f8:0a:09:cb:f7:34:f6:58:b7:ca:92:72:24:cd:a5:55:ab:9b:
         d0:2c:7c:db:ab:4d:89:e9:7d:cb:75:ce:2c:be:09:41:65:eb:
         f8:84:bf:f0:14:5e:4f:46:ba:ce:1b:7f:d5:62:be:89:ec:46:
         88:97:02:70:5a:f0:18:85:82:d9:db:c3:f6:0c:6c:9c:22:4a:
         65:43:aa:f8:cc:fd:03:4a:86:3c:65:fd:23:a5:85:f2:a9:65:
         a2:ed:3c:45:84:92:9e:19:a4:60:a7:f5:ca:3e:0c:3e:df:af:
         12:40:8f:e5:68:60:cd:49:3c:18:eb:18:cc:2b:9c:3a:74:b7:
         60:f1:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:15 2025 by rpki-client