Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7910D46A8A3D11F093ED1621C4F9AE02.roa
File:                     7910D46A8A3D11F093ED1621C4F9AE02.roa (raw, json)
Hash identifier:          /IB3o3jtrQNS0dXmJEMln723pedJqEUswhvOvTBoVys=
Subject key identifier:   7E:B2:ED:FC:D1:63:7C:19:B5:60:EA:42:42:B4:86:52:3D:62:0C:88
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       04B6
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7910D46A8A3D11F093ED1621C4F9AE02.roa
Signing time:             Fri 05 Sep 2025 09:48:28 +0000
ROA not before:           Fri 05 Sep 2025 09:48:28 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        113.20.40.0/22 maxlen: 22
                          113.20.48.0/22 maxlen: 22
                          113.20.52.0/22 maxlen: 22
                          113.20.56.0/22 maxlen: 22
                          223.29.128.0/22 maxlen: 22
                          223.29.132.0/22 maxlen: 22
                          223.29.136.0/22 maxlen: 22
                          223.29.140.0/22 maxlen: 22
                          223.29.144.0/22 maxlen: 22
                          223.29.148.0/22 maxlen: 22
                          223.29.152.0/22 maxlen: 22
                          223.29.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Sep  5 09:48:28 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68bab1eb-dfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:b2:4f:ad:bb:f6:96:d0:4d:a1:ee:9a:9e:
                    46:f4:ab:e6:79:5d:9e:3d:7a:a3:71:08:ea:50:80:
                    6c:5f:38:c4:87:a5:a9:cf:aa:e1:ab:37:8f:e5:a7:
                    9f:b1:b4:0c:d8:0d:21:d1:01:45:67:b6:33:ac:70:
                    df:53:58:5c:8c:aa:74:7e:64:91:b4:e8:bf:4a:1f:
                    48:4f:f7:c4:79:40:8e:26:f1:41:3e:36:43:7e:b2:
                    bc:df:2a:05:99:3d:d0:25:57:5a:b8:19:f4:13:93:
                    c8:b3:32:fa:2c:38:f5:fa:50:da:0f:43:2e:a0:8a:
                    27:1e:40:03:8a:4f:ea:a2:52:66:0f:2c:c8:1e:49:
                    6b:30:8b:b1:cd:78:e3:2f:83:70:09:19:0d:a1:2a:
                    9e:e8:41:c6:86:53:57:5b:ae:f3:03:dc:5e:9a:ad:
                    ef:77:e7:ea:ba:41:bb:d2:ce:9d:f1:6b:11:e6:1e:
                    d5:94:23:4c:8f:98:09:8e:8c:dd:5b:f4:d5:7e:6a:
                    2c:aa:ac:49:aa:55:5b:09:43:f7:f9:91:c9:53:2c:
                    40:74:ad:ec:bc:b3:f8:91:f3:ad:15:08:b9:ae:d7:
                    c9:b4:68:7a:d7:7c:22:ee:81:ed:b3:8a:d7:0c:33:
                    31:6b:0a:ee:fc:a0:e7:16:68:0d:42:24:e1:07:36:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:ED:FC:D1:63:7C:19:B5:60:EA:42:42:B4:86:52:3D:62:0C:88
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7910D46A8A3D11F093ED1621C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.40.0/22
                  113.20.48.0-113.20.59.255
                  223.29.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:18:9e:37:1e:2e:c4:0a:d0:d8:ac:06:c5:3a:58:e6:27:47:
         cc:04:68:87:e3:20:5a:f3:bb:0a:ee:b3:25:10:c9:74:8a:af:
         9d:69:20:93:f2:e1:99:94:72:e4:d2:40:54:85:8e:9e:90:a5:
         e7:78:7a:ef:16:e8:bd:b7:bc:66:3f:07:70:81:c7:b6:95:61:
         9f:b0:2b:1b:b6:a0:7c:cd:22:7b:18:5b:51:b9:71:fc:19:78:
         b9:0e:f8:e3:56:1f:32:31:61:30:3b:94:98:5d:bb:5a:b7:70:
         cc:21:5d:48:ac:7d:ef:75:dd:92:94:2d:9b:68:62:36:25:82:
         85:e1:a9:8c:d7:e2:a7:b0:29:aa:a9:27:3d:e8:bf:48:98:5c:
         a6:95:97:3c:db:e9:da:a5:89:fc:66:67:7a:b7:7c:dd:6e:f0:
         f5:80:73:2a:6e:b2:84:ee:e4:be:dd:73:a7:17:65:24:67:ef:
         9b:00:1f:3d:9a:09:90:46:0d:98:64:51:4b:9e:5a:f0:55:e3:
         44:54:ab:17:b5:1e:a7:61:f9:4b:36:29:45:fa:81:db:06:2b:
         1a:00:45:d2:e5:86:b6:0a:b5:d5:e7:ce:37:68:ed:1e:90:98:
         51:92:5f:24:2c:c5:3d:52:3b:96:78:c0:c3:8f:eb:bf:0f:fb:
         74:67:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:05:36 2025 by rpki-client