Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/5079D4A2ACA011E8BA30FF16C4F9AE02.roa
File:                     5079D4A2ACA011E8BA30FF16C4F9AE02.roa (raw, json)
Hash identifier:          iaZWlKC0BRK6sTPEnHrhdlX9WtoZdkozdrPT67pGJDY=
Subject key identifier:   E3:0D:90:E7:DD:27:00:05:2A:8A:28:C0:45:A1:1D:97:82:BF:CD:A4
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7DA5
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/5079D4A2ACA011E8BA30FF16C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 17:36:17 +0000
ROA not before:           Tue 02 Sep 2025 17:36:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     12008
IP address blocks:        202.68.78.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 17:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32165 (0x7da5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep  2 17:36:17 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b72b11-51b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:16:7f:7d:d3:44:ca:d7:31:86:70:af:d2:
                    04:e4:65:21:5b:b1:59:67:bc:53:56:17:75:01:b4:
                    4b:45:b8:13:74:6c:91:87:cf:21:e9:2c:14:58:a1:
                    d0:ff:04:8f:4c:4e:2f:1c:d6:61:c4:69:a7:04:2a:
                    57:1c:59:fd:de:da:e4:5c:7c:b6:58:09:d8:7e:09:
                    ec:98:5b:40:a1:4f:42:35:54:44:b3:dd:f3:26:45:
                    d1:8e:05:cf:95:28:bd:dd:aa:43:11:a5:54:13:cd:
                    ef:71:8e:e0:01:70:12:9d:bb:6f:24:4a:b5:d9:27:
                    3e:63:3c:5d:05:0b:71:c1:56:2a:cc:86:f3:f1:df:
                    64:24:8f:7e:03:ce:f2:0f:00:82:78:ef:55:b0:22:
                    d1:c6:33:d7:10:5b:2e:8b:dd:96:0e:0a:29:b0:28:
                    5d:fd:e3:28:c7:c3:b3:f7:85:95:07:ae:cf:36:83:
                    cc:b4:16:2f:42:d4:e2:21:f2:8c:5b:46:45:f1:db:
                    58:62:c2:d3:84:d9:84:be:e7:f1:16:dc:13:9f:80:
                    81:d5:5d:94:99:2a:3d:8a:89:41:94:c4:6c:71:05:
                    7a:63:89:0a:14:b7:e1:28:78:a8:f3:a3:03:df:c7:
                    01:b8:ae:ee:9f:0b:67:b9:b2:61:a6:36:d7:e7:a7:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:90:E7:DD:27:00:05:2A:8A:28:C0:45:A1:1D:97:82:BF:CD:A4
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/5079D4A2ACA011E8BA30FF16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.68.78.192/26

    Signature Algorithm: sha256WithRSAEncryption
         10:63:7b:91:89:93:13:af:42:ad:ad:b5:ef:3d:64:28:5f:de:
         af:b5:98:64:0a:78:34:9b:d6:ad:52:27:9d:c3:b3:59:f1:51:
         a9:cc:19:8d:f0:af:8f:e9:44:a8:cd:df:bb:2c:be:7f:64:8a:
         d4:60:6f:0a:8e:97:1d:31:4d:94:a7:a9:4e:ab:00:87:94:de:
         74:82:c3:c0:90:b7:a2:9d:0e:af:a4:b9:44:30:75:d8:13:5a:
         db:43:18:d6:3a:b6:75:3f:53:08:99:5b:c1:0b:1c:3c:78:43:
         61:b6:16:fc:fe:06:e0:46:69:b0:dc:d8:1d:13:c6:be:94:86:
         74:f6:12:02:80:a8:ce:50:90:f5:59:aa:d8:24:90:de:cf:2f:
         bb:c7:50:62:9a:75:4e:67:61:03:4b:7a:e1:bd:3e:c8:50:a9:
         df:4d:e5:f4:0c:55:3c:9f:60:1b:18:6a:ac:1e:a6:2b:36:3c:
         ea:a3:f4:e5:59:e9:c9:ef:f9:cf:f4:7d:f1:2a:5c:0d:61:6d:
         72:1f:85:3d:7a:be:a6:cf:02:3b:c6:f6:ad:bf:65:f5:83:a0:
         a7:b6:0f:09:7b:f7:8d:0c:93:1b:e5:6f:df:91:6e:cc:a1:02:
         bb:e2:5a:34:54:bf:61:d1:03:40:64:04:4c:36:f7:4f:c5:19:
         fd:ab:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:39:53 2025 by rpki-client