Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
File:                     619B0B285AE611E781C33D7CC4F9AE02.roa (raw, json)
Hash identifier:          zpxaNitqt84GE0AA0tEhFnXbQQVqt2sfIOkbeduHylA=
Subject key identifier:   AC:36:CB:EC:5A:80:7C:C7:DB:14:E8:F8:46:4C:1D:03:46:21:C2:BB
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1C4D
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 16:34:45 +0000
ROA not before:           Thu 28 Aug 2025 16:34:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        203.33.22.0/24 maxlen: 24
                          2001:df3:ba00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7245 (0x1c4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Aug 28 16:34:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b08525-e312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:3a:c6:46:a1:20:9d:08:7c:ba:84:36:b2:
                    40:08:ba:ca:19:75:c5:d3:a2:6b:ea:4c:96:a3:97:
                    77:f4:f4:3e:b2:e2:04:45:50:f7:f5:0e:61:db:68:
                    b7:36:50:95:9d:97:0f:2e:15:9c:aa:b0:4c:99:d7:
                    98:d7:fa:7b:64:ec:d3:e9:61:ff:9f:de:0a:87:7a:
                    99:af:a9:0a:77:b7:1c:fc:8b:e0:2f:67:76:03:5a:
                    a8:fd:23:ba:d1:c4:8e:94:45:f8:91:7e:18:d4:e4:
                    5e:59:00:98:41:98:0a:c3:d9:35:1f:a2:54:cc:ae:
                    a5:54:36:70:ba:40:63:47:dc:2f:16:f0:b8:95:b9:
                    09:2e:81:97:d7:c5:51:5c:9d:ab:15:67:5d:d0:eb:
                    ec:bc:d7:74:5b:4d:12:ff:d3:33:9b:01:7e:72:91:
                    67:29:de:0d:55:e1:f1:93:4e:22:fd:65:58:1a:14:
                    8c:18:fe:4f:06:2f:6c:e4:37:a5:da:c1:0f:df:ab:
                    4c:05:e9:c6:81:96:b9:67:50:fd:aa:92:02:40:95:
                    60:a4:6c:06:df:e7:f3:1f:bd:fb:16:ad:b6:07:43:
                    59:e3:c8:05:87:aa:9f:5e:38:3a:57:69:bf:30:34:
                    35:4f:7c:96:ac:f1:6b:3f:61:d5:67:8c:a1:eb:5d:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:CB:EC:5A:80:7C:C7:DB:14:E8:F8:46:4C:1D:03:46:21:C2:BB
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.22.0/24
                IPv6:
                  2001:df3:ba00::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:b0:28:9d:49:c9:86:9c:40:4b:f2:83:40:91:94:05:1e:66:
         25:6c:0d:61:0d:1b:26:41:87:5e:11:bb:24:a5:17:71:31:67:
         f2:77:36:64:8b:f3:ae:00:0b:a8:47:e9:4f:06:d6:35:e9:96:
         b3:be:64:9d:09:d2:95:55:74:58:79:a1:36:2b:14:62:be:fe:
         ba:db:8c:9f:76:e7:e8:ab:00:d3:fd:6f:73:14:eb:d4:92:b2:
         1a:ce:62:b5:99:17:d3:14:72:4c:fb:8d:1d:00:de:6a:d5:f8:
         f7:32:c2:9e:f4:0f:84:59:7c:90:e4:b6:61:f6:07:06:5d:80:
         64:e5:8e:54:96:eb:14:9f:83:54:30:b4:da:a4:7f:28:c5:16:
         4a:56:7f:76:da:e1:92:2d:51:cc:3f:19:d4:3c:ad:91:8f:4c:
         b3:d1:12:0b:15:d6:92:0a:68:cd:78:48:93:6f:8c:ea:a9:80:
         21:bd:6a:65:fe:c0:c6:0c:6f:c3:dc:83:af:88:d0:03:7d:52:
         cf:a4:42:e7:6f:20:62:31:70:b7:b8:8e:2f:47:f9:3d:28:61:
         38:3c:0a:16:e4:58:e6:35:7f:25:ca:9f:b7:73:bc:7d:7a:12:
         e3:46:a8:b8:25:83:1b:87:ea:e9:a3:be:aa:fb:ed:a2:70:70:
         a0:a5:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:14:01 2025 by rpki-client