Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/7196A634B0F311E5AB30F151C4F9AE02.roa
File:                     7196A634B0F311E5AB30F151C4F9AE02.roa (raw, json)
Hash identifier:          SLJ4bVw8/Sq7sVlq+NvVTRm8ROvRMC4fmrNcUaFRRzw=
Subject key identifier:   98:93:FA:CE:D2:A4:61:86:D7:72:AD:99:97:39:E3:76:16:28:0D:9E
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2856
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/7196A634B0F311E5AB30F151C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 16:03:51 +0000
ROA not before:           Tue 02 Sep 2025 16:03:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     56299
IP address blocks:        125.5.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 15:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10326 (0x2856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Sep  2 16:03:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b71567-0e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:79:67:fb:b1:38:55:7d:6d:5e:8f:bf:56:
                    13:28:d0:d3:76:7b:e2:4d:62:92:8d:5f:21:8b:80:
                    18:58:4d:97:a7:84:ee:c9:47:ca:f1:3f:a5:db:4d:
                    f8:d4:a0:c8:a0:0f:0e:dc:d0:49:9a:12:e0:cc:c6:
                    39:da:7b:c8:5b:e8:26:31:a9:ee:e3:dc:51:9c:9c:
                    c7:9a:74:97:9d:71:5b:13:6a:81:d7:a2:a0:b5:f8:
                    f9:5b:b2:fb:ff:ec:a9:c9:84:c0:da:97:dd:ce:a9:
                    af:6d:fa:d2:61:be:95:1b:41:c9:1c:06:d9:95:e8:
                    cf:d0:1a:87:9b:ab:1e:8f:33:11:20:c5:4e:9d:b1:
                    03:0e:8e:f5:d3:76:6a:47:89:c8:62:3a:30:b0:45:
                    24:c2:35:07:40:c1:99:cf:9f:6a:bb:ea:1f:ea:91:
                    d7:68:a4:fa:45:83:97:05:77:21:7e:d7:c4:f7:d0:
                    06:ad:0e:a4:74:c8:76:46:7d:98:af:9b:ee:e8:a9:
                    6a:96:86:1a:1b:d6:2c:40:68:46:49:2d:9f:fa:ee:
                    58:02:85:c9:e5:aa:c3:a8:3d:da:72:74:9f:8c:4f:
                    f6:f1:6e:dd:8a:da:4f:cd:c3:86:8f:41:f3:a8:5e:
                    4e:93:25:1e:e4:6e:04:e2:16:8b:3a:84:5b:81:46:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:93:FA:CE:D2:A4:61:86:D7:72:AD:99:97:39:E3:76:16:28:0D:9E
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/7196A634B0F311E5AB30F151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.5.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:65:33:1d:03:2a:ae:c2:22:55:a9:9f:7e:6a:4a:5a:a5:
         e2:2d:48:d2:25:bc:94:76:fc:d6:02:fe:99:dc:8a:30:41:ec:
         0e:5e:90:09:eb:f2:b8:ef:aa:07:41:e9:30:3f:54:ef:aa:1a:
         da:d7:2b:ff:a3:df:25:a1:0c:fc:4a:87:9e:cb:a9:ae:6d:48:
         85:c1:60:15:6d:d0:d8:26:75:97:02:ce:23:2b:a0:63:84:a7:
         58:f9:0e:36:93:67:ba:4e:19:31:af:de:e0:53:a9:f7:9f:21:
         35:8a:f3:3d:80:2d:70:80:da:50:d9:ed:46:30:7e:1c:f6:de:
         8d:10:ca:2f:8e:75:56:4d:f0:35:18:04:a3:04:ef:87:ef:b7:
         3f:93:3a:8f:88:1a:cb:33:aa:c8:b8:18:bf:a4:6c:2c:0e:f8:
         64:1e:cf:65:a6:0d:d7:e5:6d:fb:58:49:c3:65:79:a9:01:44:
         d5:06:cf:73:bf:0f:17:1e:e7:8d:3c:e8:98:b9:35:73:2d:76:
         a1:89:dd:5c:c9:ec:16:d1:2c:5a:21:e6:da:eb:bc:7a:9d:90:
         82:92:d6:57:06:ad:1c:b8:ef:19:7c:96:99:43:ec:57:6f:e7:
         8a:0a:f7:aa:6d:43:e4:59:8f:3d:d2:48:a7:fa:4f:3b:71:8b:
         1a:a1:ac:b6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF
MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3MTU2Ny0wZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynJ5Z/uxOFV9bV6Pv1YTKNDTdnviTWKSjV8hi4AYWE2Xp4TuyUfK8T+l2034
1KDIoA8O3NBJmhLgzMY52nvIW+gmManu49xRnJzHmnSXnXFbE2qB16Kgtfj5W7L7
/+ypyYTA2pfdzqmvbfrSYb6VG0HJHAbZlejP0BqHm6sejzMRIMVOnbEDDo7103Zq
R4nIYjowsEUkwjUHQMGZz59qu+of6pHXaKT6RYOXBXchftfE99AGrQ6kdMh2Rn2Y
r5vu6KlqloYaG9YsQGhGSS2f+u5YAoXJ5arDqD3acnSfjE/28W7ditpPzcOGj0Hz
qF5OkyUe5G4E4haLOoRbgUaqiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJiT+s7S
pGGG13KtmZc543YWKA2eMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG
QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvNzE5NkE2MzRC
MEYzMTFFNUFCMzBGMTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB9BQcwDQYJKoZIhvcNAQELBQADggEBAI6qZTMdAyquwiJV
qZ9+akpapeItSNIlvJR2/NYC/pncijBB7A5ekAnr8rjvqgdB6TA/VO+qGtrXK/+j
3yWhDPxKh57Lqa5tSIXBYBVt0NgmdZcCziMroGOEp1j5DjaTZ7pOGTGv3uBTqfef
ITWK8z2ALXCA2lDZ7UYwfhz23o0Qyi+OdVZN8DUYBKME74fvtz+TOo+IGsszqsi4
GL+kbCwO+GQez2WmDdflbftYScNleakBRNUGz3O/Dxce54086Ji5NXMtdqGJ3VzJ
7BbRLFoh5trrvHqdkIKS1lcGrRy47xl8lplD7Fdv54oK96ptQ+RZjz3SSKf6Tztx
ixqhrLY=
-----END CERTIFICATE-----
Generated at Sat Sep 6 23:40:10 2025 by rpki-client