Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/73464EBCB0F311E5AB30F151C4F9AE02.roa
File:                     73464EBCB0F311E5AB30F151C4F9AE02.roa (raw, json)
Hash identifier:          c0iY9Lu0n3iaEM+4s2nui07Z/TqE/8KaUyZsMqUDCCQ=
Subject key identifier:   8A:1F:87:85:55:8F:F0:D1:DD:D0:86:02:2F:D5:74:0A:AF:FA:26:DB
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2857
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/73464EBCB0F311E5AB30F151C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 16:03:52 +0000
ROA not before:           Tue 02 Sep 2025 16:03:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58809
IP address blocks:        125.5.16.0/24 maxlen: 24
                          125.5.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 15:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10327 (0x2857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Sep  2 16:03:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b71568-23da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:67:a2:04:dc:eb:44:ea:77:42:bb:07:6f:
                    a9:18:65:0c:90:39:21:00:85:c5:ed:0a:6c:0a:11:
                    17:04:3d:95:83:46:18:e8:7f:8b:6f:ea:ce:c4:83:
                    2b:ef:12:24:d7:e4:31:be:ae:fd:6a:e4:4a:dc:54:
                    72:8d:bb:00:fc:9b:a7:c9:6d:26:cf:ac:46:26:76:
                    81:d0:fa:3f:ea:11:51:f2:e5:a6:28:bd:ba:14:ce:
                    fb:ab:6c:d4:b1:9f:42:ae:5a:72:87:ee:fd:d2:df:
                    71:47:bd:1a:8e:53:37:f0:85:fc:68:d3:49:1f:27:
                    e8:4f:b0:eb:50:6f:a2:17:fb:58:01:48:63:93:07:
                    32:20:8d:0c:80:a8:ef:aa:23:b8:02:dd:91:ae:04:
                    0e:eb:82:89:f2:b8:dd:cf:6e:96:0e:cb:6d:e0:72:
                    e2:1a:29:71:60:2e:88:21:9d:ef:79:d7:4b:2d:91:
                    51:d8:2f:d0:23:d6:32:71:87:1a:29:14:a8:db:b1:
                    18:42:48:54:f3:2f:a2:8f:23:47:d3:48:50:b0:42:
                    a7:92:c2:3a:0e:ed:df:04:f9:fe:3d:58:a9:c6:03:
                    05:3a:8d:c0:65:4f:24:12:5d:ef:f1:de:2d:b2:63:
                    17:17:41:c7:d0:7a:a1:48:28:45:69:d2:11:19:55:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:87:85:55:8F:F0:D1:DD:D0:86:02:2F:D5:74:0A:AF:FA:26:DB
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/73464EBCB0F311E5AB30F151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.5.16.0/24
                  125.5.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:3b:17:63:d4:3a:b8:ca:72:6c:8c:5b:11:6a:ba:12:79:
         51:63:dc:41:10:1b:41:72:71:98:2b:0c:4e:1b:d3:96:9d:7b:
         99:a3:ef:e4:0d:aa:9d:52:77:16:98:47:da:ee:80:64:3e:ed:
         de:e4:d0:d9:f3:46:23:44:ca:6e:ae:4a:c0:18:6a:69:5a:c4:
         b7:fd:11:43:c8:d6:55:96:b0:42:6d:cb:c8:d8:86:72:f7:c0:
         69:85:f2:11:2c:7a:ce:60:ea:6b:bf:b5:93:f5:d3:86:a7:19:
         24:88:90:f3:38:6b:ea:36:89:66:60:e0:ba:96:92:c7:56:35:
         1d:de:96:95:16:16:de:cc:ff:11:a7:c9:55:79:8a:d3:d2:3c:
         4f:e4:e3:e4:2e:26:3a:97:43:cd:28:4f:28:c7:c2:9e:2b:db:
         43:83:0e:49:1e:14:f7:36:b6:f9:03:65:46:76:45:ce:15:10:
         a4:91:01:92:fc:0a:c9:36:74:86:4a:9d:8a:90:e9:11:40:38:
         28:c4:b5:62:bc:20:52:ef:b3:3c:44:e8:72:68:d5:e2:a7:5d:
         41:a9:db:cf:cd:e5:ed:d6:17:6b:9e:3f:fd:a5:d3:3c:e3:72:
         a4:ea:95:53:9e:9c:93:db:bd:6f:6e:0f:31:11:e2:95:aa:c3:
         c0:29:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 23:40:10 2025 by rpki-client