Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6AB096D02A4311EBBD69BE46C4F9AE02.roa
File:                     6AB096D02A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=
Subject key identifier:   58:5B:F8:C9:E0:F4:4B:20:70:FA:AF:12:59:7E:91:79:83:79:7A:B7
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0892
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6AB096D02A4311EBBD69BE46C4F9AE02.roa
Signing time:             Tue 20 May 2025 21:51:05 +0000
ROA not before:           Tue 20 May 2025 21:51:05 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7715
IP address blocks:        203.150.44.0/24 maxlen: 24
                          203.150.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:51:05 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=682cf949-753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:68:59:d7:6e:12:fd:6f:76:f7:25:ee:fa:
                    2c:ae:73:9c:8e:bc:b9:19:38:9c:06:41:be:db:b3:
                    94:a6:af:58:5d:0f:fd:0a:ef:3d:08:f9:3d:f4:7f:
                    aa:92:44:7b:8e:fd:dd:45:39:51:4c:cc:d9:45:24:
                    b5:ea:4d:e1:5c:f6:31:29:ee:86:37:01:f3:0c:d6:
                    c3:a8:94:67:9c:16:22:58:aa:03:11:5a:4a:43:32:
                    ec:86:61:16:ae:fb:dc:f6:86:82:19:f6:1e:3d:50:
                    1e:04:76:de:41:15:8a:6d:41:a1:85:86:09:02:f6:
                    10:a1:7c:2e:f3:42:1c:b2:b4:23:a9:5d:83:c1:5a:
                    45:ee:69:67:49:e7:7a:fe:51:92:ba:cc:4d:7f:d7:
                    b0:92:f9:35:08:06:cf:e3:b8:f5:e6:03:49:20:28:
                    6c:15:28:0c:4f:eb:05:b8:c2:e1:a1:7d:35:e4:48:
                    15:57:03:03:f4:ba:f2:69:53:b9:55:06:90:ae:5b:
                    d5:44:40:5c:4a:16:0f:96:82:0a:b0:62:95:98:7c:
                    15:be:2e:cd:e0:e0:76:ca:09:16:ec:70:5f:16:87:
                    10:9e:4a:20:ee:37:1f:fa:a5:cb:2c:5d:be:bc:e4:
                    dd:c4:fa:10:46:bd:7a:08:f7:09:a3:95:a1:e0:73:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5B:F8:C9:E0:F4:4B:20:70:FA:AF:12:59:7E:91:79:83:79:7A:B7
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6AB096D02A4311EBBD69BE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:ab:ab:4f:7a:71:60:dc:28:4e:0c:28:70:07:a5:3d:ed:
         e7:f4:61:57:ec:7c:d8:80:24:68:a5:69:da:e9:ba:0a:ba:a6:
         51:75:c9:99:2b:88:d7:7f:14:da:d5:ef:1d:80:61:72:f8:9f:
         b2:52:a6:0c:c1:98:5c:bf:64:5f:59:30:d5:b6:47:a6:65:c5:
         5c:2d:8f:82:b3:7a:91:ef:ad:37:2b:01:e4:49:08:dc:a2:b8:
         2a:bf:71:85:bf:fa:8f:65:17:a2:d5:f1:80:fb:e4:12:d7:5f:
         39:96:04:83:64:79:d2:7d:82:7a:f4:98:a6:64:a9:a1:d8:b7:
         2d:5d:c8:ac:cc:96:8a:e7:c7:3f:03:b1:20:41:73:62:0b:47:
         01:1f:f6:34:9c:12:45:2f:95:0b:a4:99:5e:98:4c:0d:44:9b:
         a3:5b:70:e1:d0:d1:dd:9a:25:5d:2e:bb:5e:4b:47:89:ae:21:
         95:d4:44:f2:7d:d1:fe:c8:20:3c:12:65:30:95:fe:2b:3b:33:
         48:73:63:eb:f1:c0:75:f6:e1:dd:fa:bb:38:4c:a4:14:25:7e:
         6a:51:ec:09:2d:a5:b7:97:9d:da:d8:2f:7e:64:2f:f3:d4:45:
         f5:1d:4f:30:d0:8b:0a:50:32:f1:f5:cb:4b:46:c4:e3:62:c8:
         32:18:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:52:17 2025 by rpki-client