Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6B40A6762A4311EBBD69BE46C4F9AE02.roa
File:                     6B40A6762A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=
Subject key identifier:   70:0F:5C:74:0A:3F:5C:07:75:E5:9C:BD:94:E8:6D:BF:2B:D0:3D:AB
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0893
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6B40A6762A4311EBBD69BE46C4F9AE02.roa
Signing time:             Tue 20 May 2025 21:51:06 +0000
ROA not before:           Tue 20 May 2025 21:51:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9931
IP address blocks:        203.150.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:51:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=682cf94a-2c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:cf:11:3e:a8:a4:81:71:70:f0:38:a4:3e:
                    92:72:d0:44:ce:c1:3a:85:28:99:03:9c:3b:1b:e2:
                    1b:75:0b:1c:0d:1b:2c:19:8e:27:23:a8:13:16:8d:
                    29:b9:04:30:d8:a9:e1:ba:8b:69:dc:26:ce:5a:42:
                    f5:f7:5a:a0:72:3e:e0:20:2d:c2:a3:07:0f:55:3d:
                    1a:6d:28:0b:46:f6:6c:59:5c:81:06:2e:d4:f1:ce:
                    dd:a2:0d:26:04:62:06:86:60:d1:a4:4d:c3:62:fa:
                    e1:0c:d5:b1:94:25:f3:3c:10:23:07:d7:fc:c7:34:
                    dc:10:b8:a0:3a:8b:44:dd:6a:90:06:38:21:b7:67:
                    34:09:31:fd:f8:e8:72:be:0a:a4:13:54:5f:82:95:
                    1d:1c:81:c0:ce:44:eb:11:f2:96:09:d1:f4:9f:c4:
                    d4:6d:de:35:c5:8b:74:09:49:22:f7:97:b7:fc:24:
                    e7:64:3e:fb:04:c1:8e:55:7e:71:af:c8:53:b6:55:
                    38:9b:82:09:01:f1:50:ff:d8:2e:62:16:a5:d6:84:
                    05:68:36:e8:9e:96:bc:2a:71:e6:61:91:ab:0e:d2:
                    94:4d:1b:0e:49:db:e3:3e:7c:3c:b4:bc:02:38:1c:
                    ab:b4:2d:c6:8e:e1:1b:86:a1:9b:2f:4f:37:c5:ee:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:5C:74:0A:3F:5C:07:75:E5:9C:BD:94:E8:6D:BF:2B:D0:3D:AB
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6B40A6762A4311EBBD69BE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:32:44:69:50:bd:d8:d9:e2:2b:5f:1d:c7:ca:b0:a6:28:69:
         d7:f6:24:d2:28:11:c2:88:fc:45:32:32:4f:47:d0:01:39:45:
         5f:53:0c:6a:6f:92:f9:71:be:e1:41:1b:f2:c8:27:0d:dc:63:
         ce:53:eb:38:b9:94:6a:1a:12:00:96:38:9a:23:44:69:fb:05:
         76:2e:6a:3f:1b:3d:4d:35:1b:9c:50:2b:e3:a2:7e:ff:fc:f6:
         e4:52:24:d7:4e:78:b4:40:be:e5:da:6a:2c:96:37:ac:81:01:
         da:2c:45:1b:75:10:51:2e:63:f2:1e:2f:b2:07:45:eb:5d:ac:
         0b:68:d1:d2:88:ae:e6:f6:a1:d6:9e:5b:ad:e1:cf:a2:6e:8b:
         f2:2b:4a:f0:26:70:ac:10:af:ce:67:89:83:63:33:5a:f2:96:
         96:f7:cc:75:d5:ce:11:7c:96:29:81:14:bd:95:40:20:37:d5:
         ae:f6:29:12:bf:f5:fa:85:9a:d8:f1:b6:d4:78:15:41:64:0b:
         04:b4:94:bb:a6:14:0a:fe:a9:9a:50:0a:80:27:37:d7:82:fa:
         ec:d4:f3:e4:eb:46:c0:de:e0:94:68:4c:4a:a1:f0:c3:82:8f:
         ba:31:b4:53:58:02:05:38:ac:5c:00:78:bd:75:06:8b:d5:a9:
         b1:f1:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:55:15 2025 by rpki-client