Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/77439A048A3911F0AA9D4C75C4F9AE02.roa
File:                     77439A048A3911F0AA9D4C75C4F9AE02.roa (raw, json)
Hash identifier:          4gOxRljY2ajSaw9L+py/l3Z65NBPVaVQD1LWDmNg++Y=
Subject key identifier:   93:DA:83:04:C7:B3:E1:77:ED:05:24:C2:AA:98:92:C3:AD:4C:DB:91
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       08E7
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/77439A048A3911F0AA9D4C75C4F9AE02.roa
Signing time:             Fri 05 Sep 2025 09:19:47 +0000
ROA not before:           Fri 05 Sep 2025 09:19:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        203.150.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Sep  5 09:19:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68baab32-9855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:d5:e6:7e:d3:1e:00:7c:a1:b3:e8:ec:c2:
                    60:cd:1c:92:f9:b2:e5:c4:7d:29:68:72:2e:0d:2a:
                    46:10:5d:9c:20:f6:c3:86:bb:b0:2f:37:ce:7a:d1:
                    5c:4d:3e:da:e0:b0:11:16:23:de:d6:14:0b:ae:9b:
                    33:2b:4f:bf:81:83:5c:74:b8:10:b1:b0:21:22:24:
                    54:57:ca:40:f8:b5:05:30:4c:b9:6b:0b:23:44:12:
                    54:cd:d2:fa:65:ff:f8:f3:3e:30:c0:3b:f4:b3:26:
                    d0:42:10:52:c2:0d:18:01:f5:54:51:2e:bd:60:53:
                    a3:be:49:a7:2d:92:a0:00:9b:05:5d:8f:c3:87:73:
                    08:ac:2c:7c:b9:cd:09:06:19:28:ce:8c:b9:5f:28:
                    0a:84:8c:77:1c:4e:c7:bd:54:4c:a5:58:ac:55:7f:
                    72:dd:3b:f8:de:10:87:1d:0f:ab:19:b0:25:fd:8d:
                    2c:2d:17:75:19:07:e8:c3:a9:db:5d:8a:b7:5c:57:
                    eb:81:46:1c:e2:53:90:92:5e:b4:89:8e:b0:40:ce:
                    61:5d:36:f1:42:77:28:32:17:d4:b2:c6:7c:47:8c:
                    62:56:19:94:3a:c7:4d:82:35:eb:4e:1a:df:ab:8e:
                    cc:27:79:12:ea:db:35:f4:42:28:e1:c9:a6:bc:0e:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:83:04:C7:B3:E1:77:ED:05:24:C2:AA:98:92:C3:AD:4C:DB:91
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/77439A048A3911F0AA9D4C75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:a0:51:d0:36:9b:b3:33:a5:ff:16:db:ff:d6:a6:42:fd:
         16:d1:e7:1e:c3:90:0b:24:53:9e:62:0a:0e:a8:56:84:1a:31:
         72:e5:2b:dd:45:0e:e8:ac:b3:68:05:36:67:44:64:e0:2a:39:
         14:00:58:db:ef:5a:d8:33:53:4c:18:ab:08:13:2a:6b:43:54:
         80:67:16:4c:a8:52:25:dd:6e:5c:22:4f:0c:89:11:4c:52:af:
         f5:62:53:cd:b5:d2:d8:14:a6:0f:69:27:b9:7d:1d:b0:c2:22:
         4e:83:5b:9a:83:a3:96:89:0f:15:61:bd:01:4d:11:7b:aa:f6:
         45:67:00:78:d4:2e:76:56:33:ba:ab:e2:95:fe:53:ec:64:94:
         da:e6:1a:77:7e:96:29:1a:2a:cc:43:3e:02:cd:e9:92:90:12:
         79:ed:77:9b:b0:41:c1:cf:4d:1e:6c:89:2a:7f:3f:99:50:05:
         a5:13:66:48:ce:2a:d0:9f:6b:f5:7f:55:fa:63:5b:5b:76:fa:
         e1:2c:42:33:a7:35:96:91:e8:b9:a4:db:5a:cc:ef:15:f6:92:
         a7:d0:94:0c:e7:6f:38:c1:d5:89:dd:df:24:ff:3a:57:06:2f:
         19:ae:fc:bc:b4:62:f5:63:f6:36:e5:60:70:e2:8c:61:0c:c4:
         22:e0:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 19:11:42 2025 by rpki-client