Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D7BBF774498911EF9ECB9967C4F9AE02.roa
File:                     D7BBF774498911EF9ECB9967C4F9AE02.roa (raw, json)
Hash identifier:          3R0caWlbq1LOK9PMe9S0/RNrK2xglF1D20u07isPD7I=
Subject key identifier:   D2:AD:7E:31:EA:A7:D9:62:BB:B1:F2:DA:D5:E5:3C:E4:1E:E3:BA:3E
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1F66
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D7BBF774498911EF9ECB9967C4F9AE02.roa
Signing time:             Sat 30 Aug 2025 16:35:24 +0000
ROA not before:           Sat 30 Aug 2025 16:35:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141679
IP address blocks:        218.30.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 16:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8038 (0x1f66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b3284c-63c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:2f:5b:39:5d:44:ef:5d:6c:02:43:5d:bc:
                    ec:eb:14:49:24:a1:f8:e6:9c:b6:8d:45:fd:2d:32:
                    8f:d8:b6:67:56:4d:0f:88:dd:58:27:7e:52:1d:1f:
                    70:39:44:ac:73:4f:c0:d6:b5:62:50:e5:b8:61:90:
                    ba:e8:d8:b9:6e:39:2f:ac:9a:38:23:b6:62:20:bf:
                    8a:a9:d0:03:f6:6e:6a:61:e3:a3:70:d4:9a:79:0c:
                    90:12:c0:80:2f:ed:25:29:1c:b7:df:48:62:3b:ec:
                    47:06:09:ca:62:45:56:8a:27:50:64:d3:03:12:3f:
                    e3:39:b5:a8:dd:1d:21:d0:5f:35:c6:76:57:32:d6:
                    f9:e7:2f:b6:4e:17:a1:4a:04:22:7b:3c:d4:5c:5e:
                    0a:00:1c:d3:cd:60:53:8a:fe:fb:ed:7e:d0:0c:4d:
                    bc:cf:5a:4c:9a:ca:99:96:a6:dc:1c:1a:44:ce:af:
                    40:76:cf:cd:eb:7c:a3:4c:46:3b:79:93:ee:06:7f:
                    9d:25:95:c1:6d:d4:7b:60:e2:e5:91:bf:97:55:2d:
                    70:59:45:b8:08:be:a0:20:5d:12:92:69:89:7f:24:
                    5a:27:74:45:0a:aa:88:44:cc:89:84:d7:83:77:8e:
                    21:e9:1b:25:89:a7:93:69:e1:61:2e:ef:3c:e5:a1:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:7E:31:EA:A7:D9:62:BB:B1:F2:DA:D5:E5:3C:E4:1E:E3:BA:3E
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D7BBF774498911EF9ECB9967C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.30.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:16:5b:e8:9d:0c:aa:2b:67:40:8e:d5:c6:ec:c7:de:83:99:
         a1:85:24:ff:08:8b:61:de:62:1d:d2:cd:13:80:b6:68:32:f5:
         77:c5:37:46:b5:6f:1b:db:72:07:8a:1d:8f:c6:ce:93:3d:6c:
         7d:a6:52:6f:56:19:95:9c:99:a3:09:ce:b7:ac:ae:b7:be:fc:
         be:09:5f:b5:03:4b:b8:9a:89:5d:ab:07:9b:6b:66:25:d4:94:
         d2:94:91:17:b6:22:43:7c:a2:96:61:f4:fb:c4:88:c7:8b:d5:
         a1:ef:2c:27:78:f2:86:16:e3:90:37:a5:0f:36:52:76:55:66:
         85:44:37:7c:0c:6b:31:d3:04:2b:f2:6c:d3:92:85:67:d9:3b:
         48:46:98:29:b4:28:63:41:f5:7c:e4:8b:5e:53:c3:0f:ef:ee:
         35:2a:9f:eb:b4:a8:11:db:9a:38:01:e3:e8:ae:cd:79:12:a0:
         40:9e:fe:fb:17:a0:54:78:4a:4f:8c:63:0c:cb:87:cf:d6:4f:
         d0:a0:fc:00:d7:8d:f6:48:3a:50:6e:f5:8c:b7:7a:d9:49:26:
         bf:25:de:98:5b:bb:25:cb:9a:5d:a4:f3:88:58:fd:a8:88:2f:
         ba:78:f4:fe:67:5f:40:02:5e:e7:54:6a:78:2b:22:93:9d:3c:
         46:50:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:19:08 2025 by rpki-client