Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa
File:                     692243D640AA11F096F2746AC4F9AE02.roa (raw, json)
Hash identifier:          rkd9k1u1dkPxEMEh5w+r9Bswb8IlB1n+y2yWKJIM8Tk=
Subject key identifier:   15:D9:76:B4:31:EE:26:E2:83:C3:F2:D0:B9:31:99:D1:5A:06:A8:95
Certificate issuer:       /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Certificate serial:       20
Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 18:56:32 +0000
ROA not before:           Tue 03 Jun 2025 18:56:32 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     38195
IP address blocks:        202.40.164.0/22 maxlen: 24
                          2401:c0e0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
                          rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 09:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
        Validity
            Not Before: Jun  3 18:56:32 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=683f4560-0492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:f2:cb:5d:61:0d:f3:80:c1:e6:19:59:47:
                    5b:e8:b2:c5:2e:8d:b6:b7:fd:1b:ce:74:b2:61:dc:
                    25:f6:d3:25:d8:a7:05:f3:b6:f3:98:10:3b:8f:6d:
                    4f:05:39:cf:58:d1:d5:51:bc:1f:a9:28:2f:39:f4:
                    8e:cc:f1:41:a9:33:6f:f7:61:a1:e5:f1:a4:5d:e6:
                    9c:ac:9c:7a:ad:b5:43:ba:56:4a:8f:fe:f5:14:7c:
                    f1:7b:66:c4:5d:02:fc:b4:ab:ac:c6:d0:d8:f9:48:
                    8e:5b:27:7e:7a:6d:33:a5:29:62:d6:a3:35:5c:ca:
                    2f:25:ae:2a:71:62:c7:9f:b3:3d:97:f2:37:28:77:
                    92:d9:00:ec:5e:bb:cd:69:dc:33:4f:be:11:a2:02:
                    92:a7:28:a6:32:5d:80:f1:f3:86:89:a0:0e:46:ba:
                    94:15:ab:d3:97:03:61:5c:c2:65:02:f2:3e:1d:5f:
                    46:ed:d7:15:f9:6a:40:ad:f9:20:c8:e4:ba:3c:4d:
                    c2:1c:f0:e5:b8:10:42:79:d0:47:6a:29:a0:c2:7b:
                    f3:43:b8:da:c5:ba:5e:43:a1:b7:c4:a1:93:f7:23:
                    f9:d3:57:28:0e:13:9b:11:12:65:ee:3e:eb:98:c8:
                    68:30:7a:2b:62:5a:c1:4d:4c:73:7c:49:86:96:2c:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D9:76:B4:31:EE:26:E2:83:C3:F2:D0:B9:31:99:D1:5A:06:A8:95
            X509v3 Authority Key Identifier:
                keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.40.164.0/22
                IPv6:
                  2401:c0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:17:89:3c:9c:f3:ff:1c:7d:fb:0c:85:03:ec:bb:4a:11:ae:
         48:a4:34:ff:cf:20:49:76:61:24:e6:57:eb:c4:7d:4f:e9:49:
         6d:77:5d:6d:22:a3:cc:60:3d:a6:d4:32:57:bd:d4:e0:2a:6d:
         14:3d:e8:e3:37:9d:70:61:7e:80:f4:13:a1:0f:2f:6c:b1:b1:
         4a:ad:9b:a2:46:d9:87:cf:67:8d:21:07:fc:5a:bb:72:0e:fd:
         54:c8:c6:b1:6f:43:fb:06:45:7e:db:1d:c6:c1:3e:82:b9:3c:
         d6:78:5a:0c:a6:f1:45:48:7e:45:42:0f:87:52:0d:22:7d:df:
         53:2c:55:f9:e1:95:51:dd:b1:5c:bd:60:3c:aa:a4:3c:35:8e:
         1a:7f:0b:c7:c5:98:16:f2:5f:ce:6d:ba:de:57:44:d4:97:1f:
         59:de:1f:dd:2b:d5:9b:47:63:5a:b1:ff:02:7f:b9:46:34:27:
         a8:3d:5f:b0:8b:15:45:0f:2a:09:24:3d:5a:ae:26:02:19:09:
         ab:c5:23:ab:8d:a9:e2:de:0f:28:fc:6b:52:a5:c6:c8:11:0d:
         56:3e:26:bf:c2:47:b3:b5:ef:a8:7d:f2:89:61:98:ae:ed:10:
         76:36:21:e0:8f:2c:b0:32:75:3d:57:c2:89:8e:d8:32:12:79:
         80:fc:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:38:25 2025 by rpki-client