Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
File:                     F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (raw, json)
Hash identifier:          qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=
Subject key identifier:   32:0D:B0:71:5A:AD:3D:E0:4B:4B:C8:22:BE:38:5C:DF:72:6C:07:60
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       FE
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
Signing time:             Wed 21 May 2025 04:35:22 +0000
ROA not before:           Wed 21 May 2025 04:35:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     131239
IP address blocks:        202.37.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 04:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: May 21 04:35:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682d580a-f00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:ba:ea:4a:8e:2d:1b:2f:18:50:82:2d:30:
                    2b:55:0a:55:c8:47:bb:d9:4f:7b:19:1c:df:64:8b:
                    ce:07:4c:45:d8:05:c4:ec:c8:c4:1f:fd:b0:25:fb:
                    d2:ca:ca:d4:1f:61:89:e8:e7:27:ea:cd:ac:a8:0f:
                    63:06:48:ee:c5:99:16:6f:48:46:aa:46:50:f9:1f:
                    a9:68:6a:f7:a0:b6:b5:2a:9f:89:83:79:45:0c:b0:
                    1b:8c:e0:c2:b1:d2:1b:b7:dd:35:06:26:23:aa:94:
                    34:67:0d:1d:f9:73:f0:32:97:72:68:bc:6a:a0:54:
                    90:5d:f2:83:0a:9f:54:f3:51:be:be:88:6b:86:f7:
                    65:4e:5f:7e:0b:42:49:70:9d:50:bf:da:a0:98:84:
                    a0:b6:78:c0:49:3b:ed:28:c0:1e:fc:a0:1c:e0:01:
                    dd:fe:b5:d7:80:ba:39:9e:aa:0b:de:6d:55:42:20:
                    4e:3b:11:97:97:77:5d:d0:2d:06:fb:e0:18:07:2b:
                    c0:26:fc:10:51:bd:bd:f0:c0:d6:ae:1a:9a:67:bd:
                    0c:9b:fc:35:f2:04:5c:54:bc:b3:60:fb:49:8b:34:
                    43:3d:ba:d9:da:3a:fe:17:d5:f6:43:6e:16:ed:98:
                    42:1f:6a:e4:c6:fb:9e:79:e8:96:7d:d6:6c:ff:4a:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0D:B0:71:5A:AD:3D:E0:4B:4B:C8:22:BE:38:5C:DF:72:6C:07:60
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:4b:6b:88:c1:da:fc:f7:2b:f1:83:c1:0b:c6:a7:9f:0c:
         2e:e2:46:20:f8:28:6f:cb:3e:0e:d9:b7:6e:95:e8:4d:a1:d9:
         16:14:c0:9b:d2:eb:7c:a1:0d:bc:e3:e5:22:d5:3e:64:32:2f:
         2e:bc:74:b2:11:b8:64:ae:3f:8a:3b:c8:9e:bc:02:8b:09:e9:
         19:b4:e1:bb:10:4e:4c:97:71:0d:dd:9b:95:b0:88:c8:96:46:
         d2:1b:53:2e:1c:1d:9b:95:53:13:0e:53:81:c8:f7:a0:19:75:
         59:75:b9:5f:8f:0c:33:d9:96:fc:2c:a6:ca:2d:13:9b:b1:11:
         5d:68:ec:ce:e4:07:ef:95:14:cf:a7:e6:18:37:b5:de:60:5d:
         f9:e9:44:05:26:31:52:dd:35:1a:28:f7:2b:d5:8e:d8:f9:dd:
         e9:56:aa:bc:d3:2c:a6:9b:0e:68:f7:8e:ba:68:9f:26:d5:f8:
         9d:5c:61:2d:fd:e0:a9:07:1b:62:4b:d9:fe:70:71:43:31:84:
         c8:73:26:1e:ac:fd:f6:7b:8a:9f:bf:e7:fe:1f:f9:46:3a:e1:
         ba:1c:6f:bd:63:56:c9:ed:b7:09:7a:93:18:71:5c:f7:33:e2:
         ca:3b:3b:8e:94:86:8e:7c:9f:77:99:7b:32:62:76:c7:25:ac:
         c6:84:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:46:33 2025 by rpki-client