Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/05E0CD8A56D311F0B46F9787C4F9AE02.roa
File:                     05E0CD8A56D311F0B46F9787C4F9AE02.roa (raw, json)
Hash identifier:          jL8RSSnxlTI7zp7fpF6wAekdhf9q+8pPVD5T20++cfg=
Subject key identifier:   C1:25:25:8D:2A:6B:19:04:02:ED:22:11:4E:6E:00:5A:0E:BF:20:A0
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       02BD
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/05E0CD8A56D311F0B46F9787C4F9AE02.roa
Signing time:             Wed 22 Oct 2025 02:45:52 +0000
ROA not before:           Wed 22 Oct 2025 02:45:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     214024
IP address blocks:        202.155.112.0/22 maxlen: 24
                          202.155.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 02:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 22 02:45:52 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f8455f-00f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:05:0f:57:a9:30:70:cb:3e:3a:9d:96:8d:
                    6b:7b:e9:04:c4:94:4e:b2:58:28:c2:84:33:7c:4f:
                    a8:32:4a:d1:e4:28:7f:65:02:72:0e:d2:42:59:29:
                    29:8b:7d:9f:b5:06:9c:25:02:73:04:a8:c1:59:f3:
                    1d:ac:4d:cb:db:ab:70:7f:9b:aa:98:c1:48:78:dc:
                    15:75:64:19:d4:9f:43:eb:a7:9b:68:f1:c8:31:a8:
                    a7:e2:a4:a3:f7:75:5c:a2:64:bf:c9:8d:0c:d8:cf:
                    34:44:e4:a9:79:9b:d8:ec:e6:c6:73:81:9a:74:af:
                    59:9c:eb:49:f5:93:05:c6:9c:98:f9:4f:ea:1d:d7:
                    4a:ea:98:9d:b2:94:1b:c4:ca:cd:98:4a:89:56:48:
                    0c:12:44:d9:0b:6d:6e:85:0a:bf:1e:b1:d4:36:92:
                    a7:b8:ae:d0:ba:82:ab:93:d0:7c:7d:7f:6d:d8:aa:
                    5f:0d:54:6f:e0:b1:c6:70:71:6d:2f:8f:b7:74:59:
                    93:dc:6a:48:34:c5:75:f6:6a:5b:e1:06:15:76:3c:
                    3e:8d:16:a0:08:71:5b:cb:43:48:58:9a:b3:08:00:
                    a7:85:3f:57:e6:c2:66:85:d4:d7:48:2d:a7:ed:99:
                    8d:f1:69:18:ba:d7:2e:7c:3d:71:12:f4:a4:c9:b8:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:25:8D:2A:6B:19:04:02:ED:22:11:4E:6E:00:5A:0E:BF:20:A0
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/05E0CD8A56D311F0B46F9787C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.112.0/22
                  202.155.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:91:1f:60:3d:5e:7f:b2:c3:73:2a:4a:94:f1:c9:66:ab:
         f1:3a:3b:cb:03:48:3e:04:57:88:90:be:d3:5e:98:db:77:03:
         eb:c2:54:0a:3d:81:d3:08:aa:e3:cc:51:32:26:bc:2f:5d:fa:
         04:7b:cf:00:ff:61:bf:b6:a5:1f:15:1d:15:df:2a:81:73:43:
         f9:79:00:49:65:b9:57:14:cb:af:12:10:b8:45:42:35:61:ab:
         47:63:f2:fd:12:d0:11:a6:89:7f:b2:d2:5d:3e:8c:70:c1:c9:
         b8:a3:52:67:5c:60:64:56:6f:90:a8:e9:e6:a6:20:59:6c:1c:
         86:4a:4b:a5:1c:c8:17:ef:c0:8f:e7:71:9c:4f:c8:6e:8e:bd:
         35:7f:ee:25:d0:6f:52:1f:ab:0b:58:a1:a5:6b:f2:5f:3c:05:
         05:df:71:57:73:18:d8:06:f9:ea:fe:3e:94:bd:3b:ce:bb:a6:
         e9:6b:b3:50:b1:96:2e:14:3a:9a:83:56:ca:61:1d:a0:86:b2:
         24:fe:42:f7:c2:66:eb:e5:9d:50:8d:4b:4a:47:a4:ee:b4:a9:
         d7:86:b8:df:a9:bf:94:cd:fc:19:b7:62:8e:f4:9e:8c:ba:0b:
         50:c8:d0:97:35:91:30:70:c5:e5:a2:5a:a7:59:3e:35:23:6a:
         bf:df:07:3e
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjUxMDIyMDI0NTUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGY4NDU1Zi0wMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsWcFD1epMHDLPjqdlo1re+kExJROslgowoQzfE+oMkrR5Ch/ZQJyDtJCWSkp
i32ftQacJQJzBKjBWfMdrE3L26twf5uqmMFIeNwVdWQZ1J9D66ebaPHIMain4qSj
93VcomS/yY0M2M80ROSpeZvY7ObGc4GadK9ZnOtJ9ZMFxpyY+U/qHddK6pidspQb
xMrNmEqJVkgMEkTZC21uhQq/HrHUNpKnuK7QuoKrk9B8fX9t2KpfDVRv4LHGcHFt
L4+3dFmT3GpINMV19mpb4QYVdjw+jRagCHFby0NIWJqzCACnhT9X5sJmhdTXSC2n
7ZmN8WkYutcufD1xEvSkybj32wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMElJY0q
axkEAu0iEU5uAFoOvyCgMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvMDVFMENEOEE1
NkQzMTFGMEI0NkY5Nzg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBALKm3ADBALKm3gwDQYJKoZIhvcNAQELBQADggEBAF87kR9g
PV5/ssNzKkqU8clmq/E6O8sDSD4EV4iQvtNemNt3A+vCVAo9gdMIquPMUTImvC9d
+gR7zwD/Yb+2pR8VHRXfKoFzQ/l5AElluVcUy68SELhFQjVhq0dj8v0S0BGmiX+y
0l0+jHDBybijUmdcYGRWb5Co6eamIFlsHIZKS6UcyBfvwI/ncZxPyG6OvTV/7iXQ
b1IfqwtYoaVr8l88BQXfcVdzGNgG+er+PpS9O867pulrs1Cxli4UOpqDVsphHaCG
siT+QvfCZuvlnVCNS0pHpO60qdeGuN+pv5TN/Bm3Yo70noy6C1DI0Jc1kTBwxeWi
WqdZPjUjar/fBz4=
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:29:22 2025 by rpki-client