Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EE5D27BEA80611F09091490CC4F9AE02.roa
File:                     EE5D27BEA80611F09091490CC4F9AE02.roa (raw, json)
Hash identifier:          880H+j/SYDAV5Oh86Tvuz0TWhzmeM9++dFNPMGJPE50=
Subject key identifier:   89:69:9A:CC:33:A2:8F:A5:FD:F9:2C:5C:6B:54:84:D2:E9:16:A6:4A
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       02B1
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EE5D27BEA80611F09091490CC4F9AE02.roa
Signing time:             Mon 13 Oct 2025 07:33:37 +0000
ROA not before:           Mon 13 Oct 2025 07:33:37 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     395793
IP address blocks:        202.155.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 13 07:33:37 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68ecab51-5a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:96:37:97:6e:76:bc:51:24:9f:86:75:50:e2:
                    02:bb:51:02:c4:d8:17:25:18:68:59:03:dc:0f:4c:
                    25:a3:aa:d0:dd:2b:5f:44:6a:0c:ca:88:ae:c2:04:
                    e8:6e:0e:8d:3d:dd:f2:b5:d4:0f:da:1c:4a:f7:13:
                    5f:21:46:f8:a8:88:83:f8:21:df:00:8b:c3:ca:30:
                    df:92:9e:0d:b8:24:22:01:6a:9d:62:0e:82:3f:94:
                    97:ef:3f:c0:f9:db:81:4a:9a:42:3c:61:76:37:36:
                    e0:a6:4c:01:e2:95:95:b3:e2:28:fe:00:f1:fd:15:
                    b7:25:1c:a0:f4:1c:a1:c1:a7:65:f6:d8:8e:5b:3f:
                    d0:33:57:64:2b:ba:62:49:67:cb:7f:e0:36:06:d4:
                    1f:a2:c6:98:d3:5a:e8:93:fc:5b:d3:6e:c9:2f:4a:
                    92:72:60:c8:06:32:74:49:67:78:21:58:f4:55:c3:
                    a0:6e:a2:af:7f:c1:02:30:b9:78:f9:71:32:20:95:
                    fa:69:de:34:22:54:8d:35:a6:d6:1a:4c:ae:ab:0d:
                    a2:56:26:86:3b:f4:ab:d3:02:fc:c6:c5:0e:ca:09:
                    43:38:24:da:c7:65:24:28:0f:ff:d2:25:4f:ba:50:
                    5b:11:fd:ea:26:a7:60:44:76:05:d3:bb:7b:86:be:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:69:9A:CC:33:A2:8F:A5:FD:F9:2C:5C:6B:54:84:D2:E9:16:A6:4A
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EE5D27BEA80611F09091490CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:f4:b5:2a:c0:de:3c:72:5c:c8:dc:a4:44:f8:ef:89:7f:
         3a:f4:97:23:ff:f8:e7:e8:4a:c4:f9:bb:08:94:f8:b7:f4:0a:
         a0:8f:1c:c1:34:f2:f9:66:7b:d6:60:40:ac:59:5c:10:c7:ac:
         a1:1b:68:e7:a4:50:46:f1:79:f5:d6:c0:3b:ec:0a:16:30:b5:
         45:ac:75:82:49:8d:bb:d2:65:e7:5d:0c:62:be:51:23:cd:dc:
         c6:4a:d1:c0:6a:8c:a1:61:32:0c:cb:06:d3:35:fa:93:c9:c8:
         85:3a:d9:06:61:00:56:61:03:2a:93:70:17:d7:74:f4:e9:ac:
         51:e4:77:0a:17:bf:ee:d2:46:ff:8a:f1:46:89:82:41:e7:9a:
         ca:7e:d7:b3:76:d2:24:57:94:09:52:d6:bb:09:3a:b0:cc:49:
         b4:cb:28:fb:6f:b9:22:74:fe:76:7a:02:c9:d7:2e:3e:cb:57:
         c5:2a:d7:40:7e:f5:47:4a:3f:29:0d:c5:ee:67:84:9a:ca:7e:
         af:74:4c:9f:f5:e9:73:27:8d:84:37:2f:74:8b:29:24:58:dc:
         6c:82:d5:46:3f:d6:00:88:4e:b4:32:c6:1b:e4:a9:09:3d:c7:
         e8:12:9a:7b:bb:06:ef:a0:ed:bd:bd:02:4a:c3:0a:3a:5e:4e:
         ce:73:53:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:29 2025 by rpki-client