Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/A44DBD8486F811F0BCE74679C4F9AE02.roa
File:                     A44DBD8486F811F0BCE74679C4F9AE02.roa (raw, json)
Hash identifier:          eVxzfgS9cLsPcTnwXfjcMYKtpEZ1POtJ4fcsIyjs2EU=
Subject key identifier:   7B:F6:AB:A8:11:15:31:29:5B:68:C2:9D:F0:E3:15:E8:56:47:0A:5A
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       06B8
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/A44DBD8486F811F0BCE74679C4F9AE02.roa
Signing time:             Mon 01 Sep 2025 05:58:11 +0000
ROA not before:           Mon 01 Sep 2025 05:58:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        203.5.33.0/24 maxlen: 24
                          203.5.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 22:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Sep  1 05:58:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68b535f3-5920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:27:10:3c:3c:9f:f1:ea:66:8d:96:34:1d:
                    a3:bf:8c:fb:0c:23:a4:27:19:3b:11:c2:18:95:3e:
                    59:6b:42:10:75:78:bd:9d:ec:0b:e9:0e:88:ac:9c:
                    48:29:b5:13:af:2f:be:88:a3:6b:82:ad:7d:65:98:
                    ab:9a:0d:41:b9:fc:c5:50:82:49:4b:20:90:79:a2:
                    28:74:90:14:10:f3:1f:7b:7b:a2:8c:1d:4d:18:c2:
                    2d:8d:23:4e:0a:a6:2d:2b:9c:c7:93:b5:c6:cf:6e:
                    98:e0:cf:7b:ec:60:ef:f0:81:9d:ed:8e:21:9f:a1:
                    6d:71:99:bd:8a:e8:71:78:fd:be:6c:ab:93:7e:47:
                    22:e6:0d:9c:63:ba:be:30:65:63:43:b2:2f:a0:e3:
                    bc:5e:6e:7b:b3:13:c3:a7:f9:db:90:93:ad:fb:58:
                    13:72:40:90:dc:9c:f5:e7:82:c8:3a:9f:34:81:d4:
                    55:a0:66:b7:23:46:7c:de:96:c1:d6:2b:cd:e7:e3:
                    39:c8:14:a9:1d:f0:2d:e4:67:7c:f3:1b:b1:f9:28:
                    92:20:52:7d:f9:d7:79:c7:9e:b6:8f:f5:88:4b:c8:
                    36:b7:d1:fe:37:c0:4c:46:66:a6:89:9d:42:b7:36:
                    a7:66:ab:f4:89:67:14:18:c6:a2:36:e8:45:3e:ab:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:AB:A8:11:15:31:29:5B:68:C2:9D:F0:E3:15:E8:56:47:0A:5A
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/A44DBD8486F811F0BCE74679C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.5.33.0/24
                  203.5.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:0e:6a:29:dc:02:4c:d6:52:f9:97:73:d4:9c:96:e9:3f:
         d6:76:da:5c:9e:c9:ba:6b:03:3f:9c:24:bc:7c:10:2f:d3:f3:
         12:32:82:45:45:5c:d8:b3:53:f2:82:ef:a2:39:64:57:1d:05:
         c2:d2:1b:98:d7:65:d8:c8:e7:a6:e2:0a:3d:8e:50:84:58:26:
         1b:8e:25:59:1f:0f:79:27:fd:a4:24:9c:2b:25:09:01:6e:f0:
         f9:75:a8:d0:80:c9:9f:37:d2:0f:ec:2d:c3:73:f8:a8:97:36:
         04:57:4d:65:e8:8f:68:c6:6b:1d:40:fa:30:35:54:30:fa:4d:
         a7:90:3f:0d:c3:e3:5c:7c:9b:57:ba:92:af:26:77:1c:36:33:
         89:d4:40:42:e1:64:0b:3a:4a:af:54:48:9e:92:e1:10:5b:d4:
         b6:85:70:69:c3:dc:3a:c1:56:c7:f9:ec:c0:24:0a:6f:eb:9a:
         43:24:76:3b:d3:d9:e0:ae:99:11:72:46:af:65:a8:2c:c9:d1:
         75:5d:72:aa:45:e0:0a:ce:85:9c:75:23:e7:2e:3c:da:c1:48:
         a0:24:a8:df:e2:41:3f:35:9b:59:de:9f:4a:08:f1:88:c7:17:
         c8:55:41:14:e9:15:1d:b4:34:9e:73:b9:31:6f:fc:69:cb:99:
         39:96:d2:2c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG
QURFNUE3Q0IwHhcNMjUwOTAxMDU1ODExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI1MzVmMy01OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIMnEDw8n/HqZo2WNB2jv4z7DCOkJxk7EcIYlT5Za0IQdXi9newL6Q6IrJxI
KbUTry++iKNrgq19ZZirmg1BufzFUIJJSyCQeaIodJAUEPMfe3uijB1NGMItjSNO
CqYtK5zHk7XGz26Y4M977GDv8IGd7Y4hn6FtcZm9iuhxeP2+bKuTfkci5g2cY7q+
MGVjQ7IvoOO8Xm57sxPDp/nbkJOt+1gTckCQ3Jz154LIOp80gdRVoGa3I0Z83pbB
1ivN5+M5yBSpHfAt5Gd88xux+SiSIFJ9+dd5x562j/WIS8g2t9H+N8BMRmamiZ1C
tzanZqv0iWcUGMaiNuhFPqucBwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHv2q6gR
FTEpW2jCnfDjFehWRwpaMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw
NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk4OEIvRjM2Qjc5QjA4MDc3MTFFQkI5MjVGMTU0QzRGOUFFMDIvQTQ0REJEODQ4
NkY4MTFGMEJDRTc0Njc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLBSEDBADLBSQwDQYJKoZIhvcNAQELBQADggEBAC44Dmop
3AJM1lL5l3PUnJbpP9Z22lyeybprAz+cJLx8EC/T8xIygkVFXNizU/KC76I5ZFcd
BcLSG5jXZdjI56biCj2OUIRYJhuOJVkfD3kn/aQknCslCQFu8Pl1qNCAyZ830g/s
LcNz+KiXNgRXTWXoj2jGax1A+jA1VDD6TaeQPw3D41x8m1e6kq8mdxw2M4nUQELh
ZAs6Sq9USJ6S4RBb1LaFcGnD3DrBVsf57MAkCm/rmkMkdjvT2eCumRFyRq9lqCzJ
0XVdcqpF4ArOhZx1I+cuPNrBSKAkqN/iQT81m1nen0oI8YjHF8hVQRTpFR20NJ5z
uTFv/GnLmTmW0iw=
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:01:54 2025 by rpki-client