Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/E700770280E011F0B1480C47C4F9AE02.roa
File:                     E700770280E011F0B1480C47C4F9AE02.roa (raw, json)
Hash identifier:          QaG5/R6IEIVOIwkDTpG/SoihFaVnKZgGmAPTZkd0p/I=
Subject key identifier:   71:E0:01:F5:13:6A:87:46:04:00:5A:5A:61:31:44:36:DE:A6:F3:EE
Certificate issuer:       /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial:       0776
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/E700770280E011F0B1480C47C4F9AE02.roa
Signing time:             Sun 24 Aug 2025 11:53:08 +0000
ROA not before:           Sun 24 Aug 2025 11:53:08 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     154161
IP address blocks:        202.94.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
                          rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 22:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
        Validity
            Not Before: Aug 24 11:53:08 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68aafd24-1f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:79:16:db:d7:28:24:07:12:56:89:4f:c4:
                    9b:3e:a6:32:30:b5:71:3e:f7:6f:23:a7:d0:84:42:
                    61:80:87:3b:3f:3b:22:80:ab:d2:84:07:51:f4:55:
                    86:b7:5f:a4:82:17:1b:73:de:c1:ba:43:58:42:9d:
                    59:e3:e2:13:a6:84:5a:c9:73:d6:74:1e:eb:6c:82:
                    f6:a3:f8:8d:0b:ed:1c:e5:50:f6:b8:cf:f2:31:b3:
                    91:28:56:9a:c6:e2:e0:8a:01:6f:05:56:9b:e4:9a:
                    bf:5e:d3:61:9f:0d:98:f5:88:e3:d5:b3:88:ed:11:
                    58:d8:fd:a8:bb:ab:19:f9:c4:ae:ed:1a:b2:a2:b6:
                    a8:4a:ff:95:c4:df:90:cb:02:e5:a3:fb:c1:62:5b:
                    9c:11:85:16:0b:34:cf:ec:51:66:7a:94:70:0b:5e:
                    30:04:31:03:fe:79:54:c6:e7:72:24:46:ca:36:c5:
                    c9:c7:06:17:83:19:87:f4:e8:31:5e:6a:77:52:81:
                    1c:00:0e:a4:a0:bb:f4:ed:05:b7:b5:98:ed:97:f8:
                    9a:bf:42:11:31:13:74:2d:3f:78:4b:f1:d2:04:f7:
                    6a:c6:2f:25:83:ec:46:25:47:51:ce:6a:11:1e:08:
                    72:42:cc:dc:54:f8:61:d5:62:55:87:9f:dd:5e:86:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:01:F5:13:6A:87:46:04:00:5A:5A:61:31:44:36:DE:A6:F3:EE
            X509v3 Authority Key Identifier:
                keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/E700770280E011F0B1480C47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.94.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:da:d8:5c:de:05:40:7d:14:8e:0b:c6:3c:c4:9f:74:1a:9e:
         f5:15:16:a3:59:67:a0:4b:af:f4:84:d1:bd:c6:ec:ed:52:ff:
         46:8e:c7:2d:01:42:ff:79:56:d9:51:87:f7:01:23:81:d4:96:
         5b:19:58:03:87:ee:42:f1:11:00:3a:c9:7d:68:90:e8:7c:5f:
         2d:42:e9:cf:3e:ab:b8:9c:f3:62:02:99:55:71:f5:b3:05:89:
         97:e3:77:58:b3:fe:2c:db:bc:51:f8:c4:3d:d6:7c:e0:df:99:
         84:b9:e6:7c:4f:eb:27:11:3b:cf:ca:6f:18:fd:ea:d8:65:48:
         dd:67:9e:5e:df:73:15:22:cd:5d:00:80:b8:fc:92:cf:7b:52:
         ac:f0:c0:67:69:91:84:ca:7d:44:75:20:c0:6b:4e:f5:08:29:
         ea:53:83:7d:bc:7e:ef:50:df:b6:60:cb:ba:34:70:d2:6d:ab:
         74:fa:1c:6b:0a:80:ea:9a:1d:1f:ef:6d:df:70:2a:21:f9:eb:
         e9:c8:86:ae:de:5d:93:f4:5a:12:81:ce:46:1d:b5:92:46:c7:
         94:c2:b1:e2:3c:49:f8:35:b0:43:e0:97:3b:45:17:0c:d5:d5:
         be:ce:11:90:50:81:06:9e:fb:22:46:00:1e:e3:1c:e1:67:ff:
         1d:d4:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:00:33 2025 by rpki-client