Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
File:                     82A6D4C4373711F0B4C22F6AC4F9AE02.roa (raw, json)
Hash identifier:          rrVBYVrSFiqn3nLdHTxIyiA8PTcgPoGjeKcEaq4wMoo=
Subject key identifier:   CC:15:F2:28:E1:CD:4E:6C:84:E3:82:58:4F:F6:48:38:73:D4:3C:44
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       0249
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
Signing time:             Fri 31 Oct 2025 02:16:06 +0000
ROA not before:           Fri 31 Oct 2025 02:16:06 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        66.116.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Nov 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Oct 31 02:16:06 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69041be6-e4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:cc:37:ad:14:f3:66:cc:84:41:ec:af:94:
                    45:1d:06:a9:33:49:b8:13:c3:95:cc:a5:a0:f9:fb:
                    78:eb:6e:d3:2e:30:49:2e:24:23:f2:a7:62:54:8a:
                    03:21:2e:4b:f6:3e:f5:a6:f8:6b:60:d1:cc:b8:1d:
                    56:24:b4:6a:02:fa:98:e9:4d:5f:0a:48:53:56:17:
                    8b:26:be:7e:29:66:1f:70:f2:69:b9:65:ba:2f:7b:
                    fc:f7:d5:ad:e5:64:8c:41:6f:29:f3:8e:98:2f:5d:
                    78:a0:4c:f4:21:33:04:3f:cb:fe:78:9e:14:fd:55:
                    0a:69:59:17:13:4f:5b:a6:10:9e:20:49:c0:f1:cb:
                    bf:98:ca:b6:f3:c0:4a:0b:55:d6:94:8d:23:9e:d6:
                    6c:b6:03:ef:0c:ad:36:54:81:58:0f:0e:02:54:32:
                    34:cf:a8:3e:1d:17:c9:db:59:7a:2a:3d:44:01:06:
                    2c:02:72:bc:5e:4d:be:b2:de:a9:f0:83:b9:44:15:
                    7c:49:5a:ef:7e:3a:b6:09:69:e8:5e:9d:6d:c4:5d:
                    31:96:6f:38:5c:dd:c2:c5:3d:d6:f3:e6:93:95:bc:
                    05:bf:59:21:a8:0c:35:b6:70:79:de:a7:75:93:6d:
                    92:58:d1:ca:d7:b8:c8:82:bb:c7:4c:74:8f:56:5e:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:F2:28:E1:CD:4E:6C:84:E3:82:58:4F:F6:48:38:73:D4:3C:44
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.116.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:74:7d:79:ea:e0:05:eb:d7:bd:d8:89:3a:f0:20:a2:ea:
         3b:d0:19:45:e3:b2:27:45:55:8d:91:39:26:53:db:5a:aa:92:
         34:12:56:b7:50:cc:e4:61:81:f8:1e:8d:46:de:da:d6:63:8c:
         0c:7f:aa:6a:45:46:2c:2c:ba:76:dd:c0:f1:b9:63:bb:f4:0d:
         35:b5:50:29:a1:b4:e5:4e:ca:37:ed:04:87:50:38:67:ce:05:
         27:9f:c4:4c:3f:be:38:5d:00:35:e6:07:a1:a0:bf:12:a1:7c:
         9a:21:07:04:c5:1d:32:ba:27:3d:fb:3a:8f:e6:45:32:6d:c7:
         13:38:34:11:cf:92:f1:db:7c:34:d4:ad:0c:02:07:05:95:26:
         9a:4a:7d:89:c9:56:ac:36:cd:ff:e6:c4:b0:01:e0:ae:2b:67:
         61:98:32:d4:80:47:98:70:3e:a9:ec:55:de:ba:3d:45:69:a2:
         77:9e:7b:3e:0a:ad:66:a3:57:b9:c4:ad:a4:f8:92:e4:0f:1c:
         5a:36:b6:eb:f3:b2:3d:dc:cf:28:43:64:1b:76:7d:fa:03:81:
         91:5a:22:03:96:77:3f:ab:3a:80:66:6b:69:43:3c:44:86:3f:
         00:5e:b7:a6:41:f1:8a:30:67:b9:2c:96:c2:12:82:12:bb:42:
         f9:2b:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 01:57:07 2025 by rpki-client