Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/9EA96DF25D5D11F08A574048C4F9AE02.roa
File:                     9EA96DF25D5D11F08A574048C4F9AE02.roa (raw, json)
Hash identifier:          q6ZblRMV0uyhkappWvL+RGy5XexsiemwGej/lfgL9RI=
Subject key identifier:   FB:D5:A0:A2:DA:7B:C3:FD:5D:7C:0D:46:08:A5:7E:0E:54:B7:3E:16
Certificate issuer:       /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Certificate serial:       02
Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/9EA96DF25D5D11F08A574048C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 07:15:13 +0000
ROA not before:           Thu 10 Jul 2025 07:15:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154038
IP address blocks:        165.101.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
                          rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 08:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
        Validity
            Not Before: Jul 10 07:15:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=686f6880-7360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:31:93:f5:85:ef:04:67:e2:d3:b1:64:d4:
                    4f:33:88:2a:fc:10:55:7e:28:74:fd:72:e8:61:2f:
                    f9:ee:66:33:f1:ce:d0:22:2c:40:75:fd:36:70:3c:
                    04:40:84:d5:0a:b7:00:fe:f2:4c:0f:2e:5a:41:4b:
                    f3:08:a1:f4:71:90:8e:ab:75:cc:92:58:a3:04:ea:
                    47:06:f7:81:0f:b7:f2:10:b9:15:91:d3:b6:c2:55:
                    21:ca:b9:70:1a:94:53:01:2d:ae:f5:21:9f:00:bf:
                    5b:15:8a:b5:00:7a:e7:74:28:cc:43:88:46:55:27:
                    70:a2:38:cc:04:7c:6c:bd:af:20:1a:35:01:10:12:
                    79:ba:01:3c:f2:a9:90:89:4c:cf:46:20:f7:14:54:
                    6a:91:0a:0f:52:4a:4c:7b:30:cc:f8:55:b1:79:d0:
                    5d:26:a0:0b:c8:26:fd:f6:aa:79:4c:b4:05:9d:df:
                    ee:5f:61:11:97:7d:f9:31:b5:3f:61:ca:41:a0:3b:
                    53:51:29:a4:32:93:a2:f0:43:8f:0a:ff:d9:e2:5a:
                    1a:e5:d9:e7:99:24:a9:a9:0f:c9:31:ba:9a:13:0b:
                    73:83:89:93:5d:63:72:06:48:3c:d0:08:01:1d:69:
                    e3:4a:7a:44:c2:b1:6a:48:06:45:20:88:43:20:77:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D5:A0:A2:DA:7B:C3:FD:5D:7C:0D:46:08:A5:7E:0E:54:B7:3E:16
            X509v3 Authority Key Identifier:
                keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/9EA96DF25D5D11F08A574048C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:dd:95:2b:1a:41:6b:3d:9e:d7:55:06:98:5b:7e:5f:be:59:
         07:38:3e:ca:78:fe:bf:5a:3b:1a:8c:3d:9c:b5:a3:9f:18:97:
         9c:c2:d8:04:bb:2f:ca:0f:3d:8b:5d:f4:ee:7a:32:5f:2d:5c:
         d1:05:53:d4:25:90:c9:e0:ec:03:cb:c0:b0:cf:db:96:62:e5:
         b0:b9:a8:78:69:14:44:bf:0b:a6:f4:19:6e:80:f1:72:e3:65:
         61:2e:44:98:55:c9:af:77:19:14:1b:f3:47:a2:ab:ac:84:eb:
         bd:96:79:12:40:c5:7e:4f:c5:f8:70:d9:30:6f:c2:5f:ab:3a:
         81:fb:1e:b2:ae:d0:90:dc:aa:bc:34:dc:a7:1e:59:c7:e5:d5:
         cb:16:5f:96:a9:f1:0f:ab:65:54:d6:71:9a:15:77:e6:df:c7:
         1e:f2:95:94:2f:5c:88:1d:ce:3e:1a:48:21:80:8a:06:5d:34:
         ce:a6:ea:e5:d7:14:c6:07:5f:88:09:d6:57:d3:12:57:8a:d7:
         c8:77:17:59:06:bc:8d:cd:e0:f4:89:f1:37:24:ed:2a:32:75:
         23:5f:32:62:ea:8a:84:dc:35:01:24:e1:fb:c6:44:5d:83:5d:
         ab:5e:db:75:de:18:e5:39:b6:20:86:ca:76:b5:f1:1c:36:5c:
         45:1b:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:01:40 2025 by rpki-client