Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
File:                     8201D598AD9B11F080BD6B82C4F9AE02.roa (raw, json)
Hash identifier:          XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=
Subject key identifier:   73:6B:5F:AA:D7:7F:F2:2E:1F:13:17:C8:98:57:9D:17:93:41:0F:54
Certificate issuer:       /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial:       15
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
Signing time:             Mon 20 Oct 2025 09:59:46 +0000
ROA not before:           Mon 20 Oct 2025 09:59:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154305
IP address blocks:        45.117.84.0/24 maxlen: 24
                          45.117.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
                          rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
        Validity
            Not Before: Oct 20 09:59:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f60812-9c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:fa:c5:0e:51:b5:bb:b0:12:46:6a:c0:1c:
                    6d:01:47:d7:d3:d5:15:b1:c4:52:e2:22:e5:d7:c5:
                    77:b6:ee:9c:1c:b8:31:9d:01:0a:c6:75:cd:dc:f4:
                    ba:c3:b8:5b:b4:b1:c3:21:90:08:8d:47:4d:0f:80:
                    b4:c5:5d:cd:97:14:33:7c:56:1b:6d:62:aa:4a:d1:
                    53:df:66:10:25:69:8d:16:99:a5:31:96:83:6e:4f:
                    31:9b:e4:98:2f:1e:43:90:27:e3:b7:fe:b7:14:21:
                    86:02:c4:11:1e:27:74:44:25:c9:14:4f:b0:c9:61:
                    a8:5a:5d:26:ec:e3:90:e1:e4:16:cf:88:d8:72:31:
                    94:cb:83:13:5a:f1:d7:2d:0c:4e:4f:e4:61:35:97:
                    87:65:bc:0e:d6:a6:77:a3:3b:fd:ad:92:17:b7:a9:
                    48:d6:8f:ae:7a:2c:2b:fb:c0:a6:28:4c:35:2f:30:
                    ce:95:47:99:8d:4f:6c:ed:f6:d7:72:a7:3d:1b:45:
                    4e:19:e7:52:fe:61:6f:e3:53:69:92:84:8c:8a:ec:
                    0e:ea:45:5a:3b:33:9c:42:7b:30:04:bd:eb:b0:b1:
                    2e:ce:bc:c9:1d:c5:99:06:bc:fc:ff:52:e5:d2:12:
                    68:d3:66:5e:02:f6:f2:e7:e4:4a:f2:b5:68:02:9d:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:5F:AA:D7:7F:F2:2E:1F:13:17:C8:98:57:9D:17:93:41:0F:54
            X509v3 Authority Key Identifier:
                keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:30:80:db:95:3f:9a:74:fc:b2:2a:6d:2d:c5:72:44:3b:81:
         a1:d9:1e:19:7a:13:ad:da:56:37:88:8d:6f:8d:20:4d:ae:32:
         3e:46:71:da:36:2f:df:d1:50:3f:2c:2d:54:a8:c1:04:aa:a5:
         0d:23:f0:71:1e:38:a9:e7:4f:c4:7e:29:7c:5f:e9:8a:32:aa:
         13:1e:62:56:64:8a:bb:8a:83:c9:dc:73:ef:83:5d:01:cd:a2:
         8d:77:0d:71:9f:76:6f:ce:c0:c9:83:75:25:c3:01:2c:0b:1d:
         a4:02:8d:fe:2f:68:16:40:a4:fb:52:b2:ef:71:70:b8:01:a8:
         17:d3:ef:89:d7:63:27:05:01:56:48:c3:8f:f7:b1:28:bf:8a:
         fd:6a:01:61:d2:ed:0d:3f:9c:85:52:61:de:7a:23:ba:2f:f6:
         7e:36:c6:6e:43:94:35:5c:2f:80:65:87:07:1f:97:38:1e:d1:
         20:36:e9:d6:ac:5e:81:d2:b1:19:ff:fc:a7:f8:43:fa:24:58:
         a3:3a:2b:96:85:37:aa:29:22:a9:69:35:96:d3:87:cd:51:67:
         95:d8:82:2c:0d:d8:f9:d6:3c:d2:9c:91:be:fa:d6:a7:31:3d:
         02:ae:9c:8a:9b:69:f6:0c:e3:6b:f1:d8:14:19:0c:88:e5:71:
         e5:29:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:58:11 2025 by rpki-client