Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
File:                     B2690D6CCA5511EE9683413FC4F9AE02.roa (raw, json)
Hash identifier:          YWkTzReKkMMdzbtmiqQAlufg4yqGT8wGaWwSjyH8UQU=
Subject key identifier:   2F:F8:BD:28:D4:79:1D:7B:7C:8D:32:30:25:72:EA:FC:C8:B9:BD:F0
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       3567
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
Signing time:             Fri 24 Oct 2025 14:30:25 +0000
ROA not before:           Fri 24 Oct 2025 14:30:25 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151981
IP address blocks:        118.179.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13671 (0x3567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Oct 24 14:30:25 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fb8d81-915e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:07:28:5d:76:1c:0b:5e:c3:e9:41:e8:51:
                    00:43:ff:fd:f2:d3:40:91:96:1e:f3:14:d5:ac:40:
                    b9:84:a6:26:9f:f5:6b:1a:47:e8:82:f2:4a:01:57:
                    46:cb:ed:a5:9b:af:15:97:94:b4:4c:8c:ff:8c:f6:
                    19:e0:54:d1:d3:38:cd:17:05:94:f1:7f:50:62:96:
                    f7:57:e8:3f:19:9b:d4:c5:1a:bd:22:11:e1:c5:45:
                    48:99:2c:bd:5d:fd:6e:3b:fb:75:27:19:8f:0e:5e:
                    38:bc:04:65:c5:2d:b5:7d:8e:7b:e8:35:92:9d:9e:
                    bc:e5:4d:cf:86:3d:a6:c5:79:b5:6e:9a:5b:1d:63:
                    9e:0b:81:c5:b3:0d:27:df:5b:a2:a4:ee:43:5f:ed:
                    fe:0a:1f:1e:00:2a:26:a8:f1:cf:4c:c3:aa:0e:9f:
                    1b:09:8e:71:f0:c5:45:4c:08:1e:fd:b0:6b:89:9d:
                    07:28:7c:23:3e:ea:4d:03:0c:65:5a:30:dd:56:81:
                    78:17:b6:18:d1:fd:7a:58:5c:8b:18:d6:7e:c9:4e:
                    cd:ab:a2:b5:c2:25:b0:36:63:7d:ec:2a:28:47:a0:
                    0f:08:df:0a:0b:7c:11:b2:53:4e:c9:c0:24:f2:d0:
                    51:f2:fc:46:7d:84:15:39:15:0f:d0:15:82:17:bd:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F8:BD:28:D4:79:1D:7B:7C:8D:32:30:25:72:EA:FC:C8:B9:BD:F0
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:61:f9:17:f8:73:c3:f9:33:5c:e9:bd:22:c8:78:90:99:45:
         0b:c5:7f:2a:d9:2b:74:10:b0:16:17:5b:70:05:04:33:72:b9:
         cf:7f:6f:92:b1:9b:f2:8a:f7:79:96:73:e7:43:3b:f9:f8:6b:
         a5:d1:89:1e:3e:dc:ba:5d:29:2f:be:82:63:4e:7c:6c:7f:22:
         4d:ef:83:a3:a8:a8:c8:c8:e8:2b:ce:38:a6:c6:89:3a:d5:02:
         0b:3d:34:b5:b7:1f:18:f7:17:70:27:c4:95:71:00:ef:5a:ea:
         09:52:75:ef:94:8d:0f:c4:1e:ec:3f:4e:1c:33:78:ef:a3:91:
         de:e9:25:ce:64:76:1f:ad:64:52:b8:c1:c0:b8:f0:29:31:ae:
         fd:76:4d:c6:b7:1f:38:70:6b:b3:11:5d:80:bc:36:47:07:fb:
         ae:cf:97:51:e8:9d:06:1b:11:3d:97:89:b2:4c:62:6e:e8:40:
         fb:e9:9e:2d:7f:3f:45:21:5b:5b:71:ac:bd:18:c5:29:58:98:
         ca:ee:69:a9:51:0c:9a:04:ee:a8:c1:8c:2c:f0:8d:12:3d:7e:
         f7:21:3e:31:71:84:61:7d:65:47:40:41:16:88:58:39:f2:9c:
         0a:7e:ae:30:5c:a5:6b:53:1f:26:2a:df:c9:1e:98:d9:22:dc:
         c1:dc:39:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz
RTY0NzMyQjIwHhcNMjUxMDI0MTQzMDI1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZiOGQ4MS05MTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6kHKF12HAtew+lB6FEAQ//98tNAkZYe8xTVrEC5hKYmn/VrGkfogvJKAVdG
y+2lm68Vl5S0TIz/jPYZ4FTR0zjNFwWU8X9QYpb3V+g/GZvUxRq9IhHhxUVImSy9
Xf1uO/t1JxmPDl44vARlxS21fY576DWSnZ685U3Phj2mxXm1bppbHWOeC4HFsw0n
31uipO5DX+3+Ch8eAComqPHPTMOqDp8bCY5x8MVFTAge/bBriZ0HKHwjPupNAwxl
WjDdVoF4F7YY0f16WFyLGNZ+yU7Nq6K1wiWwNmN97CooR6APCN8KC3wRslNOycAk
8tBR8vxGfYQVORUP0BWCF73UDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC/4vSjU
eR17fI0yMCVy6vzIub3wMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE
ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVGREUvQ0M0NUVDQTgxRDg0MTFFMjk1NkQwM0RCMDhCMDJDRDIvQjI2OTBENkND
QTU1MTFFRTk2ODM0MTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB2szkwDQYJKoZIhvcNAQELBQADggEBAHdh+Rf4c8P5M1zp
vSLIeJCZRQvFfyrZK3QQsBYXW3AFBDNyuc9/b5Kxm/KK93mWc+dDO/n4a6XRiR4+
3LpdKS++gmNOfGx/Ik3vg6OoqMjI6CvOOKbGiTrVAgs9NLW3Hxj3F3AnxJVxAO9a
6glSde+UjQ/EHuw/ThwzeO+jkd7pJc5kdh+tZFK4wcC48Ckxrv12Tca3Hzhwa7MR
XYC8NkcH+67Pl1HonQYbET2XibJMYm7oQPvpni1/P0UhW1txrL0YxSlYmMruaalR
DJoE7qjBjCzwjRI9fvchPjFxhGF9ZUdAQRaIWDnynAp+rjBcpWtTHyYq38kemNki
3MHcOWk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:09 2025 by rpki-client