Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/D88B7AD48E3511F0A7463923C4F9AE02.roa
File:                     D88B7AD48E3511F0A7463923C4F9AE02.roa (raw, json)
Hash identifier:          T+Vddxi4ktePZ++S8jyGyy1zTkX61dK/stJxrjN0Ydc=
Subject key identifier:   75:9E:E5:80:22:B9:62:0B:70:6E:67:96:31:89:5C:BE:98:7C:95:22
Certificate issuer:       /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial:       02
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/D88B7AD48E3511F0A7463923C4F9AE02.roa
Signing time:             Wed 10 Sep 2025 11:03:57 +0000
ROA not before:           Wed 10 Sep 2025 11:03:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     45460
IP address blocks:        202.158.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
                          rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
        Validity
            Not Before: Sep 10 11:03:57 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68c15b1c-167a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:43:5a:41:f6:bd:68:fe:56:2a:53:40:6e:
                    c4:ea:cf:a3:5d:6d:d8:e5:a0:33:33:b1:64:cc:0f:
                    18:f4:a9:ce:6c:13:60:a4:ad:51:ff:77:a2:25:cb:
                    4f:7b:c6:a7:65:63:97:a4:42:85:68:cc:97:ee:0a:
                    4c:9f:82:e0:e4:d5:8f:d0:9e:40:c7:93:fd:21:e2:
                    b9:8b:33:13:eb:eb:34:40:0d:c9:a0:9a:6b:55:b1:
                    16:33:28:d4:e3:02:db:d2:dc:d4:78:9e:d0:bd:6d:
                    02:60:87:cf:4a:d3:8e:69:59:bb:52:e1:37:35:b7:
                    74:19:93:85:ab:a3:6e:01:da:85:52:96:f4:56:ff:
                    ba:31:02:ab:1f:40:4e:4a:61:77:db:9b:8b:ff:7e:
                    dc:4f:a4:0e:58:49:1c:0d:6d:3d:ec:dd:36:81:34:
                    5b:b3:28:2a:4a:cf:3d:9d:45:e1:7e:b7:4c:c5:4c:
                    8f:7b:1d:23:93:30:7a:12:07:d2:0d:c9:56:00:4c:
                    70:4c:a3:7c:d9:73:64:65:e1:e2:61:6e:5b:c0:a5:
                    3a:13:04:2d:0a:2d:b1:4c:e6:86:83:94:e5:40:f1:
                    4c:1c:dc:f3:b7:74:71:82:6e:64:f7:1c:aa:3a:64:
                    03:72:61:f6:28:c2:58:b6:33:0f:c8:64:b3:01:ad:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9E:E5:80:22:B9:62:0B:70:6E:67:96:31:89:5C:BE:98:7C:95:22
            X509v3 Authority Key Identifier:
                keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/D88B7AD48E3511F0A7463923C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.158.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:30:ec:32:27:2e:b8:b5:8f:1f:b5:2e:d3:d2:a6:c5:93:77:
         d0:e1:2a:b7:20:8f:dc:8a:bb:db:e2:6d:55:bb:5e:50:af:4c:
         a0:f6:ee:f7:8a:18:f9:f9:30:46:83:08:87:aa:28:ef:6a:34:
         81:ed:9c:54:c0:a8:32:d1:df:60:e9:6c:4f:31:e3:0d:4e:ce:
         0f:36:0a:d8:13:ff:66:60:85:d9:c0:70:b4:9c:0f:46:73:ae:
         66:4f:0d:f7:d7:42:ac:02:a6:a8:05:5e:47:53:ed:1f:fc:23:
         42:e5:45:dd:75:74:26:39:69:f5:2b:20:d1:a7:ac:2b:fb:03:
         78:ed:bf:98:25:06:ba:25:1e:6c:41:26:32:71:67:3a:94:e0:
         45:6a:23:33:6a:6a:9b:de:85:f8:27:5b:ef:73:f9:6a:8a:9a:
         8c:4a:b8:a1:9c:fe:0c:a3:94:c5:f4:ee:9b:e9:08:dc:89:c5:
         82:27:7f:df:c6:f2:76:27:ca:27:ee:fd:81:2e:7c:53:2e:c1:
         65:7a:22:a4:da:6d:f8:81:c6:62:04:82:0d:e0:5d:65:2b:42:
         41:05:af:10:e1:29:d5:67:4e:0a:f9:b9:23:49:42:09:e2:02:
         7b:47:25:48:45:97:ab:45:35:49:09:59:b6:c8:b3:12:95:d6:
         f8:3a:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:50:25 2025 by rpki-client