Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/6028335E86F911F084A9FF7FC4F9AE02.roa
File:                     6028335E86F911F084A9FF7FC4F9AE02.roa (raw, json)
Hash identifier:          ttGRTVXm63FmqLPQgqhgqVrA4iCgFY4E8md2K51N5m0=
Subject key identifier:   87:7A:27:F9:6A:E3:D3:60:5F:6B:AC:3D:A5:11:35:64:7F:B9:DC:87
Certificate issuer:       /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial:       45
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/6028335E86F911F084A9FF7FC4F9AE02.roa
Signing time:             Mon 01 Sep 2025 06:03:27 +0000
ROA not before:           Mon 01 Sep 2025 06:03:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
        Validity
            Not Before: Sep  1 06:03:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68b5372e-a103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:41:b6:6f:c7:9f:6c:d3:94:68:ab:a8:40:
                    c5:d9:89:5a:c3:c5:ed:94:9f:eb:fb:c7:b8:ea:ff:
                    bb:c0:e0:59:18:96:89:25:2a:f9:66:37:4d:d2:34:
                    ec:40:74:4d:11:c9:d7:bf:46:71:f7:02:1f:4d:27:
                    0c:b5:7a:cb:19:6b:e0:25:3a:21:85:8e:50:d6:a9:
                    0e:c7:1a:19:17:dc:36:7b:b3:44:0d:8c:b8:b9:5e:
                    a4:2f:1a:ec:d9:02:ba:ec:20:94:7a:13:28:68:a3:
                    9b:f1:02:62:c8:30:37:f8:4d:e1:00:2f:53:1f:7a:
                    e6:a6:97:42:54:3c:b8:3e:e5:04:81:6f:52:71:5b:
                    79:29:76:cc:7c:1a:4d:6d:62:c7:59:f5:af:b3:dc:
                    20:10:e4:48:d5:34:fc:cc:63:8d:33:f5:4f:7e:68:
                    43:63:92:4e:7c:a7:77:ca:f2:20:e5:38:7f:df:84:
                    7d:4d:e7:b6:b8:86:4c:75:61:5f:1d:72:27:99:c4:
                    54:ab:14:7a:18:81:26:78:af:66:a5:eb:b8:a2:0d:
                    81:fd:14:62:a5:b2:ab:82:ef:db:65:96:60:64:24:
                    9b:65:90:7d:a4:17:ca:f4:0e:99:78:12:a2:c0:29:
                    0b:e4:51:11:20:e3:6e:22:da:e6:fb:ab:1e:77:9b:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:27:F9:6A:E3:D3:60:5F:6B:AC:3D:A5:11:35:64:7F:B9:DC:87
            X509v3 Authority Key Identifier:
                keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/6028335E86F911F084A9FF7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:b9:ee:fc:f6:a0:fb:46:8d:72:65:79:1c:43:4a:07:d0:
         e6:d0:9d:bb:b7:f3:14:64:61:ea:40:c6:a4:06:30:76:10:f4:
         fc:38:f4:de:00:e7:9d:a9:e5:fe:8f:c6:45:06:17:ff:f9:16:
         21:71:9d:b0:8a:13:6a:80:f2:47:d8:b1:a0:12:aa:5f:f9:29:
         ae:37:e0:30:95:e7:40:8b:d1:7e:7a:f2:39:a4:59:c4:42:25:
         73:04:41:3f:71:0a:16:1b:71:da:19:59:75:18:89:1f:1e:00:
         8a:d7:52:58:f7:bc:30:8f:da:8f:0a:06:b5:b2:7c:a5:d8:2c:
         1e:5e:33:1c:74:95:1a:1f:a3:92:c4:99:ea:f2:2c:16:b3:6d:
         4e:7d:57:cb:a8:94:a5:1f:8d:fd:55:f9:52:37:99:e1:c4:02:
         20:ce:2f:55:7b:a6:fb:66:11:81:4b:4c:a7:91:5b:dc:4a:e3:
         2e:a5:09:8b:e7:90:44:65:ad:f2:53:8c:3c:a6:70:06:9d:0c:
         be:97:d8:73:a1:00:61:54:9c:6a:c1:60:f0:f3:f9:4b:b7:78:
         34:b1:17:ca:6a:e8:5b:68:78:78:30:cd:af:92:fb:2d:fa:ef:
         26:f2:18:1d:b7:df:96:9d:44:e4:dd:7c:68:62:e2:83:ac:7b:
         7d:ec:2d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:34:51 2025 by rpki-client