Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
File:                     A7CEC08691E611F0A8D76134C4F9AE02.roa (raw, json)
Hash identifier:          GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=
Subject key identifier:   CB:14:CB:A6:62:7B:E1:88:B1:B3:B6:2B:3D:99:75:CE:BC:B4:4F:A2
Certificate issuer:       /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial:       0A
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
Signing time:             Mon 15 Sep 2025 03:47:09 +0000
ROA not before:           Mon 15 Sep 2025 03:47:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141217
IP address blocks:        122.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
                          rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
        Validity
            Not Before: Sep 15 03:47:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c78c3d-8b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:dd:3d:f8:d5:0e:4b:61:5d:b1:fe:cc:a7:
                    27:e9:d6:9f:44:32:42:64:22:1b:f1:2e:ef:17:fe:
                    5a:24:c4:16:1d:7c:fb:d9:7f:47:04:d7:53:59:d3:
                    04:94:78:a3:cb:97:ab:e7:e2:e5:06:39:de:a7:67:
                    af:2e:4f:9f:75:f2:9a:db:16:88:af:0d:f6:9e:cf:
                    19:7b:6a:71:f8:cd:fb:60:9c:03:66:4f:82:b0:19:
                    01:27:9a:d7:d6:3d:c1:89:3e:75:e2:14:66:90:aa:
                    bb:2e:51:ba:1a:2a:54:c3:11:98:30:c7:38:1f:d4:
                    1c:f7:d8:69:d2:8a:b9:60:5d:ba:4e:3b:40:8c:2f:
                    aa:2c:b6:78:b3:3a:c8:b2:25:6c:53:58:6b:86:8d:
                    43:89:5b:91:84:bd:06:6f:ae:ae:e2:7b:e7:62:a5:
                    8f:09:4e:d8:ec:7b:b5:72:86:32:7c:fa:74:d5:9c:
                    d3:8e:80:45:db:7a:a6:2e:c4:43:d0:14:2a:94:8f:
                    b1:60:25:f9:fa:ab:29:db:1c:40:66:f4:04:2d:f3:
                    38:79:9f:cf:ad:c3:8e:74:b0:df:80:13:2a:63:77:
                    11:86:37:b0:38:b1:7c:68:a4:4e:1e:c4:19:c3:34:
                    e3:d7:84:40:3a:3f:ca:f2:3a:c4:48:f8:33:c3:da:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:CB:A6:62:7B:E1:88:B1:B3:B6:2B:3D:99:75:CE:BC:B4:4F:A2
            X509v3 Authority Key Identifier:
                keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a4:4b:bb:f8:a2:2d:4d:51:76:43:da:11:65:34:a4:99:73:
         21:4f:9a:14:a3:a4:1d:e0:85:82:e3:b9:cb:b7:81:89:6d:6f:
         46:72:0c:0f:cf:31:66:44:cf:0f:80:64:a7:a8:15:71:66:e1:
         09:3b:d6:51:fe:f9:e1:fb:3b:10:50:97:d3:6b:42:f4:b0:c2:
         67:6b:54:d5:22:65:c9:f2:3f:a9:6a:fa:85:21:42:7e:dc:89:
         98:55:f3:a3:d2:45:19:ef:f8:91:6f:e2:90:8d:62:4d:96:b6:
         c0:dc:ef:50:a0:b1:77:4d:66:eb:0e:c8:c6:59:2b:8e:40:60:
         c2:ab:c0:c8:c4:bf:6e:2f:f0:6f:67:74:08:e9:54:e2:cb:ba:
         13:d6:ab:ba:44:36:18:a0:ea:c7:74:a0:77:5b:52:b3:17:88:
         88:3e:bc:d4:6e:7f:a2:53:dc:02:a3:29:df:86:b0:52:48:5d:
         e7:5c:74:31:c9:5d:7e:58:91:cd:8a:52:53:be:dc:96:65:dc:
         95:67:fa:7b:4a:3b:6e:84:c2:b6:e6:5f:f2:f2:5c:25:b0:d3:
         9d:6d:f6:7a:9b:a1:e7:94:55:75:71:26:33:73:e1:23:8d:5d:
         3a:3b:6f:a2:70:84:2f:0c:98:d9:5d:37:31:0f:28:84:db:b6:
         f3:5a:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:32:10 2025 by rpki-client