Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/88E0DEC8507F11F09A42640CC4F9AE02.roa
File:                     88E0DEC8507F11F09A42640CC4F9AE02.roa (raw, json)
Hash identifier:          DTqIm8GiZbV74uZenoKAP4tZvCOqkDCAtb7Ryg/Bt7Y=
Subject key identifier:   11:4D:72:D7:40:DD:3D:6C:C0:38:D7:FF:D3:35:2B:B0:03:75:68:AD
Certificate issuer:       /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial:       1BD9
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/88E0DEC8507F11F09A42640CC4F9AE02.roa
Signing time:             Mon 23 Jun 2025 22:15:14 +0000
ROA not before:           Mon 23 Jun 2025 22:15:14 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     9432
IP address blocks:        132.181.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7129 (0x1bd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
        Validity
            Not Before: Jun 23 22:15:14 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6859d1f1-c7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:03:1e:5a:35:b6:0c:4f:c5:5f:07:f8:90:
                    34:83:65:e1:02:75:d8:36:6e:a2:32:8b:02:60:33:
                    19:00:82:9d:61:f8:6b:e0:b0:74:a3:21:3a:83:44:
                    77:71:60:3c:74:64:b7:f9:8c:f3:e2:82:25:a1:f3:
                    c0:2f:1f:38:e5:4a:74:75:e1:ec:b6:43:36:c4:d6:
                    e2:12:f2:a3:7d:65:48:d1:4d:b6:05:b5:70:5b:ae:
                    c1:61:00:d3:ac:bc:80:fb:17:be:35:53:0d:98:c4:
                    3a:4b:bd:23:25:bf:27:a7:7f:1c:b7:a3:04:b3:65:
                    73:ee:72:e5:39:8e:c8:79:25:f9:29:1b:ee:11:f4:
                    1c:e5:13:f1:d7:09:b5:03:e0:a2:ea:c8:fb:17:c6:
                    f4:4f:d8:34:b9:15:ba:11:23:e2:95:31:c6:c5:50:
                    e4:b9:c6:9c:e8:cd:69:63:47:15:a5:7e:58:c5:27:
                    8d:c1:22:16:bd:bd:3b:8c:49:63:15:b6:3f:54:1a:
                    a9:47:ea:ac:d4:2e:d7:fb:8c:43:9f:47:3e:cf:d4:
                    3b:d3:5a:31:f9:f8:4a:ad:be:68:38:73:5a:5c:7b:
                    2b:af:5a:ce:b0:5c:01:6d:1b:ab:09:c2:23:52:f9:
                    12:77:ef:08:8d:7f:be:6d:7a:05:f7:0b:1d:ed:46:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:72:D7:40:DD:3D:6C:C0:38:D7:FF:D3:35:2B:B0:03:75:68:AD
            X509v3 Authority Key Identifier:
                keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/88E0DEC8507F11F09A42640CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.181.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:96:0a:84:6a:4d:70:92:b0:56:1e:db:66:f4:b0:4d:6d:9f:
         33:16:81:42:2e:1e:6d:17:8a:b0:6b:b9:92:ff:53:44:73:ca:
         16:da:de:86:7a:14:e6:ef:3e:0b:fa:da:89:c2:81:01:39:c2:
         c4:e8:2b:b1:24:46:46:34:d7:44:c9:69:7c:79:db:40:ab:c1:
         1b:b5:07:49:e9:06:82:52:4d:5d:21:31:0c:2e:8d:0c:4e:3f:
         81:5d:eb:18:f5:86:7b:c1:e9:16:17:2c:f2:92:2c:c3:26:1b:
         ce:d4:1d:07:01:72:e5:b0:e4:35:fd:83:7f:77:db:f9:07:63:
         ba:30:0a:ba:65:1b:7f:56:e7:55:51:82:41:b3:a1:bb:ab:05:
         65:71:66:28:86:15:fc:87:37:97:bd:8c:26:db:55:d9:b6:d4:
         6b:30:24:54:16:82:5e:91:6d:d6:fc:42:fb:e3:a2:3c:32:9e:
         18:e1:76:b7:9f:94:f6:59:19:7d:fc:a9:9c:50:75:4c:de:ae:
         86:ab:94:fc:c1:b8:3d:08:e7:9a:0d:a3:6f:19:70:8a:de:2e:
         37:6f:02:a2:83:f9:7d:25:72:2d:19:62:23:94:2c:c8:64:2f:
         c5:85:f3:2d:08:22:38:80:5c:3d:d0:a0:d2:52:a9:58:93:ee:
         6d:45:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:12:00 2025 by rpki-client