Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
File:                     EAA5793C367411EF98F49F1CC4F9AE02.roa (raw, json)
Hash identifier:          1hUCax5WiGiWQgbYzegA6fFS1jIG16Os9zx/NpFktvA=
Subject key identifier:   FE:74:5A:7C:E0:AE:CD:68:55:E4:D4:84:0F:AD:E2:8E:D3:4B:90:3A
Certificate issuer:       /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial:       019E
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
Signing time:             Sat 27 Sep 2025 04:02:10 +0000
ROA not before:           Sat 27 Sep 2025 04:02:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151779
IP address blocks:        202.27.114.0/24 maxlen: 24
                          2001:df2:da40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
                          rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
        Validity
            Not Before: Sep 27 04:02:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d761c2-2bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:5d:c0:d9:6d:2b:9c:b5:f7:dd:92:2f:18:
                    69:3d:be:8e:6e:66:b5:7c:f8:c4:7b:94:e1:2e:fd:
                    f8:44:e6:d6:ec:45:70:83:6c:a0:82:0a:d0:81:1c:
                    ce:10:5d:cd:5d:ac:ea:5a:58:e1:df:90:3b:6b:53:
                    d8:75:da:0f:63:73:81:21:a2:80:1d:be:6c:10:e6:
                    c0:56:ff:da:51:51:bb:44:fa:7b:75:0f:b9:cf:21:
                    17:8d:3d:a6:c3:ab:b2:a3:4f:11:28:ef:8a:02:41:
                    6b:24:be:ed:4a:7f:f0:05:37:1a:c7:a3:21:47:41:
                    bf:bd:3e:da:c7:40:e8:e7:17:80:49:25:3d:71:52:
                    9a:92:1c:68:b4:0b:41:1b:23:55:e6:fd:06:5d:b5:
                    b2:e1:61:ef:b7:45:1e:51:18:2b:cc:f5:c0:cd:9d:
                    da:f1:87:be:a9:84:ff:40:0a:8c:0e:b8:98:a3:f1:
                    2e:91:f2:3c:b0:20:00:17:be:c8:45:c2:3a:b2:ef:
                    ac:5a:8d:d6:fe:fc:69:df:37:af:fc:99:df:f7:df:
                    18:d8:6c:88:e3:93:4f:d5:e2:ee:71:d6:86:d7:49:
                    69:f2:71:25:fb:4f:cb:d9:f2:65:46:18:aa:bf:c4:
                    11:2d:e7:44:d1:9a:30:f0:69:9a:eb:58:5c:78:c6:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:5A:7C:E0:AE:CD:68:55:E4:D4:84:0F:AD:E2:8E:D3:4B:90:3A
            X509v3 Authority Key Identifier:
                keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.114.0/24
                IPv6:
                  2001:df2:da40::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:9a:5e:05:19:4f:7c:b1:e7:8f:96:ec:04:61:b7:13:33:
         86:7c:a9:4a:1a:fa:e9:50:9e:af:53:7f:99:e4:40:ca:27:af:
         97:ee:c6:3a:78:0f:4f:ae:cc:bc:b3:67:5b:7d:99:2c:6e:02:
         46:94:e7:b8:d4:61:24:43:74:c5:e7:40:55:39:65:ab:47:4b:
         af:c4:92:3e:84:0d:c0:57:ed:70:5c:6a:93:a7:16:0e:b5:a7:
         e7:b4:3e:7a:8c:2d:e6:2b:e9:12:60:25:dd:33:65:da:4a:51:
         58:7b:15:93:f5:b2:51:bf:9b:a6:ce:2a:17:3f:ab:d5:26:70:
         e5:3c:8c:b8:ae:3f:c7:2e:e2:6a:de:5a:03:e6:2a:1e:5c:62:
         49:f0:8c:e4:7d:c7:73:86:8d:8b:72:24:e1:64:ea:78:e5:37:
         57:f3:96:dc:3b:20:23:25:62:4e:45:b6:27:ec:1e:0c:00:fa:
         5a:fe:58:0f:b4:15:87:91:e7:5e:90:2a:99:8b:1b:a3:31:55:
         9c:8a:da:ee:42:fb:70:5c:21:19:5b:39:cb:4c:4d:69:2c:07:
         6e:b7:3a:0c:a8:85:0f:a5:f4:ba:e6:f0:5a:43:b9:d2:0f:61:
         ba:85:29:55:97:95:23:17:cf:7d:9f:33:87:c3:5e:19:2f:c6:
         a5:03:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:40:53 2025 by rpki-client