Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7744CE40691111F0B8610780C4F9AE02.roa
File:                     7744CE40691111F0B8610780C4F9AE02.roa (raw, json)
Hash identifier:          Q0fWC3bPxRyRi5oWpOG3gRLSwXCGSgzCMGGkM6gBWnQ=
Subject key identifier:   B2:71:B4:D3:AA:A6:3D:F8:32:96:F8:F9:27:2C:65:E7:42:69:FC:CE
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       0841
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7744CE40691111F0B8610780C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 22:54:01 +0000
ROA not before:           Wed 08 Oct 2025 22:54:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136173
IP address blocks:        36.255.192.0/24 maxlen: 24
                          43.229.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct  8 22:54:01 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e6eb88-bc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:c9:1d:2e:89:a8:0a:33:2f:0e:08:09:aa:
                    ff:ab:cc:4b:6f:5f:30:a3:15:28:2a:c0:e4:b8:2b:
                    9c:74:e5:de:a6:6d:c6:f5:cf:8b:0a:82:d2:8d:82:
                    95:62:61:1e:11:94:b5:d7:a0:41:d5:f3:a2:9f:98:
                    8d:b4:c3:30:6a:bf:48:db:67:78:c2:2f:34:cb:45:
                    7b:71:c0:dd:cf:06:0a:b3:29:a4:7f:04:90:8e:d4:
                    9d:56:b0:6f:74:d4:60:e9:3f:a8:43:af:57:04:a1:
                    d3:a1:8b:46:18:99:84:42:a1:53:cd:0b:2e:26:81:
                    49:b2:04:a0:d7:84:8d:bf:95:13:03:12:ff:ac:68:
                    01:ed:11:7d:00:b0:03:b2:62:31:ac:a8:fb:18:18:
                    09:5d:d3:76:80:06:5e:44:a9:c8:83:d5:4b:93:0c:
                    ee:3c:31:30:fb:b8:7e:a2:33:ee:0f:64:45:64:36:
                    bb:49:a9:ab:87:54:73:c2:b8:ee:1f:60:53:98:d3:
                    c9:22:2f:76:17:5f:db:3d:58:60:a4:b5:37:c4:74:
                    c2:b8:f5:7d:52:7c:b0:38:3a:2d:57:41:67:3b:70:
                    cb:72:91:6e:00:2f:ce:0a:cf:14:4a:42:fe:25:25:
                    bc:8b:68:6f:15:8a:ff:f5:28:cd:6b:98:40:2d:21:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:71:B4:D3:AA:A6:3D:F8:32:96:F8:F9:27:2C:65:E7:42:69:FC:CE
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7744CE40691111F0B8610780C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.192.0/24
                  43.229.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:9b:85:1e:a9:3e:64:48:b1:57:09:df:2c:ac:bd:05:d2:
         d9:20:94:85:37:61:4c:0b:e0:69:24:84:69:35:db:88:c9:bb:
         ba:e9:d4:9e:f9:05:8b:c8:af:8c:43:6b:41:20:4c:90:3f:52:
         08:97:76:56:f7:46:51:2d:f0:49:35:a8:23:f2:80:d3:29:ae:
         46:c6:20:bf:3c:98:35:87:03:e1:c9:e9:af:59:b8:cd:65:16:
         a3:2f:c7:be:84:38:7d:f2:11:d9:09:31:94:72:99:10:03:5c:
         2d:f6:8d:56:19:5c:1a:d8:70:4b:57:96:71:31:66:56:f1:2c:
         07:98:37:9a:f1:03:8d:ea:f1:71:7a:ce:69:3b:f6:58:da:bd:
         03:44:10:37:36:6b:64:61:70:e4:c3:29:6d:a8:ef:20:c2:43:
         26:28:7b:c7:50:3a:13:18:07:ea:0b:71:f8:0d:7b:f1:5a:17:
         c4:d4:cb:15:61:00:5f:23:68:5c:53:06:ea:45:29:47:32:e9:
         f9:75:bf:74:3f:de:6d:73:a5:1d:45:82:8d:13:02:f7:b8:af:
         eb:b7:c7:9b:65:4e:4b:c0:db:1f:4c:56:d4:85:f5:11:92:03:
         d4:f0:2c:86:55:71:11:60:d4:73:7e:c8:98:41:70:02:66:df:
         8a:5a:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:18 2025 by rpki-client