Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
File:                     B6369EA2521711EE899DAC80C4F9AE02.roa (raw, json)
Hash identifier:          leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=
Subject key identifier:   D5:21:9F:71:7D:4C:9E:00:B7:F8:74:4D:5E:24:63:FE:88:52:C6:C9
Certificate issuer:       /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial:       0176
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
Signing time:             Thu 21 Aug 2025 01:38:00 +0000
ROA not before:           Thu 21 Aug 2025 01:38:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55769
IP address blocks:        167.179.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
        Validity
            Not Before: Aug 21 01:38:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a67878-52fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:c4:8c:e5:87:a8:a0:63:3c:f1:57:d9:08:
                    b6:c9:ad:00:c7:10:ae:cc:b2:f6:e2:21:15:4d:b5:
                    ea:74:a0:52:8b:18:3e:8e:29:55:2e:3b:32:07:47:
                    88:c9:92:79:70:2e:5e:7a:be:1c:54:22:05:66:61:
                    b2:14:af:55:55:eb:d8:62:6c:36:bf:b7:ee:7f:01:
                    2c:39:f8:2b:19:51:e9:ff:ee:77:b5:5c:9b:dc:c4:
                    ad:35:d5:99:08:45:e7:7b:b0:1c:86:d0:c4:da:38:
                    12:ba:92:7c:5a:3c:be:7d:43:80:eb:dc:e8:b7:fb:
                    55:0f:61:c6:e7:33:8b:66:d9:5e:92:73:71:d8:6d:
                    45:06:06:f6:ef:48:fd:3c:b8:46:07:3b:74:2c:de:
                    4d:98:3f:1f:53:19:7b:f1:ba:54:82:de:23:99:eb:
                    bc:dd:6f:7d:3a:bc:08:8b:3a:ad:87:f1:2d:7b:2a:
                    0f:3a:c1:05:08:f2:a7:04:d7:69:c6:c9:16:60:a0:
                    30:c8:6f:94:bd:33:1b:d8:82:80:30:b0:bb:be:97:
                    f7:d8:67:b5:7d:d4:9f:09:cb:a5:eb:ba:ad:3c:31:
                    29:77:7c:2a:75:0b:0f:9b:28:f2:12:42:f5:bd:43:
                    b3:0e:d2:1f:31:e6:22:d7:bc:1b:08:54:0f:2c:f6:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:9F:71:7D:4C:9E:00:B7:F8:74:4D:5E:24:63:FE:88:52:C6:C9
            X509v3 Authority Key Identifier:
                keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:89:f3:0a:21:4b:ea:45:67:eb:84:49:93:79:af:b0:32:d5:
         3a:dc:a8:82:98:da:a9:b3:c1:d6:9d:a9:28:37:d4:d7:ab:e4:
         85:4e:e9:00:7f:e6:6e:1b:48:e1:15:f4:ff:0c:73:6d:42:1c:
         05:d4:b7:81:3a:6f:a7:9c:8f:ea:da:51:c6:4c:8c:e4:e0:63:
         ad:67:6a:58:6c:00:6a:09:36:f0:c2:fd:f0:db:40:99:56:fa:
         7b:05:9c:4a:ae:c5:78:f2:b2:24:e1:6b:7e:51:db:1d:89:bc:
         b8:b2:37:9d:da:2c:e8:2c:e3:fd:55:92:7a:3b:58:d9:29:b9:
         93:77:fa:f9:45:64:81:f9:b0:b7:29:b4:99:2b:e2:24:0f:32:
         ff:c0:c3:57:0f:2a:77:7c:28:47:1a:75:84:2d:d4:82:9d:ba:
         0d:56:64:7f:85:28:75:81:63:62:ef:91:5d:36:04:19:7e:42:
         aa:a5:53:33:db:28:67:63:ce:c8:f5:50:ad:0e:ad:78:00:a3:
         6e:75:df:86:e8:3f:95:59:d7:1f:9c:bb:7a:eb:72:9e:26:09:
         d5:de:0e:fe:01:37:b9:33:de:b9:c2:80:e5:61:02:bf:ac:9c:
         17:b3:d5:d7:aa:4d:4a:8d:4c:d5:ea:76:0c:4b:0d:a4:3e:62:
         de:cb:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:03 2025 by rpki-client