Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/F91331C4796E11F095D14275C4F9AE02.roa
File:                     F91331C4796E11F095D14275C4F9AE02.roa (raw, json)
Hash identifier:          6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=
Subject key identifier:   74:D9:69:B7:53:F3:7F:17:85:55:CF:E9:FE:8A:81:67:4B:05:AA:DC
Certificate issuer:       /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Certificate serial:       02
Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/F91331C4796E11F095D14275C4F9AE02.roa
Signing time:             Fri 15 Aug 2025 00:29:58 +0000
ROA not before:           Fri 15 Aug 2025 00:29:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154127
IP address blocks:        210.56.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
        Validity
            Not Before: Aug 15 00:29:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=689e7f86-1b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:30:d7:c7:54:27:a6:3b:a9:9a:1d:07:38:
                    c9:76:30:88:f3:57:c9:cc:ee:55:91:e6:0f:7f:da:
                    72:2a:97:41:db:0d:f8:2e:c5:9b:ee:e0:41:46:83:
                    9f:c2:94:e9:14:fa:3d:13:82:93:4e:35:fb:b9:76:
                    fb:31:6c:70:9b:6d:29:4d:69:35:87:54:38:a1:b0:
                    9c:5f:7a:bc:b2:fc:ba:8e:5a:10:5d:4c:98:6d:7d:
                    31:3e:7a:ff:a5:0b:84:0f:4b:b9:ff:53:92:08:60:
                    2a:41:66:f2:e0:68:46:6b:01:90:42:05:cd:92:ee:
                    10:ec:71:68:df:34:18:3f:c5:ef:17:75:bf:62:f6:
                    55:2b:01:a6:07:fd:9b:b2:90:b2:de:f3:dd:b4:8a:
                    c5:9a:de:0a:d9:24:00:45:53:b4:ae:a3:3b:20:b3:
                    42:33:d5:b4:e2:63:a8:31:15:99:2c:5c:33:12:3a:
                    c0:b2:7a:b6:41:14:1c:0b:db:9b:3d:b6:b1:35:db:
                    08:69:a7:de:62:6d:cd:f5:f5:51:c1:9f:1c:5b:d6:
                    b1:6a:59:22:79:55:5b:10:29:75:91:95:1d:0a:d6:
                    15:be:fd:5e:42:ad:a2:e5:e2:f0:c2:7f:eb:eb:af:
                    fe:1d:7c:3a:1f:a2:bf:1f:ee:78:f0:f7:f4:8a:cf:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D9:69:B7:53:F3:7F:17:85:55:CF:E9:FE:8A:81:67:4B:05:AA:DC
            X509v3 Authority Key Identifier:
                keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/F91331C4796E11F095D14275C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:de:c1:7b:f5:5d:45:14:e1:1a:a6:91:53:8d:f9:70:f9:c8:
         61:b6:c9:da:23:d1:10:77:76:da:57:ff:53:e7:34:ef:5d:7b:
         6f:fb:ad:b2:b7:e7:ea:00:c7:65:dd:3d:90:0c:ba:9c:9e:5f:
         e0:a2:4a:1d:14:ce:7b:b5:14:d3:5c:6e:bd:88:44:c0:0d:e3:
         6e:ef:a9:dd:51:b1:82:c7:f4:54:08:42:ab:4d:59:fd:6b:57:
         8c:04:a8:b9:2f:1e:36:fe:46:11:ef:36:69:dc:3b:d1:f2:50:
         b8:e6:2e:bf:38:59:cd:af:fe:7b:aa:3e:87:7d:1a:91:50:7a:
         97:1e:e5:12:d7:28:ec:d9:b7:84:4d:22:67:47:85:70:bb:3a:
         69:23:90:ff:7b:98:9d:25:27:aa:31:24:c7:9f:33:25:86:33:
         51:0c:36:ca:e0:fb:f5:3c:e4:64:09:94:c8:2c:5e:f4:f7:3c:
         b7:8e:d0:7f:72:25:bc:e8:9d:ad:0b:54:02:c4:b9:32:f4:88:
         b7:de:ec:4b:40:94:cb:e1:82:4f:3e:26:73:c7:55:b4:b3:6f:
         77:2f:d4:f8:2a:02:82:6a:cb:3d:61:a4:b7:da:26:ac:dd:a2:
         3a:09:82:6c:40:ad:85:33:5b:25:54:10:2b:f0:37:98:b5:c7:
         2b:9f:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:42 2025 by rpki-client