Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
File:                     D44C47FE91D311EBBE8C7D54C4F9AE02.roa (raw, json)
Hash identifier:          av33nLUX0GDrb2SC++ABulsmTvMJTYGoXhRNYXEv87I=
Subject key identifier:   75:C0:FB:A1:3E:8C:E6:94:9C:17:8D:1C:D0:42:CF:32:A9:E4:8D:AA
Certificate issuer:       /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial:       0642
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 23:01:58 +0000
ROA not before:           Wed 04 Jun 2025 23:01:58 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58666
IP address blocks:        202.12.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
                          rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
        Validity
            Not Before: Jun  4 23:01:58 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6840d066-58f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:16:b2:7c:b3:f8:ce:86:4c:76:5d:43:ca:
                    22:a2:86:aa:4a:c7:94:c7:aa:18:ca:31:77:13:38:
                    80:2f:86:fb:aa:6f:3a:6b:79:e1:c2:c8:0c:db:90:
                    93:89:f1:77:0d:5c:a5:f6:3f:7f:6d:de:85:76:40:
                    a1:dd:2c:07:ee:ed:2d:da:e6:09:7f:b0:aa:23:68:
                    50:52:5c:11:d3:2f:0a:c8:46:fb:78:7e:64:c6:8b:
                    1f:2b:de:31:f5:c5:d5:50:4a:5c:42:18:bd:66:93:
                    9f:c9:ee:23:5c:4e:fd:92:f2:7d:19:59:3e:1d:9f:
                    fa:13:03:ec:da:24:31:6d:85:83:bc:b3:1e:47:18:
                    39:48:7f:8d:16:7e:1e:76:01:0c:d1:82:8a:72:83:
                    e6:90:68:ca:93:bb:00:32:04:0f:76:82:b6:a9:1b:
                    65:1d:a9:df:a2:0a:6f:5c:08:30:ce:e8:2c:a3:d4:
                    45:2e:23:dd:5d:fb:15:96:a1:85:7b:a7:19:a0:59:
                    79:67:08:b6:a6:6e:2a:a1:bc:55:a7:1b:47:a6:66:
                    4b:1c:a8:1f:3c:9c:d6:80:c4:3c:70:2a:89:68:af:
                    34:ab:f5:04:b1:70:43:d6:40:8b:7e:c3:1f:61:e3:
                    f9:11:af:e6:78:a4:c6:bc:40:94:bc:ae:ef:cb:2e:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:FB:A1:3E:8C:E6:94:9C:17:8D:1C:D0:42:CF:32:A9:E4:8D:AA
            X509v3 Authority Key Identifier:
                keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:19:98:97:c3:d6:20:78:5f:5e:ec:38:3e:5a:96:d5:9e:
         3e:03:41:36:e0:8e:1e:30:13:a3:c4:e7:e0:96:b9:31:c3:67:
         3e:ba:ed:cf:06:76:6f:42:fd:8f:be:08:3a:4b:6a:12:37:a2:
         72:62:24:59:2d:db:b1:2a:a5:6f:fc:cf:56:d2:55:4c:cf:a7:
         8d:d3:23:cf:19:73:a3:52:f3:aa:39:f2:26:c7:ac:02:a9:cf:
         ac:d8:53:7c:6c:d4:97:bc:c3:68:68:24:40:35:80:ad:7d:cf:
         c3:a5:55:cd:37:ab:25:c4:b9:4b:7b:42:8d:a9:7e:b0:fe:10:
         3f:6c:ed:4f:5d:be:61:d4:4f:ad:ad:19:53:97:64:ca:8f:1f:
         62:c6:4f:cf:e8:3d:72:a3:74:04:28:0d:a3:b1:5b:90:d0:df:
         9a:3b:1e:7a:0f:e4:e8:21:7d:79:3c:de:72:b9:06:4e:ac:c1:
         f8:0b:eb:fc:e9:86:18:91:8a:6c:c9:8a:d9:2e:08:09:39:15:
         ee:3f:97:b4:14:07:fe:8d:0d:9f:1f:e7:88:3b:d1:a5:da:ac:
         3c:eb:cc:23:c5:fa:e6:a4:43:40:f7:4e:32:77:0b:98:4e:6a:
         b4:e8:c2:22:8c:59:83:57:71:81:32:94:4d:1b:82:29:f0:41:
         45:51:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:18:41 2025 by rpki-client