Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
File:                     E6B3F23C041E11EA8A736F7EC4F9AE02.roa (raw, json)
Hash identifier:          YrBzsx8D0fOvnrE97Y0I7HnqAFhQ8Lr/bVnUo+wscZA=
Subject key identifier:   D5:27:F5:B4:D8:E1:06:9E:93:19:A0:00:4F:79:F1:D1:81:8D:3A:24
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1347
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
Signing time:             Thu 14 Aug 2025 17:26:46 +0000
ROA not before:           Thu 14 Aug 2025 17:26:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     19551
IP address blocks:        122.11.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4935 (0x1347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 14 17:26:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689e1c56-eaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:9b:a8:0e:65:5e:bc:fb:3b:aa:79:5b:6b:
                    68:b7:9a:ac:57:96:c9:8c:b1:f3:4e:cc:47:85:d9:
                    b8:0a:b5:a8:2c:77:0b:8e:1d:5b:17:db:2c:84:f9:
                    a3:0e:d3:2b:8e:23:0f:81:f5:14:1c:c7:16:d4:bf:
                    68:71:eb:38:78:16:eb:86:31:33:bb:6d:b4:fb:6d:
                    ba:c4:68:4a:e6:40:7a:ad:67:54:d4:4c:56:20:c7:
                    6b:4a:0a:86:ff:89:b7:3b:88:a4:ae:ae:69:77:2a:
                    1f:e2:b8:2d:cc:98:d9:03:ed:ad:7d:05:98:82:ec:
                    0f:cf:41:13:30:56:8f:4d:1a:64:9d:76:27:ee:13:
                    37:2a:5f:f5:0f:4e:3a:9b:05:69:d3:ee:fc:d7:c3:
                    c0:33:aa:e8:50:6a:c5:19:5e:53:8e:a1:67:0f:94:
                    e9:d8:14:27:6f:fb:90:63:8f:58:ef:2d:41:8b:f4:
                    11:07:2c:1e:39:c0:45:6a:98:a5:4d:09:4c:66:49:
                    61:5b:35:9d:9a:5f:5b:d9:57:92:e3:5e:12:18:91:
                    3c:5b:ec:91:45:6f:40:1c:67:cb:90:4f:90:6d:49:
                    58:9e:6d:57:d3:17:cf:c5:39:98:8a:82:78:3c:42:
                    7c:46:76:2e:88:b4:bd:4d:e8:03:cd:57:3c:25:ff:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:F5:B4:D8:E1:06:9E:93:19:A0:00:4F:79:F1:D1:81:8D:3A:24
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:44:97:67:70:a8:3e:82:c1:fd:ee:b4:7d:f3:90:fe:60:
         c5:59:77:06:cf:1c:63:0e:d8:6d:5e:d6:aa:8e:e8:31:98:01:
         85:a9:43:be:0b:8e:05:80:ac:20:8a:28:e7:60:4c:94:b1:7e:
         52:54:a7:33:5e:b0:8c:9c:61:64:b9:d6:13:47:72:5e:26:30:
         fb:9c:37:fb:2f:8d:8f:6c:46:cf:44:00:32:c3:e2:fa:b1:52:
         c7:d9:4a:a9:5e:a9:81:2f:8d:62:0c:63:21:83:e4:a8:2f:51:
         eb:73:10:da:d5:1f:0a:69:d2:5d:b9:c1:5a:94:0a:12:46:93:
         17:55:2a:26:21:c4:47:6f:c2:49:b9:11:90:ef:4a:21:08:88:
         73:a4:7e:cc:b8:8e:dc:6b:1b:1a:9b:f8:31:d0:dc:77:04:e8:
         c2:75:1e:e8:58:40:04:c0:3b:b7:ca:b7:95:72:3e:e4:1c:d5:
         4c:ce:c9:ff:1b:88:7d:39:63:e6:26:ef:61:09:77:a6:08:f1:
         74:c0:7a:79:3c:77:07:12:bc:d3:3b:bc:5b:ef:53:54:d7:7a:
         26:ee:f0:9f:2f:c7:64:19:92:e9:75:36:f4:ce:11:4b:5d:20:
         52:6a:0c:29:6c:d0:03:13:5d:58:fb:2b:fc:58:a9:c9:f5:57:
         5b:f8:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:41 2025 by rpki-client