Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/67CB5FC0629411F0B7FA070FC4F9AE02.roa
File:                     67CB5FC0629411F0B7FA070FC4F9AE02.roa (raw, json)
Hash identifier:          ezXoOJmaQ+T0/SBG+83qcx+7CgpMAs0wB76/qo16lME=
Subject key identifier:   D6:6D:6E:F2:94:E8:3F:2F:80:46:6C:B9:C0:E9:08:9E:11:50:F5:63
Certificate issuer:       /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial:       5E
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/67CB5FC0629411F0B7FA070FC4F9AE02.roa
Signing time:             Fri 15 Aug 2025 07:45:29 +0000
ROA not before:           Fri 15 Aug 2025 07:45:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132584
IP address blocks:        203.62.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
                          rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
        Validity
            Not Before: Aug 15 07:45:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689ee598-4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:84:bf:b9:ab:e3:c5:ac:cc:41:9a:2e:56:
                    fe:a9:dd:9f:ac:5e:7b:48:64:09:82:f3:eb:cf:c4:
                    e4:65:5b:7a:52:9d:e8:e2:e0:63:e0:80:8c:c1:50:
                    f0:79:9e:aa:56:1b:37:c4:95:e8:cb:f0:12:b5:1a:
                    2c:ac:69:7b:6b:f2:7e:5a:53:8e:74:30:f0:d7:d9:
                    6c:81:35:a7:4a:64:b3:a0:21:4d:02:b0:7e:2a:7c:
                    02:83:06:1a:c8:2f:b4:a6:9b:e8:65:9e:92:64:dc:
                    fc:13:7e:d4:da:98:b8:b4:67:34:67:47:8a:a5:ea:
                    cd:83:74:cf:b4:5c:d8:74:9d:22:bb:d5:70:49:e4:
                    9d:d1:cf:53:2f:3f:cf:9e:df:5d:85:cc:48:97:12:
                    79:e1:bd:52:17:ab:e0:ab:ea:bf:0b:ac:e9:5c:a0:
                    f2:87:91:2c:26:3f:13:bd:e9:89:ff:86:9e:c5:0d:
                    7f:9f:72:71:c5:3b:6e:8a:b0:f9:35:54:f4:a0:92:
                    16:50:21:55:9a:ee:cc:d1:c6:4d:d2:ef:3a:de:d8:
                    77:a4:42:8c:ce:9b:aa:f2:fb:68:2f:78:3b:67:4d:
                    37:51:67:65:f8:60:f7:57:50:35:d7:98:cd:a9:cd:
                    dc:2a:6f:cb:35:eb:a3:59:8a:5b:9a:5a:1b:69:e0:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6D:6E:F2:94:E8:3F:2F:80:46:6C:B9:C0:E9:08:9E:11:50:F5:63
            X509v3 Authority Key Identifier:
                keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/67CB5FC0629411F0B7FA070FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.62.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:b1:36:8d:52:33:06:3e:61:01:75:80:d3:0d:23:cb:07:
         33:d1:27:a0:bf:96:53:2e:6a:07:76:1e:47:ce:c3:b1:4d:e1:
         53:7f:65:91:49:5d:73:42:21:01:e9:95:0d:00:c6:33:4e:45:
         29:3f:7a:48:85:84:49:ff:f4:f2:82:d1:65:01:3b:ff:42:cb:
         f9:9b:44:20:c4:89:bd:d0:de:c1:4c:bb:fe:81:86:85:5b:f3:
         8f:1b:ad:97:e4:31:9c:71:74:6c:b4:09:17:d7:64:57:3d:2c:
         8d:6f:ca:26:13:4a:81:15:0d:43:bc:7c:0d:33:9c:45:f0:47:
         95:85:eb:44:7f:b4:b6:55:15:61:db:19:9d:c5:5a:fb:78:41:
         9c:91:b0:32:86:c4:84:42:14:b8:8c:3e:0f:6e:63:3b:c3:b4:
         67:ab:b4:ba:d4:be:77:24:c0:f8:7f:59:c4:1f:c2:d8:47:6b:
         42:b3:62:c1:11:9b:27:70:18:98:5b:49:23:2a:67:c3:26:c5:
         a7:26:06:2e:74:6a:a7:55:f9:a0:20:36:5b:03:17:51:5a:c2:
         50:04:b6:62:19:33:b6:49:6d:e0:c3:42:e4:0b:70:3c:b0:f5:
         19:53:76:25:03:47:81:1c:10:ee:b9:9f:f5:dd:01:11:48:3a:
         03:4a:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:47:57 2025 by rpki-client