Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
File:                     53224C1ADDA311ECA6964F20C4F9AE02.roa (raw, json)
Hash identifier:          437Z5enRuaQO92H2FAcbSA65gK3IxD6GTsjTk9iVKzU=
Subject key identifier:   D1:42:76:BB:BB:7C:D7:55:2F:4C:5E:85:5A:87:B6:6A:B4:BA:96:80
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       08B6
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
Signing time:             Fri 20 Jun 2025 21:18:34 +0000
ROA not before:           Fri 20 Jun 2025 21:18:34 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55286
IP address blocks:        45.249.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Jun 20 21:18:34 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6855d029-1c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:0e:7f:7c:ac:01:12:e3:1c:92:8b:8d:8a:
                    1e:2c:97:2b:4c:12:12:5e:da:cc:69:2b:fb:2b:ea:
                    1f:67:ea:29:10:01:59:75:42:ac:6a:de:29:c6:f9:
                    1e:99:01:ae:8a:d5:e0:25:3e:5b:e0:cf:b2:6c:4b:
                    5a:a5:db:51:2e:91:31:e7:34:0f:57:33:71:9f:ea:
                    db:38:d8:9f:fe:df:51:76:f1:2e:f7:64:0a:06:68:
                    5a:9d:0e:69:07:9a:a4:53:5d:79:22:ba:a0:36:2a:
                    20:19:6d:72:a3:56:0d:77:a7:21:cd:ec:ed:2b:34:
                    96:1f:62:a8:05:2c:ff:50:aa:f8:0f:68:91:ab:96:
                    83:ff:fc:8c:f7:9f:d3:50:01:5f:d2:67:d3:31:3d:
                    36:5a:a2:6a:3c:0a:66:f7:16:1d:0f:19:54:02:7a:
                    0b:59:85:60:9f:b7:4a:22:f0:b7:94:73:9e:bb:ff:
                    8f:66:4f:06:6a:82:1d:d1:a8:0b:09:43:91:1d:b5:
                    ec:d7:1b:85:57:64:f1:18:8c:55:e9:95:c0:9d:d6:
                    2b:d9:3e:d9:93:dc:f7:8c:4c:c5:dc:6c:ed:b8:a1:
                    49:ec:99:a2:0a:7d:f6:a8:4f:8d:e8:fe:fe:fe:fd:
                    93:f4:12:05:67:05:b3:7a:02:62:e5:e8:ed:bf:75:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:42:76:BB:BB:7C:D7:55:2F:4C:5E:85:5A:87:B6:6A:B4:BA:96:80
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:2d:ae:12:29:19:56:8e:60:82:93:2b:44:4b:32:3a:a3:
         61:0f:c7:3a:26:f4:91:e8:34:e2:ea:a1:e2:d5:4a:b3:c1:66:
         21:4b:4d:80:62:c6:48:fa:24:76:18:71:80:e6:79:57:5b:75:
         1c:8e:77:47:ca:22:0e:37:b5:17:ba:ec:e2:33:5c:a1:dc:da:
         de:99:22:3d:6c:e1:2f:64:e5:14:5e:a3:30:a3:9a:82:52:53:
         4a:ba:2c:7b:d7:f2:f7:db:1f:3b:02:7d:39:4f:9b:f4:29:ff:
         13:2c:29:f0:1d:18:f2:1d:b5:b7:bd:11:78:77:ad:db:d8:01:
         6d:e5:f4:13:79:16:f8:45:40:4c:91:77:69:e8:30:df:23:f6:
         f2:fe:e1:3c:9d:93:2e:82:67:a4:6e:13:b8:50:35:dc:af:6b:
         46:1f:54:06:2f:e4:49:ba:8e:96:ff:4c:22:c9:e6:22:14:ff:
         30:64:b7:d0:ef:07:8b:a3:26:60:30:b6:8b:dc:ef:02:07:90:
         0d:26:c1:c9:53:34:9d:92:5d:cb:fc:bb:3b:0b:1a:81:d4:e8:
         87:76:83:60:59:8c:e1:34:64:cc:10:f5:33:b9:ec:de:41:f4:
         3e:4b:d4:ed:3a:3f:ac:07:05:3a:e7:30:bb:c9:9e:22:fa:d3:
         b1:89:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:58:10 2025 by rpki-client