Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D26B4EE8070A11EB90C85C2BC4F9AE02.roa
File:                     D26B4EE8070A11EB90C85C2BC4F9AE02.roa (raw, json)
Hash identifier:          THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=
Subject key identifier:   BB:62:D0:AC:C0:2F:46:72:A9:1F:5D:0D:D5:2D:4E:69:1B:8D:5D:21
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       31DC
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D26B4EE8070A11EB90C85C2BC4F9AE02.roa
Signing time:             Wed 30 Apr 2025 15:52:23 +0000
ROA not before:           Wed 30 Apr 2025 15:52:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38529
IP address blocks:        203.199.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12764 (0x31dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68124737-ba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:7f:73:41:6c:77:9f:e0:f7:76:c9:63:c0:
                    2c:fd:71:b0:09:71:9b:6b:06:96:03:02:fa:14:34:
                    71:75:14:70:dd:5b:97:15:33:73:2d:89:72:77:c0:
                    00:3a:0f:7d:c1:cf:88:30:2d:38:90:dd:4b:fd:5d:
                    b8:8c:02:62:0f:b6:13:b7:fc:34:be:51:a2:ec:99:
                    58:e9:c2:73:a2:32:c1:11:51:a1:d5:25:88:b4:c2:
                    dd:82:b4:d5:40:a1:ed:c3:0e:41:80:53:5c:ee:5d:
                    27:8f:b6:20:4e:52:7f:2d:f1:85:90:9c:d5:37:0e:
                    0e:47:38:58:49:92:08:af:7f:db:c7:18:90:5a:c5:
                    07:38:b5:a2:a8:f7:cb:82:53:d9:98:aa:f7:e8:6a:
                    d5:a3:89:40:a9:e6:15:b7:fd:13:7c:91:f6:6d:9c:
                    25:e1:77:82:ee:f1:63:92:5f:5c:4f:3b:4f:16:70:
                    23:b1:33:57:96:8e:94:f8:8c:e6:d0:d6:9e:fb:2c:
                    62:94:1f:ec:de:b1:0d:99:9e:14:a9:29:67:1f:5a:
                    39:ff:4c:a2:e6:e6:f6:f2:b4:28:2d:e3:06:41:8c:
                    2d:34:19:a1:2a:da:62:3b:f0:f4:d3:fa:16:db:49:
                    ce:99:8f:81:b1:2b:98:56:5f:85:08:01:a3:62:6b:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:62:D0:AC:C0:2F:46:72:A9:1F:5D:0D:D5:2D:4E:69:1B:8D:5D:21
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D26B4EE8070A11EB90C85C2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.199.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:67:6a:83:0c:19:6a:f7:e0:ba:19:06:ea:f9:fd:b7:a9:50:
         c2:4a:17:ab:bf:f6:e9:c2:be:b6:04:82:f3:fb:67:7b:ac:73:
         ee:43:a1:aa:34:b1:02:4d:52:e3:e7:bd:21:17:d2:df:0b:cb:
         d2:34:31:ed:84:27:0c:12:1c:0b:f7:41:d9:3b:9f:e8:a5:ed:
         c3:ff:4a:23:e5:bd:b0:30:f3:89:b6:38:4f:56:d4:8b:f4:8c:
         27:5f:97:9f:e9:0a:de:57:f2:2d:d8:03:01:07:91:89:be:07:
         7f:53:73:f5:0d:ff:61:d0:2e:8b:9d:ac:63:b8:18:91:e9:d5:
         6a:44:15:5f:8e:71:c0:de:eb:b9:56:10:a7:d3:66:bb:40:41:
         7c:21:b4:7d:d6:b4:45:9a:e3:d4:67:95:53:21:f8:02:f6:04:
         a8:96:ae:80:11:d5:00:a4:86:09:c5:f0:33:2d:66:cd:7a:2d:
         4f:dc:80:1a:33:1a:50:79:dd:fd:3b:de:7a:1a:30:ea:b2:8e:
         b8:a7:d6:fa:7f:55:33:93:06:62:f5:a5:b9:49:75:2c:d6:12:
         41:4a:f6:8d:5c:50:6c:07:8b:2f:d0:9d:13:b9:0d:73:98:2b:
         11:6a:d7:d7:41:b9:f2:35:d6:b1:0b:93:94:5a:c7:02:95:7d:
         7d:26:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:46:41 2025 by rpki-client