Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/442749147D6311F0BC413466C4F9AE02.roa
File:                     442749147D6311F0BC413466C4F9AE02.roa (raw, json)
Hash identifier:          U/qMD7uylhtZUr24KZzqo+D5k35qqAvh49xpiigrEd0=
Subject key identifier:   7F:A0:5A:89:DF:89:4C:AF:C8:7C:EB:56:CF:45:B1:10:2B:79:9A:51
Certificate issuer:       /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial:       02
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/442749147D6311F0BC413466C4F9AE02.roa
Signing time:             Wed 20 Aug 2025 01:16:15 +0000
ROA not before:           Wed 20 Aug 2025 01:16:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38170
IP address blocks:        203.30.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
                          rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
        Validity
            Not Before: Aug 20 01:16:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68a521de-5fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:09:9f:6e:90:9f:0f:fc:29:65:45:83:01:e8:
                    23:bb:98:b0:3c:a8:cb:88:f4:f9:75:c2:a7:8f:0b:
                    7c:7f:dd:67:c1:95:bf:79:14:cd:45:50:5f:97:98:
                    e1:ad:1a:be:00:ca:78:9d:74:12:c3:1b:1a:da:f4:
                    dc:ad:94:19:30:ce:61:5e:b8:f1:8b:2b:32:bb:a2:
                    56:0f:d7:73:bd:bd:6a:9f:19:5b:6e:90:81:b5:8a:
                    31:80:77:a6:c4:3e:02:f4:5f:70:9a:7d:12:c5:97:
                    46:44:1a:c1:7a:c4:5b:2b:62:6a:38:27:2c:0e:2a:
                    e6:42:53:bc:86:47:62:42:c5:a7:4b:01:86:dd:f7:
                    ab:2d:a4:85:ef:91:8c:a1:28:0f:dc:d9:f4:0c:03:
                    a3:fd:e0:bf:07:7c:d1:14:24:44:a9:c1:34:0a:e8:
                    67:20:dc:70:c7:a3:4d:e2:a9:81:d0:d0:e6:0a:67:
                    fd:e2:63:2a:47:95:5b:9d:4a:24:14:ec:3a:4b:9f:
                    ea:9a:1f:1c:01:6c:9e:8d:97:f8:81:c1:04:63:55:
                    35:d0:99:31:f2:04:e9:02:13:ad:6b:01:5d:60:30:
                    11:23:8b:ea:ee:18:89:d7:e2:88:d5:9b:3e:a5:d9:
                    d5:b4:5f:00:22:76:b1:35:7b:75:3b:d6:a8:f2:bb:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A0:5A:89:DF:89:4C:AF:C8:7C:EB:56:CF:45:B1:10:2B:79:9A:51
            X509v3 Authority Key Identifier:
                keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/442749147D6311F0BC413466C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:a9:fa:dc:96:28:41:cd:5c:fc:a2:ed:81:bb:c7:21:97:
         88:0c:63:ab:52:57:58:4d:51:8e:24:bc:f5:5c:28:33:1b:b6:
         d3:9f:de:9d:4a:4b:77:da:5c:f4:ac:3e:9b:b9:0c:eb:63:6b:
         ed:e7:b6:50:b0:44:6b:91:99:93:be:ef:2c:53:42:4c:a1:b2:
         d1:f9:cd:91:56:1d:b5:b0:de:3e:5b:5b:1e:c2:96:c8:b0:c4:
         4a:71:75:94:e6:93:fd:2c:9b:ab:37:34:b6:5f:4f:bc:1f:67:
         64:51:e3:e5:ba:9f:b1:26:fd:ff:66:5f:96:be:d1:a9:b3:5a:
         07:bf:e5:9f:c1:9e:5e:e8:cc:75:fd:51:45:96:25:0e:09:5d:
         eb:0a:4d:87:25:96:85:f9:d7:7e:3f:a7:fb:24:ec:47:d5:f6:
         77:82:79:eb:15:da:a8:5c:bd:eb:3b:32:52:5a:b8:97:72:1b:
         73:e9:f1:d8:0b:96:02:26:f8:1f:7f:d5:d5:54:02:39:cd:a2:
         37:cb:99:84:fc:14:57:9f:8f:43:61:62:6d:9c:cc:f9:68:4b:
         95:f4:d5:8d:0d:ea:df:d6:4e:fb:5e:50:40:1c:18:bc:58:b4:
         4b:65:dd:54:08:85:35:d8:13:57:51:c9:fb:fa:ae:ea:ed:6f:
         9c:7e:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:39:52 2025 by rpki-client