Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/73B93548ACBB11F0A6A95C35C4F9AE02.roa
File:                     73B93548ACBB11F0A6A95C35C4F9AE02.roa (raw, json)
Hash identifier:          tiPLQ6UwOBmRSjdHNAm3r1wM3ZHjl+6E4cyFMFmxwMk=
Subject key identifier:   27:E8:6E:2D:A5:C3:15:93:7D:20:DC:17:D1:B9:1A:F7:3D:40:59:38
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36E3
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/73B93548ACBB11F0A6A95C35C4F9AE02.roa
Signing time:             Sun 19 Oct 2025 07:15:55 +0000
ROA not before:           Sun 19 Oct 2025 07:15:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137409
IP address blocks:        202.73.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14051 (0x36e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct 19 07:15:55 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f4902b-737a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:27:e1:24:62:d0:7f:29:ee:d3:05:e2:69:29:
                    bf:45:6f:ed:65:f3:42:af:d6:2e:3b:08:3e:40:be:
                    9d:88:2d:3a:d8:0d:dc:3b:ab:e6:87:aa:4f:6d:06:
                    63:e3:84:71:50:df:6e:f2:a0:ca:e8:9f:f0:c4:dc:
                    a7:a3:10:ae:b6:bf:b7:50:90:2f:9c:a3:28:cc:1d:
                    99:45:b6:92:ed:1f:e0:5a:5e:57:17:db:38:a9:0a:
                    6c:d1:bf:e5:3d:bc:e7:7f:f3:18:6a:4c:26:a7:a1:
                    19:56:75:8f:f0:60:85:0f:1a:53:e2:7a:86:73:3c:
                    4f:2a:62:d8:45:12:79:d2:bf:bb:fa:63:8c:d8:ae:
                    66:e8:6a:1e:03:bf:a6:14:fa:83:7d:ef:1c:e2:a5:
                    d9:de:88:f3:6b:bc:4c:c3:10:86:37:d7:46:3e:aa:
                    24:76:27:66:8d:79:75:72:00:64:f3:67:cb:d0:1e:
                    ad:1d:87:75:73:9d:6e:2e:55:04:a2:07:d5:95:ca:
                    3e:65:8b:f7:68:80:8d:26:b1:62:d4:4a:0b:7d:7d:
                    c1:a9:11:ee:f0:69:22:6b:53:dd:ad:9c:e5:ee:1a:
                    94:2f:b8:22:63:15:00:19:87:a2:f8:9c:df:53:d2:
                    4e:ca:0f:2e:54:c3:f7:d7:d8:26:9b:1e:c1:f1:c0:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E8:6E:2D:A5:C3:15:93:7D:20:DC:17:D1:B9:1A:F7:3D:40:59:38
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/73B93548ACBB11F0A6A95C35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:e8:b5:2f:17:ce:5e:fd:f4:23:ff:b2:26:52:a4:91:a7:
         7d:76:d9:b5:08:5b:96:97:f0:37:47:0c:3d:d7:e4:24:3f:39:
         b1:32:11:5c:1c:d4:f8:f3:76:4e:60:6a:f3:e3:c4:e9:1b:f6:
         ea:34:f3:4e:a4:1f:40:0a:dd:de:3e:28:6a:38:48:ba:35:f9:
         2d:c1:5b:d7:a3:49:a5:fb:26:e7:10:f8:06:d8:ee:22:b7:ec:
         f8:5f:60:18:7e:0d:f2:53:67:c5:97:7a:59:a6:fb:91:51:32:
         6d:75:76:a2:66:30:aa:2b:d0:dc:32:77:9f:24:50:f3:d6:27:
         73:35:39:b3:82:d4:69:90:37:4d:9f:f3:26:0c:1b:09:87:4c:
         92:ac:46:43:d0:d2:57:01:76:3c:79:68:37:41:40:07:84:53:
         98:9d:5c:55:5f:c3:72:b5:57:93:08:07:0e:49:07:34:32:b4:
         9b:c5:2d:f0:e4:90:91:cb:6a:6d:e8:77:48:fe:5f:f7:e5:15:
         e8:c4:8c:61:86:55:ec:29:89:8f:90:4a:61:b2:8f:3b:34:63:
         44:27:29:dd:e3:48:77:c9:22:9d:6c:67:cc:ce:75:4e:44:9e:
         6f:45:1c:0a:01:0b:87:e6:d2:fd:bf:ff:39:f1:ff:c9:9c:3d:
         be:5f:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:27 2025 by rpki-client