Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
File:                     56C4B5083DF511ED98215F18C4F9AE02.roa (raw, json)
Hash identifier:          +v8nyn/Oe9RWJ3ghxJ4j4ajNn0CAMG8XWMdrSVotxhY=
Subject key identifier:   5A:AD:FC:B2:88:D7:E6:50:BA:7B:94:D7:43:B8:C1:06:B3:52:FF:92
Certificate issuer:       /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial:       02DC
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
Signing time:             Sun 05 Oct 2025 01:56:48 +0000
ROA not before:           Sun 05 Oct 2025 01:56:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9443
IP address blocks:        146.144.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
        Validity
            Not Before: Oct  5 01:56:48 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e1d05f-ed03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:fa:da:d3:ad:e9:a7:c0:6e:3e:d7:f9:6a:
                    10:cd:51:9d:7b:2e:53:42:0d:63:64:38:80:f7:e3:
                    14:67:d1:d0:fe:cb:b2:bd:28:1b:30:35:a8:27:0b:
                    86:08:68:bc:a2:e8:85:2a:55:70:47:93:bd:03:e1:
                    12:f8:25:98:03:41:22:6e:ff:10:50:10:f9:5e:cf:
                    3f:ba:61:fa:74:1c:90:3c:be:39:18:89:b7:47:47:
                    7c:00:f6:4a:55:66:35:4f:a5:42:57:12:d8:73:e5:
                    ca:5f:a1:6d:61:26:f2:04:97:37:eb:c9:4c:05:fd:
                    ad:57:71:05:8a:4b:c4:61:24:ac:d8:a3:36:5d:56:
                    2a:7c:3e:11:3c:c3:e6:1c:fb:0c:15:cc:37:a5:59:
                    0e:9e:f9:ab:77:df:5b:e0:b1:03:1c:0c:a6:8a:03:
                    1c:95:20:ea:56:3f:b1:5d:66:25:2b:d7:36:5f:a3:
                    74:8d:35:dd:80:f8:14:4c:d2:eb:2d:16:e6:6d:7a:
                    ea:fb:30:bb:03:b6:91:f8:8d:6c:81:e5:ad:31:a5:
                    94:11:12:38:10:ba:a8:7a:81:75:5d:64:ba:dd:d0:
                    96:05:9f:86:5b:f6:db:6c:14:8d:53:8d:59:6d:fd:
                    dc:50:f3:b3:da:98:3c:d2:96:3f:f7:a0:d6:8c:fb:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:FC:B2:88:D7:E6:50:BA:7B:94:D7:43:B8:C1:06:B3:52:FF:92
            X509v3 Authority Key Identifier:
                keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.144.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:18:26:da:34:3c:74:16:94:52:6b:b2:c0:59:25:3f:c5:91:
         73:a6:61:d4:3c:ae:d8:de:30:30:c5:66:02:ba:88:e6:4c:44:
         df:f1:37:ab:78:f9:9a:19:cd:bc:59:a6:c3:02:b4:b9:12:5a:
         ac:a6:a9:b7:d3:4b:44:76:39:5b:4c:0c:16:38:be:f4:b2:20:
         b5:76:cf:3b:32:7d:37:72:0f:cb:43:fd:5a:7b:3f:d9:c9:e8:
         d6:7c:b2:17:23:6e:5e:e4:e3:2f:c0:b9:87:ce:10:e2:b5:6f:
         41:af:60:46:95:95:3c:6f:dd:dc:bf:8e:e1:95:ae:57:73:23:
         04:e0:55:e5:a4:c5:4b:fe:e3:c2:fb:91:98:25:1a:d7:da:f4:
         c3:20:f4:d6:3a:98:76:f9:c3:48:ae:f8:b7:1b:ba:05:45:d6:
         c6:dd:5f:1d:2d:e5:d3:67:56:18:4e:82:26:76:3c:32:a5:72:
         3d:81:f0:db:2d:5c:81:91:58:a3:ce:ae:0f:1c:c4:65:b6:b2:
         18:06:ed:d2:cf:f6:03:b5:71:b3:e8:6c:2c:f7:e3:4a:2b:e4:
         1e:3b:0f:8d:3b:ee:43:4d:79:02:c0:fa:03:f6:68:f4:c7:ac:
         27:cd:a0:13:fd:43:3b:19:c2:d7:71:ea:3c:f2:05:a5:d6:95:
         d0:43:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:12 2025 by rpki-client