Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/13D5D992979E11F08E996475C4F9AE02.roa
File:                     13D5D992979E11F08E996475C4F9AE02.roa (raw, json)
Hash identifier:          uqXdul36EDPRkEmn7F3Pi5w/fW3yUykVpbjNAjajNRk=
Subject key identifier:   78:F4:29:E8:E6:78:1B:C2:83:29:1E:AD:C2:8C:FB:1F:D3:6A:83:2B
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       0781
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/13D5D992979E11F08E996475C4F9AE02.roa
Signing time:             Mon 22 Sep 2025 10:22:44 +0000
ROA not before:           Mon 22 Sep 2025 10:22:44 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     150744
IP address blocks:        223.29.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Sep 22 10:22:44 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68d12374-2f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:0f:ac:1b:78:fe:aa:36:d0:98:99:c9:81:
                    3a:1e:e0:11:86:7b:54:05:82:69:9c:4a:4f:58:87:
                    36:39:e0:28:5b:a2:c0:a9:42:1a:a2:3f:3b:13:e1:
                    5f:89:6f:ff:e8:f4:7b:1a:d6:30:77:dc:be:4d:e1:
                    fe:6e:43:f1:3c:b9:d1:93:ee:bc:f7:a2:af:d6:f7:
                    e9:1f:35:b5:42:ce:6e:7f:3b:f8:f6:3f:e8:b9:ed:
                    8c:15:a5:3d:42:35:b3:66:a4:4b:45:07:e2:9f:34:
                    7b:56:71:fd:d4:80:83:1a:28:04:89:77:5b:73:f2:
                    c6:4b:8d:60:66:12:72:5d:ba:33:79:1f:a8:58:2c:
                    95:f1:9f:d6:fe:48:2c:5b:a2:76:24:18:7a:fa:12:
                    9f:09:94:ca:0f:30:85:d9:71:18:98:74:07:c8:3c:
                    33:f4:de:58:c5:ca:dc:b6:d0:8c:34:05:ce:ae:1a:
                    31:d9:09:aa:ff:e2:19:27:d5:0f:1d:cd:9a:eb:58:
                    64:eb:80:10:ea:8d:a5:8b:ee:7e:ac:34:02:96:30:
                    6b:a1:76:f4:be:40:f5:e5:0e:30:6f:fd:11:b1:98:
                    3e:a0:d3:b9:a4:2f:bd:2a:33:8a:3c:05:4b:49:37:
                    18:fa:69:6e:04:dd:fb:a6:88:92:65:45:89:71:ec:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F4:29:E8:E6:78:1B:C2:83:29:1E:AD:C2:8C:FB:1F:D3:6A:83:2B
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/13D5D992979E11F08E996475C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:17:e4:8a:e9:e1:d5:93:22:6b:56:e0:34:15:96:88:b0:
         0b:d6:12:f4:be:fe:72:44:78:52:cf:66:e5:15:0c:36:ce:42:
         db:66:40:0a:05:a5:a0:e0:94:1b:d8:a9:0c:85:39:0f:62:15:
         17:c6:04:b2:e6:28:ea:36:01:43:9a:fc:c4:84:76:ea:74:7d:
         8b:29:ec:9e:aa:c3:e6:42:d1:79:3c:34:3f:c7:bc:2d:a5:18:
         b2:70:23:55:2b:ee:7c:83:d4:c0:18:b8:8c:42:dc:17:2b:6b:
         47:0d:32:1a:71:e8:ad:71:dd:60:e9:57:d2:48:fb:8f:7c:e5:
         55:6d:bc:28:d1:2c:08:58:f5:bc:d8:37:42:b1:1a:bc:11:ed:
         9c:1b:40:ff:9d:28:32:f0:d2:e9:f5:29:10:49:db:f5:e6:ed:
         4f:43:25:e5:82:29:6c:2a:5e:97:dc:08:79:64:65:5a:eb:f6:
         48:9c:1f:5a:7d:a8:e4:3c:af:d9:cc:9d:f9:e3:d6:50:ee:2b:
         a0:a8:69:2e:50:91:9e:c4:b8:bf:c4:0f:40:4a:7b:71:4e:58:
         58:0f:ea:20:b9:d8:e2:3a:23:73:f6:33:20:59:92:b4:15:53:
         7c:6f:8c:75:5b:b4:36:87:94:66:cd:8e:64:24:5f:c6:27:10:
         f0:ad:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:31 2025 by rpki-client