Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
File:                     D6246110AA6F11F0AD515C63C4F9AE02.roa (raw, json)
Hash identifier:          RGGyK8DspBxTZffeC/YcsDxozPm/op0sIdvWa7dUrhw=
Subject key identifier:   B4:BB:BA:DA:12:79:56:3E:AF:C9:03:6D:F2:FF:DE:E3:36:54:3A:AE
Certificate issuer:       /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial:       83
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
Signing time:             Thu 16 Oct 2025 09:09:36 +0000
ROA not before:           Thu 16 Oct 2025 09:09:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139012
IP address blocks:        163.223.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
                          rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
        Validity
            Not Before: Oct 16 09:09:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68f0b650-7a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:9e:2f:a8:15:0a:12:34:bd:23:54:d6:28:
                    1c:da:fc:62:ad:5e:d6:b0:b3:d4:f3:89:94:c0:59:
                    48:b5:e5:90:e3:a1:cd:e8:3a:f8:6e:bf:73:65:0f:
                    b9:01:97:7d:ec:a7:f3:bc:da:b0:e9:01:7f:29:30:
                    5a:94:7d:a7:8f:07:6e:e8:76:12:a9:7e:5f:11:b0:
                    65:4e:a1:b4:b9:8f:cf:e3:ea:80:bf:cf:7a:4d:42:
                    a6:d3:73:a6:c0:e3:6a:b2:5c:e1:c4:7c:f4:7e:dd:
                    22:e5:4c:e8:dc:f8:dd:fd:af:03:9a:6a:4b:a3:9d:
                    5f:fc:ad:88:0c:12:ef:11:23:0c:6b:76:67:c0:0e:
                    7d:92:65:0a:3d:3d:80:e7:26:fa:a3:6e:5f:27:3e:
                    7a:b9:02:fd:ad:5a:b4:82:b4:00:9c:66:f5:23:f6:
                    6f:17:50:41:bb:a5:c5:1f:3e:3a:df:3e:7d:57:76:
                    c8:f6:f7:01:74:73:cb:8d:05:8d:19:ef:8a:a0:24:
                    3b:2e:f3:a8:5a:f3:2c:71:98:e3:ca:65:4c:54:09:
                    ce:88:d2:af:33:2b:3e:e3:e5:e3:15:88:87:95:63:
                    c9:86:ab:dc:c2:31:5a:45:e9:d1:26:1d:ba:b8:a0:
                    3e:73:03:bb:16:5f:a1:ba:c6:33:cb:ae:f0:ca:9a:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BB:BA:DA:12:79:56:3E:AF:C9:03:6D:F2:FF:DE:E3:36:54:3A:AE
            X509v3 Authority Key Identifier:
                keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:c7:f7:17:e9:82:c5:f9:19:0b:11:04:17:7f:65:42:da:d1:
         dc:fd:d4:b8:f7:54:8f:41:fa:2f:ba:77:cf:0d:86:eb:c4:de:
         97:57:66:83:de:ab:86:c1:ff:10:cf:f0:b5:78:85:b5:12:e4:
         0f:5c:95:4b:cb:5b:7e:95:48:d0:b4:6a:26:b6:30:fa:df:18:
         be:4a:f2:96:0a:3c:8a:80:1f:72:1a:ad:d1:6a:43:24:20:2e:
         2e:1f:6b:a5:5c:13:e5:4f:6f:3d:a7:51:08:1c:2e:4c:dd:30:
         8f:72:86:60:13:a6:9f:69:05:66:93:d5:d1:31:0a:55:6b:e2:
         9a:f3:0b:a7:90:a0:9f:0c:82:d3:07:af:6a:27:79:1c:b3:56:
         7d:9d:04:aa:36:48:af:ef:5c:70:74:d0:43:94:7a:6b:21:f8:
         a3:3e:c5:e5:4f:5f:1d:67:24:4d:ae:72:ce:83:aa:3a:92:b9:
         50:11:3b:e3:28:87:03:54:bf:e3:9a:28:b3:f9:67:d8:cb:e1:
         5b:36:59:51:1b:3e:8e:7d:40:ea:ea:b9:2c:55:2f:ab:12:af:
         e2:78:05:45:14:64:c9:08:ac:cf:dc:f1:a5:5e:ec:48:d4:8e:
         e5:06:ca:b8:ad:76:bc:2e:45:1b:2c:ac:e1:69:55:92:7b:71:
         89:09:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:07:26 2025 by rpki-client