Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0364F32650C311F0AD69A674C4F9AE02.roa
File:                     0364F32650C311F0AD69A674C4F9AE02.roa (raw, json)
Hash identifier:          ZjBcFYJsm9NqIE6kGl4wH5YAqgKmW/g41+UYExwZhmA=
Subject key identifier:   83:86:3A:64:C2:12:6C:C5:98:BC:47:E7:BC:20:24:0A:0A:99:E8:D8
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0D8A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0364F32650C311F0AD69A674C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:30:14 +0000
ROA not before:           Wed 02 Jul 2025 20:30:14 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        14.192.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Jul  2 20:30:14 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686596d6-18b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:f9:b2:02:08:65:ba:64:a0:dc:9c:ab:38:
                    34:18:0e:72:44:e0:46:61:fa:32:bf:da:42:d3:3b:
                    ee:d4:3f:58:13:cf:03:a7:0f:6d:94:9e:7e:c2:8e:
                    27:1b:70:93:9e:51:3b:55:9b:2c:f7:18:f8:6a:ab:
                    1b:02:aa:6f:35:58:a7:8e:b3:e5:bc:b2:57:70:f9:
                    45:bb:7f:42:c1:84:03:69:38:df:90:89:ed:5c:d1:
                    94:39:60:07:15:46:db:fa:e2:5f:83:17:cd:36:0c:
                    7e:e4:b9:f2:8f:2f:b7:df:11:54:ed:30:54:ae:d9:
                    00:a1:4f:41:19:b6:34:2b:a8:8c:21:99:4d:01:9c:
                    88:04:21:5d:02:16:2d:1f:2c:56:ca:44:e8:1a:80:
                    ff:8e:16:6b:f0:cc:47:9f:3d:90:00:ed:28:c7:51:
                    8d:79:ca:82:8a:d1:44:8a:27:fb:af:98:82:36:20:
                    5e:e1:57:63:55:52:3f:b4:3e:c5:b3:2d:ec:ea:1f:
                    23:69:10:88:48:31:25:96:8d:2d:22:5c:de:bd:ed:
                    a9:5f:b7:54:ab:84:cc:ae:ce:06:fb:e0:51:56:7b:
                    72:96:97:3f:0d:7a:e7:87:81:98:9e:d6:f6:12:99:
                    d0:6b:16:63:89:eb:3f:f3:91:20:21:14:10:12:c7:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:3A:64:C2:12:6C:C5:98:BC:47:E7:BC:20:24:0A:0A:99:E8:D8
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0364F32650C311F0AD69A674C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:09:0a:29:6e:24:7d:d1:98:01:1b:8f:87:56:bb:20:a9:
         a3:7b:1b:f4:49:73:82:de:ff:6d:fa:a8:e4:71:75:eb:6d:86:
         af:c9:0b:ae:84:c1:6c:59:98:de:97:94:a4:f7:50:2e:9f:97:
         a4:d0:7f:2f:6a:8e:8b:62:8c:3e:45:b4:d4:26:74:80:2a:5a:
         c6:da:f6:e3:63:26:35:42:e6:24:da:e1:78:19:e1:34:82:c5:
         49:6e:41:3e:32:4b:db:50:2f:6c:8f:1b:58:f4:83:ee:bf:2f:
         72:7e:63:1d:f3:11:74:81:59:e6:88:82:1f:28:95:8f:03:34:
         e8:d2:31:cd:ce:d1:2b:6c:20:a7:65:c3:61:bc:a0:dc:b8:61:
         bc:ea:55:c1:9b:5f:b6:f9:22:a1:48:9a:79:32:48:e1:ca:8b:
         56:f6:cc:59:d4:3f:dc:7a:34:48:a4:f5:a9:73:c2:16:c5:27:
         95:81:0e:5c:66:aa:19:39:1e:e8:46:55:07:87:a4:a2:a7:1f:
         32:4e:b6:05:52:e9:d9:c1:2a:73:b8:18:a4:a5:1c:eb:7e:ec:
         50:0e:d9:6c:90:13:d1:68:b3:84:39:87:b3:25:3e:51:a2:95:
         78:4b:1f:35:bf:ab:03:55:b4:12:79:08:8e:26:d7:b3:df:3f:
         70:58:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:16:07 2025 by rpki-client