Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/DF49649E502311F0B0E2C112C4F9AE02.roa
File:                     DF49649E502311F0B0E2C112C4F9AE02.roa (raw, json)
Hash identifier:          2nDf4kl+QCjYlm/6djp5GbC+THtT/PvBjM4VYtdyrHY=
Subject key identifier:   E8:B3:92:DF:47:91:AB:68:93:69:31:18:6A:D9:06:64:F0:88:79:A6
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0D8B
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/DF49649E502311F0B0E2C112C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:30:15 +0000
ROA not before:           Wed 02 Jul 2025 20:30:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     60721
IP address blocks:        14.192.137.0/24 maxlen: 24
                          111.92.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3467 (0xd8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Jul  2 20:30:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686596d7-9212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:d4:87:7c:36:59:2f:ff:24:56:62:b4:66:
                    b7:50:15:54:c2:35:8e:f6:25:df:9b:af:c4:8a:cb:
                    2f:3b:ab:c8:0c:ac:c2:fd:2e:d6:e0:f0:e0:15:ab:
                    ee:9e:4f:91:40:86:91:a8:dc:c9:9d:10:fc:96:21:
                    0c:e2:82:d0:6b:f2:45:02:97:17:86:f2:5e:2e:72:
                    50:9a:06:40:76:31:ef:59:74:ad:ae:e9:ac:0b:92:
                    13:73:51:d7:5f:3b:83:b6:3a:44:a0:a9:73:4d:e5:
                    ea:3d:c8:d1:3e:ea:0d:fb:83:58:51:fc:db:7e:fa:
                    24:1a:ef:96:4b:c7:fa:b8:8d:9e:37:91:48:e1:14:
                    ae:93:0a:7f:ab:a5:0d:3e:c5:50:4e:d9:07:7e:79:
                    62:96:c2:c6:30:ab:35:cc:ed:ec:ae:45:eb:d1:8a:
                    72:f3:9d:a4:43:b4:b6:4e:68:1b:99:47:a9:9f:19:
                    98:f9:79:38:a6:40:20:c7:7b:ae:54:87:7f:6a:56:
                    58:1b:30:5f:e3:eb:e5:d5:41:0c:51:0c:c1:f4:70:
                    21:6c:51:34:c1:bc:d8:58:dc:da:48:3b:10:3c:ff:
                    77:9a:89:1a:5f:80:b9:2a:f1:1e:76:14:21:7d:d6:
                    38:aa:5a:04:be:d3:26:a2:83:43:e3:87:2f:13:7a:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B3:92:DF:47:91:AB:68:93:69:31:18:6A:D9:06:64:F0:88:79:A6
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/DF49649E502311F0B0E2C112C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.137.0/24
                  111.92.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:30:66:0d:96:50:d8:0f:18:ce:ee:f4:84:f6:6c:cc:00:44:
         da:57:5f:8d:85:07:86:4b:ab:4c:a5:18:13:17:e0:5c:7c:cc:
         3b:d0:1a:d1:7a:a1:e5:46:c5:cd:fa:42:b3:c2:8a:19:40:27:
         90:84:3f:7f:a3:10:e1:9b:85:45:5d:f3:19:0c:5b:58:23:e1:
         fe:88:39:1b:1c:29:ce:c0:25:a5:c7:54:ec:15:d9:58:13:d6:
         b5:fd:6a:f1:30:5b:db:81:26:c0:fb:c7:38:fd:c4:37:3d:cb:
         ea:8f:ef:73:20:5b:e0:91:6f:44:d2:9f:47:5d:cf:c4:ae:22:
         38:27:a9:99:5c:70:66:d1:f2:c0:84:9f:bc:24:01:a2:98:99:
         ed:38:59:9f:af:cb:94:2d:57:00:91:4c:6b:98:27:a7:8c:06:
         59:e4:0a:03:eb:a3:68:32:ad:97:88:02:09:a8:6f:96:28:02:
         78:68:d6:fa:95:ab:6d:a4:70:e7:3d:6b:46:d8:1a:b0:6e:a0:
         7e:07:f5:fa:90:c7:5b:2a:70:7d:02:09:a1:49:ca:e9:fb:28:
         8d:53:a3:51:a3:a9:21:52:1e:a8:85:cd:7a:00:f2:26:9f:97:
         63:a0:01:3b:5f:37:8d:13:9f:db:de:aa:74:31:07:bb:a9:bb:
         d2:0e:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:15:15 2025 by rpki-client