Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F0D4053EEDCC11EF8C545F54C4F9AE02.roa
File:                     F0D4053EEDCC11EF8C545F54C4F9AE02.roa (raw, json)
Hash identifier:          suzv4bR3Lim2RuNL9FDgV8qqWJGiJu2491cktYmaiSE=
Subject key identifier:   A0:E4:C5:5D:1C:82:FA:8C:D4:D1:CE:9C:B8:1E:23:32:8E:00:FA:46
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0D83
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F0D4053EEDCC11EF8C545F54C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:30:08 +0000
ROA not before:           Wed 02 Jul 2025 20:30:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     213993
IP address blocks:        14.192.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3459 (0xd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Jul  2 20:30:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686596d0-2a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:3e:c6:95:7e:61:58:e2:35:1b:9f:ec:08:
                    b5:98:9a:d6:5b:67:df:7f:37:db:3a:51:24:f7:f7:
                    84:cf:e2:73:9e:80:60:2c:ec:7a:26:f8:7c:4e:ab:
                    b9:9b:f8:1d:20:9f:49:8a:55:59:ff:77:aa:63:26:
                    b3:7e:ab:98:23:5e:12:ef:fa:ff:7e:c7:aa:bc:6f:
                    e6:1a:8f:ea:bd:03:17:a9:69:32:6c:4b:1a:ee:96:
                    84:8f:8f:b7:14:4e:88:51:da:c0:a7:94:ac:43:73:
                    0b:c8:8d:eb:f6:42:40:1f:3e:a0:d1:70:29:e9:ca:
                    b6:18:3c:4e:75:fb:ce:3d:d9:bd:b8:13:b6:d1:92:
                    0c:d2:cc:14:6e:40:56:8c:93:14:91:08:fa:d3:75:
                    84:97:cb:6b:2c:0a:f7:e1:f2:85:45:64:a8:5c:49:
                    70:fe:2b:60:61:d1:af:62:cd:04:1f:17:54:78:f1:
                    bd:8b:98:b4:6d:4a:6a:c3:b5:00:4c:d8:c1:55:aa:
                    77:27:b9:f6:2f:df:8a:3d:15:04:76:1f:9e:b8:c1:
                    7f:af:a4:aa:60:bd:a8:fb:a5:b0:b3:a9:c6:50:fa:
                    1f:0d:cf:8e:5c:af:30:c8:65:bf:bb:c1:75:bc:7d:
                    5b:cc:50:04:13:ef:a5:a1:c3:81:b4:90:99:d7:35:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E4:C5:5D:1C:82:FA:8C:D4:D1:CE:9C:B8:1E:23:32:8E:00:FA:46
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F0D4053EEDCC11EF8C545F54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:b4:d6:58:2d:42:04:6f:a8:f6:1c:3b:3f:06:d7:c6:c1:
         e3:23:a3:4b:23:cb:6e:a1:06:73:e1:df:a6:a4:00:41:ad:50:
         5e:8d:00:cc:a7:38:df:b8:8b:4c:3f:e0:25:3f:57:ea:60:25:
         7b:d6:2b:05:df:f8:63:dc:49:65:3e:de:49:c0:47:56:56:49:
         0d:2b:dd:e6:19:7b:f7:38:ab:56:74:16:5e:53:5b:8b:1d:37:
         d0:91:ca:e0:96:c4:06:d9:7b:fd:2e:af:1e:fb:23:d6:ec:ec:
         4b:57:cd:e9:28:92:53:b5:3c:f4:3b:ae:5e:df:fe:42:03:8e:
         83:da:8e:c3:20:17:b4:18:15:9c:70:28:39:a4:f9:73:05:ce:
         e4:f7:b5:f8:e0:66:46:99:ad:3a:7d:4c:2d:c4:df:2f:e1:a7:
         54:7c:f9:04:44:a6:ea:8f:f9:6e:af:3b:a1:46:23:c0:18:d6:
         0a:ab:9e:74:db:57:87:a9:96:7e:cb:1a:4d:02:5e:08:d0:f2:
         44:15:80:2d:b7:2d:d3:0a:0c:8c:77:33:fe:24:0a:46:8c:87:
         42:20:ee:4e:95:29:ec:85:5f:a1:f5:62:33:0b:bd:f2:6a:a9:
         1f:cf:7d:e3:b9:9b:19:23:bf:ab:b6:22:72:e5:c5:d4:28:05:
         73:3b:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:12:25 2025 by rpki-client