Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/37B56C103AA111F0AB9C9C63C4F9AE02.roa
File:                     37B56C103AA111F0AB9C9C63C4F9AE02.roa (raw, json)
Hash identifier:          7McDM53x18516IO6Lyt3v+d1E7mua3h325oyeNt73ZA=
Subject key identifier:   1F:00:66:9F:15:51:AC:F9:CD:31:F0:07:DA:27:95:0D:2B:80:C5:26
Certificate issuer:       /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial:       019F
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/37B56C103AA111F0AB9C9C63C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 04:11:02 +0000
ROA not before:           Tue 19 Aug 2025 04:11:02 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     18081
IP address blocks:        193.117.0.0/19 maxlen: 19
                          194.223.192.0/18 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
        Validity
            Not Before: Aug 19 04:11:02 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a3f955-c65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:4c:3f:b6:89:cf:d6:77:3c:9d:90:8a:f8:
                    2d:a0:b0:61:93:ad:e0:c1:dc:b7:75:3b:d9:8a:ee:
                    a0:97:e2:a2:39:05:3d:f2:7b:a7:11:52:eb:65:1c:
                    24:9f:13:39:92:d0:b3:00:c1:b2:79:d1:be:c2:ab:
                    78:65:82:b9:d3:48:b6:db:e0:11:b0:17:cc:01:2f:
                    e9:1c:05:93:b7:88:79:31:b4:de:9b:fb:6f:12:0c:
                    2c:a9:50:f3:58:80:09:fc:12:48:61:21:9d:0c:bc:
                    56:82:4a:05:f9:4b:78:33:b6:8b:ba:9c:0e:ec:54:
                    dc:38:80:e8:53:34:04:76:dd:c0:a1:98:f9:c9:62:
                    b4:35:d5:c8:66:60:98:1e:da:f1:09:0d:f2:e5:49:
                    1f:84:94:49:41:cd:29:6d:a7:56:91:43:9b:a0:f7:
                    c5:fd:ab:89:de:34:b7:30:b7:b9:38:40:64:7b:f1:
                    8b:01:19:d2:26:b4:b7:1e:f6:21:c7:4d:08:04:44:
                    a3:4c:61:b3:d7:e3:63:13:85:9c:0d:f9:6e:a1:ff:
                    2b:5f:dd:9d:a5:db:cc:e8:25:95:bd:20:cc:09:68:
                    f3:82:de:10:78:a8:de:5f:11:aa:1c:de:a6:38:0d:
                    28:b8:1f:75:b9:c3:b2:bd:40:14:23:46:e1:39:a7:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:66:9F:15:51:AC:F9:CD:31:F0:07:DA:27:95:0D:2B:80:C5:26
            X509v3 Authority Key Identifier:
                keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/37B56C103AA111F0AB9C9C63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.117.0.0/19
                  194.223.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:29:35:92:81:c9:10:59:d5:9d:56:30:76:42:eb:b4:e6:
         57:e6:b9:1e:27:0c:c7:36:84:c9:85:f2:ff:53:4a:93:ba:02:
         55:79:82:b0:74:72:1c:99:d2:50:75:c0:c5:89:56:2c:14:3d:
         c3:fc:19:7b:56:16:0b:4d:af:24:18:74:87:50:0b:fc:bd:b1:
         a1:20:91:45:1a:1d:56:c2:be:31:e0:14:56:43:86:30:4a:c4:
         01:8e:42:2e:4f:ad:f3:5a:8b:14:cd:09:c7:8d:57:80:69:b6:
         e5:a8:55:01:6e:84:31:6b:ee:48:a3:1d:c7:8a:51:ad:7f:90:
         a9:0d:8f:b3:49:f2:e6:9c:ab:0a:93:f9:cb:f0:cc:e4:af:b0:
         14:1c:c7:c0:96:3c:f4:fc:f0:1b:a4:3c:0f:73:58:82:4b:68:
         81:d3:9a:90:03:fc:a2:4a:ce:70:58:28:38:f3:f2:f1:6f:9a:
         ca:9a:99:74:d8:44:64:6f:9b:4e:2d:f8:21:ad:5f:79:7c:7d:
         45:9f:2e:1e:2f:f1:22:87:50:a5:55:56:d8:83:89:a5:af:bb:
         7a:13:cb:10:95:d0:1d:3f:3f:dc:41:e5:f7:59:19:97:e8:0a:
         8f:d3:0d:5c:b9:7d:11:dd:53:7c:12:3d:a8:86:90:10:5c:59:
         25:ea:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:43:31 2025 by rpki-client