Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/5A2BB4DE28C111E7A885571AC4F9AE02.roa
File:                     5A2BB4DE28C111E7A885571AC4F9AE02.roa (raw, json)
Hash identifier:          T2OA6la6kiD43UxKezGsuNIwVX4A5ubar9PjrFa2VdE=
Subject key identifier:   42:E5:C5:AC:2E:78:78:FD:11:4E:CC:92:9A:5E:1C:D9:A3:30:DE:63
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       24F3
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/5A2BB4DE28C111E7A885571AC4F9AE02.roa
Signing time:             Tue 16 Sep 2025 15:53:45 +0000
ROA not before:           Tue 16 Sep 2025 15:53:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38612
IP address blocks:        117.18.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9459 (0x24f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Sep 16 15:53:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68c98809-055e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:84:0f:b9:02:a0:dc:18:be:db:36:db:85:01:
                    f9:b3:5b:27:9b:bd:77:61:61:4b:ea:1b:26:df:27:
                    ea:b2:e3:52:99:ec:05:15:96:92:51:84:b5:5a:7f:
                    e9:a4:07:38:58:13:13:94:89:48:e8:d4:8d:ca:dd:
                    68:e6:4d:a1:3a:45:ae:a1:86:4c:f8:c3:28:5d:ef:
                    12:75:a7:5e:75:a8:7d:35:20:0e:a3:4d:5f:64:ec:
                    44:1c:7d:6e:a9:d1:c8:3b:a5:d3:34:b1:1e:38:85:
                    08:d7:ae:7a:e5:b3:f0:74:ac:d8:c4:85:26:2b:57:
                    45:40:16:42:40:d5:4e:2a:11:a5:c6:aa:b5:57:59:
                    bb:cf:4d:8e:d6:bb:ec:97:ee:d4:4b:7a:ad:cb:e2:
                    06:16:91:e9:ee:03:b4:34:08:3c:20:04:3d:bc:93:
                    6e:18:b0:16:32:17:20:0d:7c:c3:1a:ef:8a:2f:3e:
                    2a:ec:00:4d:b2:c4:95:08:4a:b1:47:43:2c:72:6a:
                    11:f0:f1:09:b3:98:22:41:6b:b8:b2:7e:2c:6a:95:
                    6a:9a:e7:25:54:08:10:b6:3f:85:08:8a:6a:68:47:
                    3f:05:c2:d5:7a:d8:3a:88:5e:ee:4a:17:95:c5:ef:
                    40:43:4f:41:60:a2:7b:bb:ec:68:cd:10:9d:26:30:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E5:C5:AC:2E:78:78:FD:11:4E:CC:92:9A:5E:1C:D9:A3:30:DE:63
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/5A2BB4DE28C111E7A885571AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:0d:e4:3a:ae:3b:18:52:a8:74:8c:db:87:a2:eb:7a:62:
         b4:8c:4b:af:ec:61:87:0d:66:96:1e:3c:94:7e:c4:e6:37:8e:
         62:0d:36:0f:51:3a:c3:38:ef:01:29:73:07:81:29:d9:15:11:
         69:aa:e9:0c:7a:f9:2d:3d:af:84:78:d0:40:52:e1:d4:e6:81:
         95:2b:0e:77:04:07:d0:8c:a9:44:0c:e6:60:be:f9:f5:a6:c2:
         f3:ef:42:6f:38:b6:81:7a:96:c5:5b:75:6c:d8:b1:4e:58:3a:
         7c:9c:f4:0a:fe:27:c6:22:47:70:48:aa:02:34:b1:89:12:09:
         2b:8f:26:65:c1:e7:78:52:40:d2:3c:b4:e4:43:0f:f6:a2:0a:
         6b:9d:10:00:82:eb:2b:b3:57:87:ac:13:47:ff:54:df:df:ef:
         bf:d6:7f:97:5c:34:fe:4a:84:fb:4a:05:35:c1:04:77:84:d9:
         30:c6:00:3e:1b:de:20:a1:20:35:1d:b6:ee:84:4b:99:22:94:
         d4:13:ca:ac:33:c4:bb:db:92:14:d2:14:77:fc:03:01:ea:a5:
         c0:60:72:de:df:80:02:f6:ab:7a:7d:c3:d1:c8:45:9f:ea:9c:
         26:7f:7f:77:c8:b7:48:ce:8b:ce:97:8d:c8:a4:9d:2c:91:28:
         34:17:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:35:08 2025 by rpki-client