Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/8513C77AF62A11E9A6941C46C4F9AE02.roa
File:                     8513C77AF62A11E9A6941C46C4F9AE02.roa (raw, json)
Hash identifier:          rRCgJL8oGciUh8AlUq1plMpffnbAPeYlKijUPW7pzas=
Subject key identifier:   C6:45:97:88:26:75:E3:6E:E8:03:B9:41:74:23:73:D8:CB:6B:0D:B4
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       3845
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/8513C77AF62A11E9A6941C46C4F9AE02.roa
Signing time:             Mon 18 Aug 2025 14:50:34 +0000
ROA not before:           Mon 18 Aug 2025 14:50:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9890
IP address blocks:        203.127.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14405 (0x3845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Aug 18 14:50:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a33dba-70a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:a4:dc:8e:90:ab:03:54:06:44:98:44:1e:
                    43:f2:96:2b:a8:36:94:e5:1b:1a:f1:f9:66:4e:95:
                    dc:80:f4:bd:62:01:bf:2a:f9:9d:18:90:4c:93:6a:
                    b0:c0:48:74:9f:ac:cb:39:96:d3:43:04:f7:1d:53:
                    4c:f6:02:0a:c7:23:0f:c4:97:05:2d:b9:c4:5f:4f:
                    3b:10:79:5b:7a:9a:60:68:ec:e2:9e:a8:6b:a7:fb:
                    58:33:b3:c7:cf:bb:f9:19:5a:64:3e:3e:d8:65:73:
                    df:1f:09:80:38:43:f7:38:4e:b6:31:3c:93:0c:b5:
                    2d:d3:b3:ab:1c:b1:1f:71:46:47:20:4f:04:0d:fc:
                    f5:66:55:27:2a:a4:cb:fb:b0:0c:68:fb:3d:77:9d:
                    8c:57:e0:62:1d:bc:20:88:bf:39:b5:25:89:e6:66:
                    0e:ff:a1:af:58:5a:31:30:cf:c3:cf:4a:df:77:3c:
                    58:3d:82:b6:14:38:01:62:c5:db:a5:74:5f:ad:0d:
                    c4:80:b3:b1:dd:79:6a:d0:4d:b0:16:3f:35:f5:8b:
                    8c:97:4c:29:bd:7a:0b:ec:b9:5a:f5:3b:2d:80:cb:
                    9f:8f:fc:ab:ce:62:00:b6:4b:6a:c4:d3:69:22:fd:
                    db:4b:1b:19:84:31:47:ab:71:3d:5f:b3:2d:da:6e:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:45:97:88:26:75:E3:6E:E8:03:B9:41:74:23:73:D8:CB:6B:0D:B4
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/8513C77AF62A11E9A6941C46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.127.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:d4:40:de:02:5a:70:c6:43:a4:de:77:66:f1:ed:7b:cf:
         37:3c:36:a4:6a:5e:fa:3a:8a:2c:a9:19:0c:5c:7f:7b:60:ed:
         64:30:56:e7:a3:b7:86:83:dd:ec:7b:6e:a9:3e:a8:6a:40:06:
         98:15:5b:f9:d7:39:3a:fc:bb:dc:2f:be:ee:a6:72:cc:2a:3f:
         c5:69:ea:02:bc:05:40:e7:e0:5a:9c:2a:83:90:aa:1b:19:14:
         08:a7:ae:81:28:d7:a8:2e:4f:4e:b0:b6:fd:33:e6:c4:a5:e5:
         67:ba:27:78:ef:3a:69:7d:64:20:94:a2:01:44:d8:3a:e8:db:
         77:bf:00:2c:d6:44:b8:e7:dc:2d:cb:89:0a:9c:b0:8b:40:e2:
         d8:1d:eb:e3:27:ef:47:b2:6a:bb:9a:75:18:45:df:cf:46:9e:
         c0:6d:6c:8d:28:60:b6:f1:b2:d7:52:7f:6a:cb:ef:f8:0a:05:
         0f:88:0f:5c:ed:60:13:b2:8a:6d:b6:a0:eb:b0:d4:4d:56:9b:
         f1:3f:d6:ea:d3:51:78:b2:68:4d:ac:86:32:e9:c1:d3:fb:b4:
         fb:df:75:84:1f:33:8a:af:c9:74:6d:1d:53:f9:9d:77:aa:5c:
         bf:a4:02:76:47:6c:5f:72:27:2c:41:76:11:a7:cb:78:78:d1:
         75:6c:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:46:18 2025 by rpki-client