Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/ED1A0478799811EF8437F77EC4F9AE02.roa
File:                     ED1A0478799811EF8437F77EC4F9AE02.roa (raw, json)
Hash identifier:          cKCBs+iXK9mKTKUEcpQQ6Sz2FB2iRN0G07D7yQIwB0A=
Subject key identifier:   59:2F:D8:E1:99:79:1B:96:49:2C:8E:84:64:BE:E6:A0:A0:06:F3:6F
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       0457
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/ED1A0478799811EF8437F77EC4F9AE02.roa
Signing time:             Tue 07 Oct 2025 00:58:09 +0000
ROA not before:           Tue 07 Oct 2025 00:58:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     207137
IP address blocks:        116.204.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Oct  7 00:58:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e465a1-8a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:1c:29:e1:84:f3:20:e5:97:ef:da:59:25:
                    dc:ca:f3:6e:e2:1a:94:0e:f6:1d:74:4f:80:e4:1a:
                    28:27:f7:70:07:48:a6:4b:bc:2b:62:7d:c9:9a:7b:
                    47:3b:71:ee:53:07:60:c8:86:01:a0:08:da:de:74:
                    5f:55:01:4b:37:db:c6:a0:e5:33:34:cb:1c:55:b4:
                    1e:5b:b4:77:74:4b:02:f1:4d:94:1d:db:14:f2:a1:
                    2b:2e:9a:7a:7a:44:9f:fc:38:76:0d:c3:41:a5:70:
                    35:3d:dc:19:d5:8e:05:41:0c:24:40:af:e2:aa:96:
                    e2:ac:b0:e4:f0:52:71:6e:34:da:a7:88:8f:70:7a:
                    cc:19:27:54:db:ac:00:51:1c:e9:d6:c8:bf:d7:4e:
                    3a:68:9e:9c:7c:1b:87:50:63:1e:b8:8a:e1:ea:7b:
                    28:e0:ee:b1:0f:52:ac:09:c3:d0:4f:f2:ad:23:c4:
                    18:65:63:47:c2:83:ac:2b:ca:43:c0:bb:17:f2:e4:
                    2d:61:0c:70:0e:0c:63:94:8c:a3:ff:65:ca:da:02:
                    57:f2:8f:4f:fc:11:6c:c4:b6:a6:c3:a7:a6:ee:8d:
                    6b:f8:27:03:30:6c:2e:0b:25:b1:2c:bb:fc:10:7a:
                    f2:42:c7:60:19:b5:f9:7f:4b:1c:86:34:79:35:06:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:D8:E1:99:79:1B:96:49:2C:8E:84:64:BE:E6:A0:A0:06:F3:6F
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/ED1A0478799811EF8437F77EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:72:91:f6:46:50:81:ae:23:68:30:07:ee:71:e8:94:07:
         50:e4:72:9f:ed:a5:b0:b4:73:19:1d:d4:ca:33:03:97:64:42:
         a5:c9:e7:b3:1d:23:c6:f9:fc:e7:2e:e5:f5:5c:cf:00:bc:ce:
         47:41:8c:1d:f5:b8:cc:8f:e9:6c:da:fd:a4:35:a9:58:45:e4:
         c1:c7:e3:5b:42:ec:1e:9f:0b:89:58:7b:5f:f7:e8:43:bb:93:
         a4:b3:61:e5:81:d6:dc:20:1c:55:9f:4c:e3:f2:ff:2f:fb:4e:
         2a:f1:61:7c:64:e5:7b:93:91:ba:a4:72:45:36:32:39:cc:ee:
         58:3f:50:4d:1d:fd:eb:cc:38:03:2b:49:c2:f8:53:09:8f:6f:
         1d:42:ed:33:d8:6e:81:2d:10:e8:fb:fd:0c:5b:a7:b0:97:58:
         dc:0d:44:14:2a:b5:5e:a5:10:8c:96:5c:99:7a:9e:24:40:d7:
         2a:80:de:a9:79:f3:b8:d5:6a:4a:de:d7:cd:fc:4d:46:d8:73:
         c0:43:02:dc:43:cd:6b:56:f1:7d:0b:13:9d:c3:81:d6:0b:c9:
         42:c1:fa:36:1d:38:ad:7c:d7:26:e0:c3:b7:84:3b:c4:8a:6e:
         09:5b:be:9b:85:67:ee:0a:3f:ae:da:8a:13:34:83:8f:4e:05:
         a9:89:64:80
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4
QzQ0Mzk4QjIwHhcNMjUxMDA3MDA1ODA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU0NjVhMS04YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DEcKeGE8yDll+/aWSXcyvNu4hqUDvYddE+A5BooJ/dwB0imS7wrYn3JmntH
O3HuUwdgyIYBoAja3nRfVQFLN9vGoOUzNMscVbQeW7R3dEsC8U2UHdsU8qErLpp6
ekSf/Dh2DcNBpXA1PdwZ1Y4FQQwkQK/iqpbirLDk8FJxbjTap4iPcHrMGSdU26wA
URzp1si/1046aJ6cfBuHUGMeuIrh6nso4O6xD1KsCcPQT/KtI8QYZWNHwoOsK8pD
wLsX8uQtYQxwDgxjlIyj/2XK2gJX8o9P/BFsxLamw6em7o1r+CcDMGwuCyWxLLv8
EHryQsdgGbX5f0schjR5NQYUxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFkv2OGZ
eRuWSSyOhGS+5qCgBvNvMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG
RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjJFRTEvNzUyRDQyRTg4RkQyMTFFQzk0OEE5MzdFQzRGOUFFMDIvRUQxQTA0Nzg3
OTk4MTFFRjg0MzdGNzdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB0zMAwDQYJKoZIhvcNAQELBQADggEBAI48cpH2RlCBriNo
MAfuceiUB1Dkcp/tpbC0cxkd1MozA5dkQqXJ57MdI8b5/Ocu5fVczwC8zkdBjB31
uMyP6Wza/aQ1qVhF5MHH41tC7B6fC4lYe1/36EO7k6SzYeWB1twgHFWfTOPy/y/7
TirxYXxk5XuTkbqkckU2MjnM7lg/UE0d/evMOAMrScL4UwmPbx1C7TPYboEtEOj7
/Qxbp7CXWNwNRBQqtV6lEIyWXJl6niRA1yqA3ql587jVakre1838TUbYc8BDAtxD
zWtW8X0LE53DgdYLyULB+jYdOK181ybgw7eEO8SKbglbvpuFZ+4KP67aihM0g49O
BamJZIA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:26 2025 by rpki-client