Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/B45FE878A9AD11F0961A9A16C4F9AE02.roa
File:                     B45FE878A9AD11F0961A9A16C4F9AE02.roa (raw, json)
Hash identifier:          h1D43mkDjU8O4Towelr+Ypv4NL8HA4t7Ft8OdAyajp4=
Subject key identifier:   41:9C:19:C6:AD:9B:F4:F8:EE:BB:70:62:81:47:7D:0F:73:F5:AB:3B
Certificate issuer:       /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial:       F4
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/B45FE878A9AD11F0961A9A16C4F9AE02.roa
Signing time:             Wed 15 Oct 2025 09:59:58 +0000
ROA not before:           Wed 15 Oct 2025 09:59:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        113.212.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
                          rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411
        Validity
            Not Before: Oct 15 09:59:57 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68ef709d-e02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:68:d9:f0:2c:7f:5e:8c:81:1e:4f:a6:4a:
                    6a:e0:7c:42:dc:23:07:6f:d1:5b:1c:6e:0e:9a:40:
                    66:fb:75:28:ca:60:99:e1:97:52:8b:6a:bb:1c:12:
                    cb:a4:05:ec:b6:f4:a4:b7:dc:14:74:cb:d3:d6:8e:
                    75:a9:08:a6:32:10:05:be:90:04:d0:0f:df:a8:76:
                    bd:86:66:0e:32:0e:51:17:93:16:5f:e7:00:64:c8:
                    b9:7e:99:44:c4:85:f9:37:8f:68:8c:40:10:33:2f:
                    57:46:c4:6f:d6:9a:a7:84:cb:91:6e:e6:fc:93:1a:
                    8f:fd:2a:00:c8:f2:0f:83:7b:d3:19:02:6e:29:70:
                    15:6f:aa:1d:34:98:0c:d3:77:b7:a2:7f:03:c5:2a:
                    d1:54:01:bc:0d:d3:98:ba:9d:4b:69:71:e3:67:a4:
                    03:a9:cc:5e:fd:67:3b:1f:c0:b0:c6:97:c9:95:a5:
                    9b:ba:74:95:ec:58:e5:a3:06:a3:d0:92:e1:79:93:
                    e2:bd:d8:71:01:a2:cb:45:ff:f5:24:be:18:ac:f5:
                    ed:d0:26:d8:67:f3:66:f9:f5:3f:4e:c8:da:e9:32:
                    2f:b0:09:0d:92:0e:c4:58:6c:1f:d1:02:26:15:85:
                    52:18:be:91:e5:68:96:4c:ad:c6:13:7b:52:cd:1f:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:19:C6:AD:9B:F4:F8:EE:BB:70:62:81:47:7D:0F:73:F5:AB:3B
            X509v3 Authority Key Identifier:
                keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/B45FE878A9AD11F0961A9A16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:ac:d6:33:af:b3:f5:97:40:19:fe:2a:7a:40:c9:de:b0:
         b2:9a:db:bd:4c:e4:c0:8e:6e:fb:09:f0:69:ce:33:1d:24:00:
         07:3a:6f:ae:b1:da:73:4b:ee:71:e8:d8:ce:f6:50:b9:42:7a:
         40:1a:0b:54:a3:ec:d1:75:43:8b:a7:60:30:c7:fe:e2:46:1d:
         26:3c:b5:db:4f:3c:d4:3b:e5:50:b6:fb:a0:6b:59:d4:3d:9e:
         14:f4:da:f0:03:03:69:66:bd:0d:5e:8b:00:5a:4a:b6:54:0f:
         9f:41:9d:4f:29:4a:08:35:6d:c8:ed:f5:70:31:d8:ea:97:c7:
         2e:8b:8a:16:81:9f:d6:84:79:f0:b3:f5:2b:d3:93:37:ae:49:
         16:3b:ee:14:37:93:24:82:af:af:3a:7c:8b:18:7c:a9:9c:ce:
         7f:40:74:50:34:9b:7c:fd:7e:86:d4:e5:ce:98:a7:45:b3:46:
         76:09:af:be:ac:34:a5:d8:a6:2e:77:31:50:9b:3f:80:50:3b:
         ab:48:d6:e1:23:76:1e:b9:a4:15:a5:fa:9a:da:b0:a3:0c:1a:
         5e:61:f5:32:94:db:a5:4a:1e:a6:eb:8f:6e:bf:42:91:34:11:
         f3:c5:2f:9f:28:1e:b1:70:c7:e0:b3:03:ec:42:f3:46:25:a9:
         31:c9:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:33 2025 by rpki-client