Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7A180DFACEB611ED8850A727C4F9AE02.roa
File:                     7A180DFACEB611ED8850A727C4F9AE02.roa (raw, json)
Hash identifier:          ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=
Subject key identifier:   EC:08:EF:EF:1F:B8:0A:D0:63:9E:53:8A:DB:F1:6D:FA:2C:56:5F:5A
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       06BB
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7A180DFACEB611ED8850A727C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 23:03:41 +0000
ROA not before:           Fri 04 Jul 2025 23:03:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38055
IP address blocks:        210.215.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Jul  4 23:03:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68685dcd-7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:f9:0a:b7:77:c9:07:93:6b:80:e8:c2:0b:
                    24:3f:91:8e:e3:e3:fc:d6:92:c1:2e:18:bd:6c:78:
                    8c:1c:7a:df:e4:9d:51:47:f1:85:fb:df:ea:a8:4c:
                    c4:80:0f:34:c6:69:53:ea:5b:6e:10:bd:03:36:87:
                    37:83:7e:82:3e:9a:79:2c:16:b6:49:af:b0:32:bd:
                    61:60:45:4e:fe:bd:9b:c3:b7:f6:f4:7d:12:d7:a1:
                    8b:86:e7:d0:16:39:0a:da:70:ca:13:40:42:f6:fe:
                    d3:4f:21:69:4a:32:e8:16:a1:40:29:60:7d:40:be:
                    a8:10:3d:1c:11:97:09:25:17:22:aa:92:fc:9c:ee:
                    64:72:aa:2d:8e:c8:a9:f4:a4:40:1e:28:52:70:65:
                    a1:c2:c7:a9:ca:d3:2f:e3:64:37:ea:e7:f1:69:02:
                    95:d9:99:52:c6:45:74:26:39:93:a1:0f:c3:1d:08:
                    6c:16:e5:ac:bf:6a:c1:b2:9b:5d:9e:9b:af:14:f7:
                    d6:7c:2d:8b:60:b3:df:e9:45:6a:bb:46:d6:08:6e:
                    7a:93:11:7f:f7:7b:8d:0b:01:ef:51:74:dd:c6:eb:
                    77:b6:3e:f1:9e:dd:09:e7:4c:56:61:fc:79:28:be:
                    87:25:f8:9b:23:5b:76:a7:30:41:5a:c1:84:b9:72:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:EF:EF:1F:B8:0A:D0:63:9E:53:8A:DB:F1:6D:FA:2C:56:5F:5A
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7A180DFACEB611ED8850A727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.215.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:dc:90:6e:09:62:a5:ef:9b:89:55:8e:fc:7a:ff:8f:cd:
         2f:54:89:e2:fb:f6:82:7f:2b:41:36:73:9f:ea:c2:ca:8f:29:
         35:60:76:ec:fe:78:a6:55:0a:b7:08:ef:07:2b:31:3f:93:80:
         1e:ea:de:75:32:cf:ae:9b:3d:16:99:89:46:fa:02:9e:55:1e:
         47:2c:81:09:26:b6:de:84:f6:37:a7:5f:75:5d:45:0c:b0:80:
         ea:9c:41:c2:28:71:6f:bb:4e:78:7c:42:44:74:c9:12:77:b0:
         04:32:67:47:41:04:f9:0d:1f:17:32:c5:e0:a6:50:0d:55:96:
         22:95:8f:db:f1:d5:51:08:bc:1c:1a:c1:f7:af:6e:f7:03:2c:
         1b:a1:89:1d:22:e7:ed:37:f2:aa:f9:3e:76:97:6c:3a:8f:35:
         48:dc:e0:42:07:6b:2e:ee:bd:47:d0:7c:97:c5:40:5e:77:ff:
         89:16:9c:6b:28:9c:ff:77:0e:5b:4d:eb:75:ad:f1:6e:3f:ab:
         86:2e:a1:99:fe:4a:f5:70:5a:cf:41:8c:b2:57:69:0d:8e:56:
         5a:4a:51:2b:d1:2a:58:a7:18:48:07:03:bb:b3:16:52:f8:63:
         01:69:28:74:1f:21:d2:aa:64:93:54:11:c6:9e:27:39:2a:78:
         a7:1f:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:33:03 2025 by rpki-client