Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/7013EE7A73F811F0B8A9582CC4F9AE02.roa
File:                     7013EE7A73F811F0B8A9582CC4F9AE02.roa (raw, json)
Hash identifier:          ckP5BxcHxNFbdmi2/GsSqI6AzRvAVZrOdnnQHyfARKM=
Subject key identifier:   6D:7B:7E:26:42:7D:0A:50:01:43:04:6A:95:42:A0:0F:93:15:7A:0C
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       07
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/7013EE7A73F811F0B8A9582CC4F9AE02.roa
Signing time:             Fri 08 Aug 2025 01:38:52 +0000
ROA not before:           Fri 08 Aug 2025 01:38:52 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     3491
IP address blocks:        155.69.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Aug  8 01:38:52 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6895552c-5e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:65:b8:bc:bf:9a:07:26:9f:49:3c:75:d7:
                    de:7b:1c:46:cd:f3:1d:73:a8:f4:04:a7:e2:9a:12:
                    f5:24:e0:e5:c8:9a:e3:75:07:53:d4:7b:b4:90:89:
                    be:53:87:6f:c2:a2:ef:81:2e:03:d1:c3:e0:10:44:
                    a4:ec:7b:68:ca:db:11:d8:ec:82:60:80:96:c9:26:
                    df:22:ef:f1:8d:10:4f:30:f1:0e:1f:d9:cd:17:36:
                    69:cc:4d:bb:c8:4e:a1:7a:b6:cd:d9:4b:fc:07:57:
                    68:8f:6e:68:4e:cc:36:88:8e:58:b1:d6:20:38:c6:
                    4f:7a:f3:6c:9c:9f:4b:d2:85:b9:9c:76:f3:5b:4b:
                    66:02:87:2b:7b:30:b4:09:80:bf:e5:43:25:e7:14:
                    a0:f3:f4:53:56:07:ce:82:da:cd:e8:04:bf:ec:ee:
                    94:84:9d:3f:6c:87:06:05:c4:4a:f5:73:59:ec:6e:
                    e0:54:a3:47:4a:01:47:60:ff:40:63:3f:c0:8a:1e:
                    16:e6:88:93:fe:7c:d0:d8:9d:aa:74:06:5e:25:97:
                    ed:5c:89:ae:a9:75:6a:90:81:3e:0b:b5:3d:71:ba:
                    e6:34:d0:36:6b:c7:e4:85:7d:90:bc:b4:3b:25:0b:
                    09:39:3d:da:6f:0c:6a:c9:17:3e:6e:58:8a:1c:22:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:7E:26:42:7D:0A:50:01:43:04:6A:95:42:A0:0F:93:15:7A:0C
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/7013EE7A73F811F0B8A9582CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.69.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:84:b1:4d:7f:41:e9:6a:8b:8e:0e:59:5c:43:b5:66:f9:0f:
         6b:40:8f:64:42:4c:f2:fa:f1:17:cd:24:65:03:de:6e:27:b1:
         33:a1:99:a2:3b:45:c5:8c:75:3e:f4:d6:03:7a:a4:31:9d:a7:
         08:c0:36:38:b4:7c:23:b1:a4:61:c1:24:b5:0b:f8:55:52:fe:
         35:fe:f2:e0:04:ec:7d:e6:4d:fe:80:3f:21:c3:7c:99:27:d1:
         73:a0:24:9f:d1:65:48:0b:f3:67:c7:04:19:b9:0a:d7:de:5e:
         8a:9c:85:c9:52:52:80:7c:27:3f:c2:ac:51:03:b6:76:d0:bf:
         c9:93:c6:11:43:b9:0b:69:fa:a9:74:9e:25:c3:fa:1b:51:1a:
         49:35:25:8d:9d:f3:7e:26:cd:78:7b:52:27:f3:88:ef:ef:62:
         b4:96:da:4d:25:6c:90:69:ba:15:a3:54:d3:5b:51:72:1e:71:
         07:bf:2c:ca:a3:e7:eb:56:3c:99:85:5b:44:9a:ad:c9:54:ca:
         7a:be:85:33:c1:fa:7a:f3:39:23:0b:62:e3:54:a4:d2:b1:e1:
         1d:b1:43:6f:40:93:e3:5f:8a:bf:74:3c:0c:03:d3:f3:07:46:
         eb:ec:1a:65:c3:4f:a9:96:c7:65:48:67:8b:8b:83:37:68:80:
         c1:95:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:57:05 2025 by rpki-client