Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
File:                     DA1C00CE26F411F097943C73C4F9AE02.roa (raw, json)
Hash identifier:          QBqHeJ1vis15EuJZ+KzOUsUEh+Q0oSMvYQlWhgKZVu8=
Subject key identifier:   3E:AF:D5:80:69:0B:FD:72:DD:6A:61:5F:9C:F2:03:F9:40:2D:7F:49
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       0167
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 05:01:56 +0000
ROA not before:           Wed 01 Oct 2025 05:01:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38715
IP address blocks:        203.173.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: Oct  1 05:01:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68dcb5c3-3e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:66:0b:32:f5:67:90:e6:57:01:d8:e3:4d:fb:
                    24:91:27:d7:ea:40:8b:b7:7b:cc:22:88:b1:a0:27:
                    fc:84:eb:75:67:d7:3f:04:f7:29:a4:f5:70:87:90:
                    76:50:ed:67:69:84:86:1f:40:48:fb:d6:2a:63:8e:
                    17:16:1b:2d:29:35:62:b3:b6:ba:ce:c2:32:45:58:
                    79:c7:d5:85:3a:d5:ec:1d:f9:37:45:27:d7:17:57:
                    19:cf:4f:53:3a:57:cc:06:79:84:cc:56:c7:aa:b6:
                    47:19:c5:92:c9:3b:f1:53:99:23:50:3d:d1:1d:2a:
                    14:3d:42:e3:85:d3:b6:bc:81:c3:d5:4e:f1:af:c9:
                    8e:f3:4c:69:35:fb:45:80:74:0a:d1:69:9e:df:b3:
                    da:1f:a2:72:cd:da:ce:5a:f1:65:4b:4f:97:4c:be:
                    6c:64:55:8f:7e:4a:6d:6b:8b:ac:67:3f:e8:b3:e6:
                    53:8c:99:99:c7:73:86:19:86:02:98:1a:99:ff:58:
                    53:e5:ec:2c:5a:bb:3c:ca:5b:f2:17:44:be:85:bc:
                    d3:8d:1a:55:b4:32:aa:fd:77:14:20:c5:12:05:b9:
                    3a:ab:f3:3b:6c:88:ee:20:48:0f:39:d6:45:0d:e2:
                    a0:32:57:59:96:4a:a3:3c:1f:3e:f6:98:97:d7:20:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AF:D5:80:69:0B:FD:72:DD:6A:61:5F:9C:F2:03:F9:40:2D:7F:49
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:ce:29:89:9b:22:36:3a:3c:a9:32:4b:51:4c:3d:5b:cd:
         4e:ff:ef:14:c1:6e:57:d4:ac:69:03:3f:9a:dc:f3:53:2b:82:
         73:5f:27:a5:0e:64:c1:6f:d8:03:b0:d6:30:36:d6:83:af:64:
         90:1a:5d:70:3b:19:3f:c0:32:d1:a5:8b:13:a9:94:cb:62:c3:
         2b:12:c3:eb:71:a0:60:3d:32:35:e7:36:b8:60:e1:9a:e2:c5:
         d8:3f:e5:cd:53:5a:ba:ef:fb:c7:3d:14:71:75:bd:18:94:58:
         5b:00:54:80:22:c9:3f:f0:23:f7:cc:9b:a8:77:ae:d4:d3:cc:
         b3:b9:5b:cf:65:97:a7:ed:a9:69:5b:47:96:4b:ed:bf:0e:ce:
         c0:cb:d2:82:66:bb:ca:11:1e:ed:6f:82:93:49:61:45:ae:7b:
         b8:43:55:23:ad:01:3a:90:e1:2a:82:54:38:f7:db:26:1f:9a:
         d6:3b:e7:fe:d9:58:05:c9:70:2d:a2:04:f1:c7:f7:38:9f:ec:
         8e:12:e9:7f:b8:78:7a:9b:b8:a4:62:01:c9:fa:5c:0f:70:7f:
         1e:58:ee:91:cb:92:c4:7c:8c:f5:d7:88:46:40:4d:8e:32:d8:
         70:0d:5d:1f:35:24:7a:4a:ec:d3:d6:1b:2b:f7:55:0c:a2:40:
         5a:9d:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:59 2025 by rpki-client