Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
File:                     58A35B90EA5611EEA9708773C4F9AE02.roa (raw, json)
Hash identifier:          1G385VTheI+atJyTdCrkaW87iv1psEE5oikWEVvtrgs=
Subject key identifier:   BF:6D:58:E4:C7:86:C2:95:4F:10:00:8F:D6:46:17:66:FF:71:3F:0E
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       239D
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
Signing time:             Mon 18 Aug 2025 16:23:44 +0000
ROA not before:           Mon 18 Aug 2025 16:23:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     202595
IP address blocks:        203.82.24.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9117 (0x239d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug 18 16:23:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a35390-b139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:b1:8d:77:80:47:4f:b7:14:7c:48:fc:17:
                    d1:cb:73:c0:28:e2:c3:8b:c7:06:3a:3d:8a:76:d5:
                    8f:48:a8:46:89:58:e7:15:52:f1:80:7b:83:62:4e:
                    ab:e2:15:b8:ad:e1:dd:45:ac:36:e1:ee:5d:5c:e8:
                    33:fe:8f:56:81:6a:14:c6:c2:9f:ac:aa:70:c1:df:
                    df:3b:32:15:39:f0:71:3c:ab:8f:b9:6b:1d:2a:d5:
                    25:d8:b3:be:42:5f:2c:b5:cb:90:35:24:ad:09:53:
                    80:57:1c:33:c2:82:ad:e5:0b:f0:c9:4f:fa:15:8d:
                    fa:27:3a:34:2a:3e:7a:e0:5f:34:d5:2b:6a:f8:13:
                    60:a1:ac:a0:ac:79:9f:ec:a7:65:96:d9:6e:03:dc:
                    78:2e:26:b9:5d:f0:e6:38:8d:85:11:0c:62:33:a2:
                    81:59:a9:0e:28:7d:7d:af:13:93:f0:aa:6d:db:dc:
                    9c:bd:b6:c5:7b:7e:e8:d6:17:08:e5:38:4c:99:10:
                    c3:f1:a2:40:29:ea:38:3d:63:f5:cc:cb:ab:45:2e:
                    10:4e:85:22:a3:89:9f:59:d3:ba:1f:2b:65:0d:33:
                    8e:b5:47:98:45:e0:98:8d:be:b3:0a:97:51:4c:8d:
                    12:1d:4e:9f:07:45:ce:f6:94:e7:c2:47:97:71:ed:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:58:E4:C7:86:C2:95:4F:10:00:8F:D6:46:17:66:FF:71:3F:0E
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.82.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:3c:6d:03:31:33:13:2c:e6:40:47:3e:1c:fd:82:3f:2f:bd:
         e7:f3:ac:2a:79:4f:3c:65:c4:33:2f:d4:d9:5e:5d:b0:23:52:
         cf:5b:92:15:44:67:67:40:a6:16:51:6a:a8:2c:4f:68:b3:e9:
         90:9a:c9:81:7e:6a:7a:16:fc:79:1a:d1:20:f0:ae:e3:5f:da:
         86:3b:74:d0:3d:54:21:c5:88:60:f6:27:91:63:fc:6e:a3:9f:
         ca:3c:1e:bb:a8:83:89:18:93:e4:a2:3f:ec:2e:06:f0:43:87:
         7b:b4:ed:85:ae:51:d3:0c:7d:33:b9:a2:b6:23:d3:69:70:a3:
         89:f2:33:a2:b9:b8:c2:e8:41:e0:13:99:22:a2:17:02:e7:54:
         a0:51:0d:30:61:b2:bf:8d:ac:44:04:a9:46:63:c5:66:74:c4:
         ce:ba:cc:fb:6e:09:1f:98:8e:4c:8b:4a:43:b1:76:84:44:e2:
         d7:a3:c2:a5:e4:1a:4e:dd:82:46:2b:58:51:82:93:32:b3:60:
         95:54:ef:94:2b:8c:26:6f:cd:9a:01:e8:8c:3b:43:c1:d8:13:
         36:e5:3c:05:6d:2f:9b:6f:94:5e:08:fb:33:25:23:ad:8a:8f:
         ea:26:65:03:1a:52:b5:63:c7:90:72:bd:7a:fd:e0:04:b2:b0:
         b6:87:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:17:09 2025 by rpki-client