Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
File:                     71403B04F7E511EEBC67981CC4F9AE02.roa (raw, json)
Hash identifier:          xdCJJSBmKRi6P083PXPoHsI4LKPSNh2nAQa1KhgQI3g=
Subject key identifier:   42:98:0E:F7:5B:CF:A2:0D:8C:C4:C3:00:37:D5:44:20:19:FB:96:4D
Certificate issuer:       /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial:       0105
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
Signing time:             Fri 29 Aug 2025 05:54:58 +0000
ROA not before:           Fri 29 Aug 2025 05:54:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     7637
IP address blocks:        192.190.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
                          rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
        Validity
            Not Before: Aug 29 05:54:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b140b1-87ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:67:33:e1:ae:77:a8:74:1d:8d:ba:de:15:
                    db:0f:47:6a:f4:28:94:b3:45:9f:3b:43:5d:8e:71:
                    7a:71:30:b6:87:34:3a:97:e9:3b:74:8e:ed:0e:47:
                    c3:95:24:37:0e:9e:86:29:06:65:3a:91:ea:80:65:
                    03:f5:9c:9f:b0:7d:33:ab:ab:c5:1a:a5:7e:73:5b:
                    43:a9:79:f1:91:a1:6b:9f:76:ff:6e:4f:ec:67:72:
                    24:59:44:15:2f:43:13:81:c5:47:11:2e:4a:58:52:
                    71:16:1a:19:ff:ae:4b:c6:7b:e5:09:c6:1c:66:ea:
                    90:ec:b5:e5:d6:d9:b9:fc:f0:2c:e9:48:38:ed:97:
                    5a:8d:c5:a0:86:ce:c1:75:ca:d1:0b:84:f1:6b:d1:
                    5b:dd:1f:c5:da:5b:f9:e1:8d:16:b1:95:69:97:4b:
                    dd:4b:7c:07:c7:c5:68:c0:45:90:83:f2:c5:7e:6b:
                    48:09:69:75:77:8f:61:ca:a6:c8:3b:45:b4:82:76:
                    45:de:72:c5:79:46:57:b0:81:d6:60:ea:13:26:3c:
                    32:8f:d3:7d:67:cd:8f:c0:62:72:eb:46:1f:0a:4d:
                    37:58:3a:2e:51:28:08:cd:42:b3:04:8b:56:9c:4c:
                    96:c6:42:03:98:e6:1e:1f:07:80:c6:fb:e5:6f:39:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:98:0E:F7:5B:CF:A2:0D:8C:C4:C3:00:37:D5:44:20:19:FB:96:4D
            X509v3 Authority Key Identifier:
                keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:3b:61:19:e1:ec:59:48:b9:12:d8:a7:4e:7f:ac:33:19:67:
         1b:d3:08:5d:32:7a:fc:fb:5f:26:bd:46:14:62:ad:1e:e9:b3:
         c7:a8:33:90:85:dd:2d:42:b6:01:db:e7:eb:e0:7f:fd:1e:62:
         30:7e:f5:19:a0:48:56:a3:d2:45:0e:ae:45:ce:9e:33:1b:66:
         58:cb:da:54:9a:57:59:81:42:17:ff:a3:a0:9b:cf:4f:b6:aa:
         2c:6d:9c:5e:a6:fd:4a:d3:f4:3f:b8:db:22:d6:a8:30:2f:d2:
         e2:99:b0:d0:9f:1c:54:7c:2b:73:7c:05:cd:af:f8:d0:f5:7a:
         48:72:8b:59:9a:21:4a:29:bb:e3:78:40:7f:0a:11:15:fc:a1:
         f9:a8:8e:9a:9e:70:27:bf:cc:37:9d:f6:34:df:7d:a1:41:6e:
         7e:00:5b:b3:fd:c8:db:a9:5e:6f:03:33:8b:60:a1:b4:9b:ca:
         bd:42:94:e4:f1:13:44:ea:b6:f6:41:11:33:48:95:56:74:c4:
         c9:83:4f:dd:e3:6b:8d:73:ab:7d:e1:ae:31:33:68:40:8e:a5:
         21:4f:cc:38:49:f5:e6:8d:ee:63:6e:31:db:4c:c5:e6:b6:76:
         46:5e:90:8d:7a:17:c8:4f:97:2a:fe:48:60:02:3b:f1:a2:7a:
         4e:56:ba:61
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD
MzA3Rjg5RTgwHhcNMjUwODI5MDU1NDU4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIxNDBiMS04N2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XhnM+Gud6h0HY263hXbD0dq9CiUs0WfO0NdjnF6cTC2hzQ6l+k7dI7tDkfD
lSQ3Dp6GKQZlOpHqgGUD9ZyfsH0zq6vFGqV+c1tDqXnxkaFrn3b/bk/sZ3IkWUQV
L0MTgcVHES5KWFJxFhoZ/65LxnvlCcYcZuqQ7LXl1tm5/PAs6Ug47ZdajcWghs7B
dcrRC4Txa9Fb3R/F2lv54Y0WsZVpl0vdS3wHx8VowEWQg/LFfmtICWl1d49hyqbI
O0W0gnZF3nLFeUZXsIHWYOoTJjwyj9N9Z82PwGJy60YfCk03WDouUSgIzUKzBItW
nEyWxkIDmOYeHweAxvvlbzkeRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEKYDvdb
z6INjMTDADfVRCAZ+5ZNMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3
RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEE0NjkvRjU4NDM4RkVGN0UzMTFFRUI5QTEyOTFBQzRGOUFFMDIvNzE0MDNCMDRG
N0U1MTFFRUJDNjc5ODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADAvrQwDQYJKoZIhvcNAQELBQADggEBAOc7YRnh7FlIuRLY
p05/rDMZZxvTCF0yevz7Xya9RhRirR7ps8eoM5CF3S1CtgHb5+vgf/0eYjB+9Rmg
SFaj0kUOrkXOnjMbZljL2lSaV1mBQhf/o6Cbz0+2qixtnF6m/UrT9D+42yLWqDAv
0uKZsNCfHFR8K3N8Bc2v+ND1ekhyi1maIUopu+N4QH8KERX8ofmojpqecCe/zDed
9jTffaFBbn4AW7P9yNupXm8DM4tgobSbyr1ClOTxE0TqtvZBETNIlVZ0xMmDT93j
a41zq33hrjEzaECOpSFPzDhJ9eaN7mNuMdtMxea2dkZekI16F8hPlyr+SGACO/Gi
ek5WumE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:34 2025 by rpki-client