Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DAE15A7248F911EC9F04C439C4F9AE02.roa
File:                     DAE15A7248F911EC9F04C439C4F9AE02.roa (raw, json)
Hash identifier:          uL1H0QbwRjNu//kzatppv+a2Zrx1mIfoO1yF/DRChCo=
Subject key identifier:   8D:D8:94:01:13:EA:7E:EA:E6:0F:B0:77:CC:B2:31:F2:B9:B0:2E:05
Certificate issuer:       /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial:       0701
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DAE15A7248F911EC9F04C439C4F9AE02.roa
Signing time:             Thu 16 Oct 2025 23:33:45 +0000
ROA not before:           Thu 16 Oct 2025 23:33:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        204.48.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793 (0x701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
        Validity
            Not Before: Oct 16 23:33:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f180d9-bb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:92:ba:00:66:12:68:66:8b:d7:f5:37:b2:
                    a3:57:16:a7:25:86:08:87:12:51:3b:8e:69:78:c7:
                    a0:f7:13:23:01:c5:df:91:ef:2c:20:dd:77:b0:c9:
                    28:7a:1f:75:30:a4:f2:af:a7:5f:1f:1c:44:13:f4:
                    a9:fc:ba:e8:33:2f:e7:46:b5:f8:6a:e1:c3:3f:5b:
                    fd:fa:f3:26:05:3a:d0:54:09:df:81:80:1b:50:d7:
                    8f:49:b7:79:8f:43:73:33:64:1d:76:94:1f:62:14:
                    c7:1a:2d:01:4f:e3:11:38:06:32:27:6b:27:33:40:
                    32:00:a4:2e:bf:1c:5d:39:69:ca:9d:70:22:61:28:
                    59:c0:93:d5:60:bc:13:d8:09:54:dc:c2:ee:81:c4:
                    14:60:37:44:7a:0d:0e:ec:3c:a1:48:0a:b0:70:43:
                    28:c4:48:f7:49:b4:fd:45:80:bb:a0:6f:0b:f6:24:
                    a3:9d:50:98:73:d7:3c:74:9b:49:da:bb:1d:26:cb:
                    51:73:2f:07:95:66:b2:89:7b:14:71:25:a0:02:0c:
                    dc:eb:35:dd:67:8b:e3:e4:ea:bd:ed:33:57:ff:8d:
                    31:7f:8e:db:6c:1c:ce:14:32:d8:44:da:30:77:80:
                    74:3c:16:63:92:81:38:ba:4d:12:59:9c:ae:d1:ff:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:94:01:13:EA:7E:EA:E6:0F:B0:77:CC:B2:31:F2:B9:B0:2E:05
            X509v3 Authority Key Identifier:
                keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DAE15A7248F911EC9F04C439C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:29:b7:e8:84:b2:b8:97:86:c5:d9:aa:9d:31:a2:e4:8d:18:
         50:7c:57:54:58:dc:cf:71:ea:9e:99:96:56:2c:20:3d:92:b8:
         5c:51:cc:20:8b:73:02:6a:15:65:1c:9c:82:67:f9:9b:fa:2f:
         f4:94:79:38:e6:ca:36:4d:cf:89:a5:c5:5f:8c:06:6e:c2:d1:
         f2:4f:8d:3d:c0:c3:b4:b7:4d:ed:30:70:f9:0e:7f:50:25:eb:
         b3:a2:f3:d8:dd:0f:c5:d5:3a:fc:66:05:1a:44:a0:42:a2:58:
         19:f3:19:98:cf:40:8a:a7:ca:d1:94:e5:31:2d:7e:de:36:e0:
         8d:b1:6c:56:9d:40:40:c2:c9:eb:ac:bb:82:dd:2d:aa:25:c1:
         76:f2:08:f9:f6:4b:e8:5c:26:f9:8d:bb:d8:e6:6c:9a:ce:51:
         e7:49:b7:14:16:5a:ea:b9:c4:be:37:4d:88:62:ac:72:8b:63:
         af:b5:62:39:e1:b5:1f:8e:46:e9:08:f3:f4:60:e2:f6:3a:fd:
         d1:25:b0:31:bd:3b:7b:38:d5:39:05:84:64:b5:8b:dc:66:56:
         52:07:7f:f8:f6:c6:2a:b8:7e:28:c1:43:c8:57:0b:17:a9:7d:
         e1:2b:b5:2a:71:34:70:e2:c0:6d:71:e4:38:4c:6a:12:91:f0:
         b0:52:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:01 2025 by rpki-client