Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9767C3CC366311EEB376DC3AC4F9AE02.roa
File:                     9767C3CC366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          qppqhKauBM/GUHEfcp22Z+fmeHnU2Aa0TsZX3ovjWwQ=
Subject key identifier:   C0:A1:A6:26:AD:06:25:05:06:8F:16:3B:CD:0C:BD:F5:04:66:08:0D
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       01AC
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9767C3CC366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 23 Jun 2025 03:21:57 +0000
ROA not before:           Mon 23 Jun 2025 03:21:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137489
IP address blocks:        83.118.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 23 03:21:57 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6858c855-f7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:4b:ae:f0:99:9f:c7:a7:8e:59:79:10:a7:
                    42:5d:bd:77:6a:05:41:58:d3:d6:57:d5:ef:8f:02:
                    4d:c8:26:5a:6b:e0:1b:c2:f9:fd:1b:87:02:c5:1a:
                    11:b6:9b:34:ec:09:52:4c:6e:e5:88:76:cd:82:a3:
                    84:34:9c:2a:f1:94:04:de:9f:93:23:e0:87:af:2d:
                    12:cf:f6:db:55:a4:56:ca:b5:d5:ef:ca:bf:9d:67:
                    8b:bd:38:40:e9:da:b3:6f:03:21:1e:43:f1:21:6d:
                    84:48:e0:e3:e2:c3:f4:d7:33:f9:35:66:de:be:95:
                    1a:59:e9:88:aa:78:73:89:30:84:7a:1a:a5:44:9c:
                    2a:6d:52:4c:cb:19:b2:63:8f:f8:8b:2f:5b:d5:6d:
                    d9:8a:01:c3:2b:4f:2a:d9:eb:e6:a2:bf:f4:bc:39:
                    aa:fc:af:fa:a5:d4:41:74:86:65:bd:d5:c1:82:eb:
                    c0:6b:20:15:aa:81:8c:c6:69:06:28:e0:f7:48:32:
                    c3:3b:31:0d:7f:f6:c2:68:42:49:42:e1:c0:30:3a:
                    cb:7d:bb:03:a6:ad:c5:96:e5:5e:11:14:7a:bf:bb:
                    f4:ca:f1:d4:75:f4:34:14:e5:c1:53:58:d9:b4:a5:
                    f4:f1:7f:c7:09:30:b7:ae:09:c0:2a:b7:7e:84:2b:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:A6:26:AD:06:25:05:06:8F:16:3B:CD:0C:BD:F5:04:66:08:0D
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9767C3CC366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:53:99:e7:25:51:a7:dc:21:3e:ce:1f:ea:74:59:ff:b5:6d:
         69:ce:8b:e0:e4:fa:08:2a:cc:32:c9:50:49:c7:46:0f:21:44:
         15:31:9e:90:21:93:c0:c1:42:06:ff:67:66:0c:7b:e5:a8:33:
         2a:1c:01:28:5f:21:d1:73:c1:f0:f1:b7:c5:84:5b:d0:ce:01:
         86:93:3f:a8:94:f2:5e:46:be:f7:b8:d7:32:1d:2b:aa:90:4e:
         a8:4a:b3:08:f5:09:d6:fc:f2:3c:5d:91:30:67:bf:b7:7e:a9:
         22:63:15:c8:5a:91:2a:52:e9:72:4e:7c:87:5a:25:c0:c1:ac:
         de:94:91:84:81:5f:81:94:39:be:b3:5a:6e:ff:74:5b:fc:e8:
         be:74:7b:5d:87:96:a1:84:71:f8:bb:4d:ad:a8:e4:9a:01:66:
         70:f8:9f:99:fb:f5:a2:bd:9d:56:bd:d1:52:ca:04:80:34:74:
         95:21:46:88:10:0a:11:6a:85:b1:aa:91:d3:eb:99:90:c4:5f:
         5d:c5:8c:75:ab:ad:91:e2:77:38:46:03:87:d5:47:e1:53:96:
         2e:b4:ed:dd:7a:b4:4a:ca:b0:8b:54:cb:57:1f:92:b6:9f:ba:
         a8:0d:9b:40:99:f9:93:b1:41:cf:18:a2:f4:4a:8b:db:94:84:
         8a:96:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:04:04 2025 by rpki-client