Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9C62F7D4366311EEB376DC3AC4F9AE02.roa
File:                     9C62F7D4366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          FkiapFLAnlmSjOGmtiIvSATUej5rnQ+2MMbjws7S5Ao=
Subject key identifier:   0B:75:EA:2B:14:50:43:B0:01:15:E7:0E:1F:6C:AE:0F:D4:BC:3C:CA
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       01B8
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9C62F7D4366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 23 Jun 2025 03:22:10 +0000
ROA not before:           Mon 23 Jun 2025 03:22:10 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55538
IP address blocks:        83.118.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 23 03:22:10 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6858c861-b04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:2c:95:e5:12:b6:39:26:aa:e2:cd:4a:40:
                    41:f7:f6:96:c3:c7:0b:7c:aa:4b:81:4f:c5:f6:41:
                    9b:69:89:12:b5:04:37:a7:59:7e:2c:0b:4f:b0:d5:
                    62:c9:ae:f1:4b:20:41:5d:e0:87:de:08:4b:7e:76:
                    b2:d3:7a:bc:2c:1b:d9:a6:ee:b5:2f:b9:a3:cb:03:
                    3e:46:bf:a8:9b:6a:a2:e1:04:31:32:dd:13:0a:43:
                    10:2c:5c:03:56:76:df:23:a5:2c:a3:e8:f3:c5:22:
                    0b:4b:66:b6:41:55:8b:17:ca:ce:fd:aa:04:32:aa:
                    34:1d:09:e1:dc:2e:06:97:c0:8f:fd:ee:ca:87:17:
                    e7:52:38:1c:24:58:d3:4a:fa:27:ad:94:b7:d1:bd:
                    cb:98:67:0e:3a:77:3c:5c:34:cc:b8:76:64:72:ca:
                    e1:be:54:d3:57:7b:fd:b4:b0:10:c2:fc:a3:7e:26:
                    59:82:a6:8b:5b:9d:f9:00:48:6e:92:db:1b:0c:75:
                    2a:0f:08:61:2a:6f:d5:26:1b:37:3a:55:e5:59:b9:
                    d6:96:f9:1d:e7:39:7d:93:83:78:c3:69:fb:c6:9e:
                    ee:42:10:33:c5:88:45:e0:43:fa:92:4b:2f:49:76:
                    44:de:3d:d0:2a:11:02:a1:d5:f9:91:9b:37:92:48:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:EA:2B:14:50:43:B0:01:15:E7:0E:1F:6C:AE:0F:D4:BC:3C:CA
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9C62F7D4366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:bf:ce:38:b0:da:a8:3f:65:98:c9:ec:3a:93:2c:6a:fe:
         45:25:4c:f1:65:eb:8e:01:7f:ab:77:be:f6:90:40:b5:33:1d:
         b1:30:77:ef:e9:37:a6:8c:4f:8c:4f:60:54:14:62:26:58:9b:
         b2:ad:a6:dd:ca:2e:0c:60:3f:53:a5:e4:a8:96:05:3f:69:c1:
         5e:e3:37:74:df:80:39:7e:25:00:57:bc:73:bc:2a:85:d1:fe:
         80:b4:48:2a:36:3a:f4:95:8a:ee:8b:2f:63:ed:8c:04:38:77:
         e4:f2:68:bb:9a:7c:60:f4:d3:29:5b:d0:ee:ea:fa:15:e8:ee:
         9d:da:51:09:d2:85:15:f4:26:de:8d:b3:9d:7f:1f:5c:7f:8f:
         0a:29:13:8a:08:40:69:ac:f6:fb:52:4c:37:fc:75:ee:6f:c8:
         30:36:af:a7:8e:b1:a6:9e:f9:4a:e0:b6:96:2b:c3:f8:31:1f:
         25:2e:7e:1c:0c:36:35:77:73:e1:b2:c3:de:3a:38:c8:20:2a:
         7f:4b:d6:c9:b1:25:a2:c1:d8:52:18:7d:aa:ce:24:b3:25:20:
         b9:43:3c:f8:1e:d4:34:7b:f1:45:69:21:c1:20:a0:19:e8:f6:
         0b:31:e6:de:34:8c:cc:a9:52:e6:86:36:da:c9:35:a5:eb:2a:
         7a:58:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:52:33 2025 by rpki-client