Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
File:                     9D563A7A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          Hll2+0qOoXsNfkp2NoMaxMw6B+0BSvaptL4oOoM252E=
Subject key identifier:   6E:58:26:9E:9B:BE:D7:76:E0:B1:E3:5A:E7:D9:40:FA:CF:46:99:34
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       01A8
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 23 Jun 2025 03:22:11 +0000
ROA not before:           Mon 23 Jun 2025 03:22:11 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132876
IP address blocks:        96.30.112.0/24 maxlen: 24
                          96.30.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 23 03:22:11 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6858c863-9144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:a2:14:3e:75:17:42:c0:0e:72:36:c9:e5:
                    d9:0e:79:13:6c:40:ea:81:81:8b:c6:19:1a:de:86:
                    3b:4e:13:a7:06:1b:2d:fd:f6:31:2a:77:8a:24:4e:
                    14:7d:18:aa:7a:cc:bb:97:04:37:a6:6f:e7:d2:7d:
                    dc:30:30:87:43:9b:f5:9a:42:3f:af:48:1a:85:7e:
                    91:2e:77:8a:e3:01:6a:2c:4b:24:90:c0:cc:af:2a:
                    2a:f2:7c:67:af:06:09:7b:6e:56:46:84:66:0e:c6:
                    95:6c:93:7a:5c:e7:96:8d:3c:1b:60:7f:6e:ec:2d:
                    72:f6:22:46:76:b4:eb:a5:21:59:35:39:11:0e:cc:
                    a3:b4:16:a2:16:14:7c:f4:b3:b1:4f:c5:82:6a:0b:
                    c2:78:b5:b0:8e:7f:3e:73:c2:46:2b:c3:3c:57:69:
                    ee:0a:0b:12:40:fc:9c:67:b9:aa:34:5f:ac:04:f3:
                    13:ce:be:f8:3c:58:a3:b5:39:6c:9f:1e:78:cf:df:
                    74:b7:a1:aa:16:29:c3:91:70:b7:e7:e4:c8:54:c9:
                    3b:f7:2c:11:bb:69:84:70:eb:6c:08:50:2a:dd:85:
                    5b:dc:91:05:0d:5e:58:11:af:b2:df:02:32:86:7d:
                    62:e2:15:bb:a3:3f:7d:07:e2:b5:cc:33:3d:de:5f:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:26:9E:9B:BE:D7:76:E0:B1:E3:5A:E7:D9:40:FA:CF:46:99:34
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.112.0/24
                  96.30.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:7f:32:2e:b3:8d:a9:c1:33:f0:59:b9:43:d4:e1:d8:15:b2:
         e2:58:bc:a2:ea:f8:ab:4a:5c:12:74:f1:48:8f:38:e3:9b:fa:
         b3:4b:5f:aa:da:34:11:53:c7:3b:de:54:99:df:74:50:6c:fb:
         99:d6:48:0e:37:a8:6b:49:69:31:93:ee:c7:c4:a3:96:81:b3:
         87:18:09:55:8b:4d:70:6d:b7:e0:41:50:5b:e5:57:b9:cf:d1:
         8c:5d:26:b5:a4:cc:4f:97:44:fd:e3:16:e0:a3:3a:16:8d:1a:
         c8:c8:7f:87:3c:49:a2:9a:1f:b9:f5:54:9e:3d:b0:32:ac:c4:
         af:66:24:b6:32:09:84:e9:c2:42:f4:e4:63:be:9a:6e:c3:d3:
         be:45:8f:10:9d:9c:7f:89:0e:af:82:6b:2c:f2:fb:15:60:45:
         8e:c3:e1:9e:5b:da:2d:2c:e9:94:16:ec:7b:0e:1a:98:92:56:
         68:d2:6e:5f:5d:d7:a6:34:40:75:11:35:d5:53:9e:30:bd:6f:
         87:8e:45:42:9a:2e:9d:55:a9:f3:ca:03:70:1c:93:8b:08:7f:
         9a:c3:ce:ac:d4:e1:9c:31:25:06:dc:97:06:79:56:79:fb:50:
         77:c4:95:b2:f8:12:2f:9e:aa:49:4e:b0:37:e4:4a:b5:16:1d:
         8a:26:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:28:02 2025 by rpki-client