Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
File:                     90065F424DB511F0A1C8D30DC4F9AE02.roa (raw, json)
Hash identifier:          wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=
Subject key identifier:   6D:56:42:28:F2:A9:8E:F6:BF:88:F2:4B:FA:95:81:42:69:F9:1A:4C
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       0449
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
Signing time:             Fri 20 Jun 2025 09:04:25 +0000
ROA not before:           Fri 20 Jun 2025 09:04:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134196
IP address blocks:        202.181.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 23:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Jun 20 09:04:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68552419-39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:b8:a7:c4:3e:f7:93:49:ec:ee:15:ec:3b:
                    60:92:a1:22:73:b6:56:9f:94:67:42:88:df:9e:0a:
                    80:98:9d:36:3e:e1:14:54:07:04:09:95:20:17:a4:
                    fc:a6:4a:2b:27:63:fd:bb:9b:3a:5e:16:13:c9:b2:
                    00:0c:02:47:76:91:29:79:71:94:2a:1a:ab:c9:01:
                    aa:8a:a2:cf:ae:e9:cf:a6:73:02:4c:8e:7c:93:e3:
                    01:49:b0:97:c4:3c:7a:7d:2b:27:31:a7:2d:f3:1b:
                    59:62:0b:16:6a:74:1a:0a:f5:c1:49:c7:bd:7c:c3:
                    dc:b9:8c:23:31:a1:38:70:b9:b3:4d:9c:08:e4:7d:
                    73:e5:d4:83:e7:0d:6a:79:27:98:bf:78:ee:3c:65:
                    02:95:3b:19:50:68:f4:b3:6a:2e:08:a4:f6:84:7b:
                    57:c3:fc:0d:25:c6:d8:a4:04:d7:15:8e:fb:f9:c0:
                    2c:9d:c2:a2:e9:db:55:d5:4c:53:1a:8e:a7:05:60:
                    5d:d6:18:80:6a:1f:c7:ea:12:a7:4d:31:b9:e9:a8:
                    d9:a4:d0:d1:5c:17:df:1b:0c:80:25:fc:00:59:c2:
                    2e:30:8e:2d:28:ef:fd:9c:a5:3f:2b:ff:10:a1:a7:
                    be:91:9d:18:c9:a8:c0:fd:c5:65:cc:f9:a4:77:b4:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:42:28:F2:A9:8E:F6:BF:88:F2:4B:FA:95:81:42:69:F9:1A:4C
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:86:6f:51:6d:53:6f:81:8a:cd:5e:7a:d0:bd:bf:d6:0b:
         10:d3:49:85:f2:3b:66:4c:e2:23:8e:f4:86:5c:6e:eb:8b:d9:
         05:d0:ae:99:ad:45:df:11:e2:9b:6a:07:50:cb:37:34:d3:85:
         0a:13:c6:8a:5e:fa:97:40:24:b1:9d:e8:ae:d6:9a:6a:ec:d9:
         de:9d:d9:90:42:66:cc:ac:96:80:20:ab:82:fa:2b:13:bf:b4:
         93:7a:b9:cd:5e:cc:54:c0:c9:a3:0b:f2:e9:2b:1f:a2:52:4c:
         ed:e5:4f:01:02:98:d2:1d:6f:53:2f:fe:37:e8:ac:ee:00:c3:
         f2:e0:a8:33:be:ef:b9:5b:e6:ae:28:30:00:bf:6b:15:ef:07:
         10:4a:43:d5:a0:b6:60:78:d4:52:4d:4f:49:04:9c:14:5f:a4:
         03:5c:5f:9f:88:b9:97:f1:b4:98:ef:44:29:16:fa:d2:79:86:
         33:72:a4:4b:19:26:21:e4:e1:32:66:08:9b:f8:09:ef:b2:ba:
         d8:d4:d8:e2:c8:af:48:d0:fc:cd:3c:de:98:1a:5f:ba:b2:c7:
         9a:12:d6:dc:35:64:85:9e:a3:af:23:e2:cb:9f:b0:a4:9e:de:
         93:81:c4:ea:1d:9b:60:d0:74:d8:40:69:04:64:6c:23:8b:be:
         12:e5:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:56:37 2025 by rpki-client