Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/54F4ED62A4D511EA863BC00AC4F9AE02.roa
File:                     54F4ED62A4D511EA863BC00AC4F9AE02.roa (raw, json)
Hash identifier:          zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=
Subject key identifier:   C5:75:A2:F0:4C:3F:7B:69:32:13:05:27:DB:27:EE:ED:08:3B:EA:16
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       26EE
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/54F4ED62A4D511EA863BC00AC4F9AE02.roa
Signing time:             Sat 10 May 2025 16:03:51 +0000
ROA not before:           Sat 10 May 2025 16:03:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38264
IP address blocks:        115.186.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9966 (0x26ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: May 10 16:03:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681f78e7-9ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:40:d4:1e:02:96:4b:10:50:35:a1:fc:01:
                    7e:d6:48:2a:3f:67:0b:65:02:4f:32:c9:de:8e:06:
                    dc:0f:8a:c2:32:34:e7:ae:9c:84:17:1a:8a:75:56:
                    20:ac:08:85:0c:8f:c8:12:f3:26:52:de:12:bf:6b:
                    5d:49:3f:16:c4:a1:97:64:15:41:ea:34:17:ef:aa:
                    4f:c8:e0:26:00:e9:eb:1d:40:3b:0b:23:38:79:c8:
                    04:26:06:80:c7:db:7a:a8:21:46:e5:65:a3:08:c3:
                    3a:34:26:88:e4:34:e0:0e:81:9d:db:16:2b:49:70:
                    8c:ab:93:50:17:41:4a:0d:e9:bc:42:cb:cc:59:4a:
                    89:f3:4f:74:69:0d:50:be:83:62:a4:a5:4d:4c:d2:
                    47:19:c8:9f:3b:ba:1e:bd:1f:d0:f4:a1:f0:fc:20:
                    c0:15:a1:9c:d6:28:4d:b2:1a:7a:0e:5d:bb:e7:a1:
                    56:9c:b9:ff:a9:7f:7f:a1:36:d0:ec:8f:82:af:db:
                    c3:37:b3:71:81:17:c0:c7:0b:f3:f6:d8:a2:9b:7e:
                    ca:c8:9a:f2:43:b2:bf:4c:e0:00:4f:c9:16:32:68:
                    3c:b9:11:a3:76:4a:f1:96:a0:1f:17:23:01:d7:dd:
                    f9:a4:55:cc:23:ad:b3:38:78:58:c2:d4:1c:23:83:
                    4c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:A2:F0:4C:3F:7B:69:32:13:05:27:DB:27:EE:ED:08:3B:EA:16
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/54F4ED62A4D511EA863BC00AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:67:ea:01:cb:ab:75:5c:9d:06:9e:8b:9a:7a:52:d6:f9:
         ed:59:09:23:29:83:c1:24:9d:40:9c:05:d8:03:3d:f5:05:47:
         a9:cb:0b:89:6e:47:60:53:39:a2:1b:43:a5:b1:b6:75:ea:2f:
         33:9c:4f:32:75:15:92:58:65:22:a6:63:4c:ed:07:a4:ec:13:
         a6:01:17:d0:a3:85:19:7f:e2:0b:cd:67:20:02:35:4e:34:ac:
         5b:3e:89:dc:fe:0f:10:f5:e1:6f:43:43:5b:e6:08:5f:b2:ef:
         4d:1b:86:83:c6:48:a6:bc:f8:9e:9d:cd:bc:03:91:fd:3c:69:
         72:7d:40:b4:52:44:99:d5:6e:fa:9e:47:c9:62:99:67:a4:f0:
         a3:cc:39:0a:79:38:f4:f9:17:f7:94:99:d2:74:fc:ca:8f:98:
         7d:9d:13:f9:43:9a:24:31:04:de:f3:a9:68:44:49:83:7a:0f:
         9d:39:d7:60:fe:98:9f:06:ed:76:48:19:7a:5d:81:f3:0f:1f:
         dc:35:a0:92:05:d9:a1:23:58:df:69:8b:70:08:c3:e9:42:28:
         42:a8:49:46:31:c2:df:4b:6d:20:75:d9:68:c7:ee:22:c8:b4:
         06:68:6d:e5:a9:51:e3:4c:2e:69:77:e2:b8:6a:a4:9a:4e:58:
         e1:41:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:36:52 2025 by rpki-client