Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/9830B6D8663D11EE8CBBAE7CC4F9AE02.roa
File:                     9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (raw, json)
Hash identifier:          RmkIIPTPM365rnHi3iyE65DKC/DdOKV16KKoUBGaAYI=
Subject key identifier:   97:79:43:35:1C:E2:72:C5:B0:DC:CD:53:28:37:CB:5E:4A:5E:6A:F4
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       0199
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/9830B6D8663D11EE8CBBAE7CC4F9AE02.roa
Signing time:             Wed 13 Aug 2025 04:42:10 +0000
ROA not before:           Wed 13 Aug 2025 04:42:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        203.6.127.0/24 maxlen: 24
                          203.11.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Aug 13 04:42:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689c17a2-b199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:b1:db:f7:28:c9:22:e0:f9:57:ed:ce:bd:
                    c9:b1:86:24:98:59:3e:f5:1b:2c:b6:7c:f2:a3:57:
                    da:3d:08:71:36:ef:44:88:58:cd:21:07:11:43:a7:
                    fd:ed:15:de:a1:1d:d8:89:ee:9b:4d:4c:a2:c0:3f:
                    22:b9:66:a5:94:8e:92:d5:20:f0:c3:a7:48:e8:42:
                    d8:e3:38:54:3b:18:66:c7:4c:f6:4d:4e:b4:92:36:
                    c8:71:78:1a:90:a3:91:7b:df:da:de:0a:bd:7f:3c:
                    ef:3f:7d:44:30:47:70:16:97:4d:c5:47:cd:ab:59:
                    90:2a:dc:65:f3:c6:7c:83:5d:13:4d:d7:3b:ac:a0:
                    f5:74:42:e2:4f:29:50:24:41:48:0a:ce:38:a7:48:
                    bd:d2:63:04:82:6f:5d:4c:c7:76:d7:6c:21:47:18:
                    b0:53:6b:cd:37:a2:96:fb:eb:86:3a:2b:47:a8:35:
                    a9:cd:7e:fa:8e:4e:28:30:4a:0b:66:2a:b3:07:36:
                    10:d1:49:db:d6:9e:c9:a7:cf:98:57:11:ed:c7:36:
                    38:d2:b9:c6:af:6f:c4:62:4c:6c:04:b7:9c:ca:87:
                    98:0f:bb:ea:50:a8:54:7b:b6:08:a4:e8:b6:a8:d3:
                    bf:9e:5a:f9:c3:aa:b3:58:97:d6:11:3f:01:fb:58:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:79:43:35:1C:E2:72:C5:B0:DC:CD:53:28:37:CB:5E:4A:5E:6A:F4
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/9830B6D8663D11EE8CBBAE7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.127.0/24
                  203.11.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:5a:24:7f:51:d8:a1:d1:22:2b:65:61:b7:ce:59:22:ac:50:
         20:86:5b:71:b4:f7:49:4d:4f:80:0a:ca:9b:08:16:08:ec:f2:
         ad:de:fe:7a:74:93:ec:86:65:21:29:2f:96:5d:7e:21:1b:ad:
         87:e3:4a:e9:b8:3d:8b:f6:dc:4f:19:73:6e:41:bb:4e:0a:ca:
         d0:13:5c:57:0a:3a:1c:58:c7:c3:31:26:a0:d0:d0:62:31:9e:
         0d:9c:37:95:7f:ce:9c:ed:41:51:9a:9a:30:55:4e:48:a4:a4:
         81:69:23:50:54:65:b6:5e:43:1b:43:07:7b:bf:fc:38:69:83:
         f0:5c:ca:e4:e1:50:3b:42:64:ac:40:80:04:79:a5:7a:ce:55:
         b2:6a:22:6f:0b:3d:01:c8:2e:1f:20:38:ec:9c:49:04:83:7c:
         de:73:6b:1f:1d:57:fc:b1:e5:57:e0:b4:4b:b5:53:6f:15:c4:
         93:11:3b:91:b9:79:c2:0d:b7:08:c4:8e:1a:19:5b:77:7e:5a:
         fd:94:b3:55:9c:cc:e0:e7:6d:f2:15:8d:6c:08:6e:70:79:a6:
         de:48:cc:1f:6f:00:18:33:76:1c:6b:91:71:42:67:b0:7f:e4:
         f2:1d:15:ed:0e:dd:f7:55:22:c8:47:22:51:93:84:51:7e:a9:
         24:57:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:02 2025 by rpki-client