Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
File:                     740B66A6C09A11EE9839DC42C4F9AE02.roa (raw, json)
Hash identifier:          Dm164N8IoyQt1jp0TcwYgwG4HOUHThII1pGgU4Frf9A=
Subject key identifier:   24:19:22:55:BD:43:F9:A4:FF:7B:42:8B:3B:17:5E:03:85:CB:65:51
Certificate issuer:       /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial:       013B
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 05:33:03 +0000
ROA not before:           Wed 01 Oct 2025 05:33:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133217
IP address blocks:        203.33.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
                          rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
        Validity
            Not Before: Oct  1 05:33:03 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68dcbd0f-b22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:9d:3c:5a:03:d5:c0:5f:de:1b:aa:af:ee:
                    67:41:01:53:e5:57:4e:f3:2e:56:77:19:2c:5e:50:
                    60:e2:9c:c7:7c:b8:44:54:e2:77:3a:ff:ef:06:08:
                    1e:ab:84:e0:33:d1:66:4f:43:63:8c:c6:8e:83:3c:
                    b7:1b:4e:db:79:c8:8b:5d:23:0a:d2:a7:5c:96:8c:
                    2d:f8:a2:3c:12:7b:6d:eb:b1:05:50:eb:1e:5f:b6:
                    29:a9:f1:58:6c:0b:e7:47:cf:32:ab:06:57:70:0d:
                    e0:40:77:10:22:37:49:1b:64:df:d2:f5:89:7b:04:
                    c4:17:eb:20:8f:22:d7:2d:61:38:46:7e:41:b9:8e:
                    27:e4:d9:1c:a4:d4:c9:79:49:c3:b7:55:27:dc:40:
                    25:21:a8:a0:b5:f0:32:34:bc:cf:2b:c2:66:81:3f:
                    79:9f:4d:d3:5f:5d:75:6c:85:47:53:e6:97:0e:36:
                    ce:a4:05:e0:8b:3e:f2:9d:45:b0:1a:89:ac:c9:00:
                    76:9b:87:73:4d:4f:b2:77:09:1e:6b:e3:f5:81:32:
                    98:81:7f:ec:5a:34:7f:4d:03:d7:23:c2:81:d1:ea:
                    b6:d8:1d:86:f0:52:80:b9:af:8c:92:0a:98:04:b0:
                    92:27:82:df:4f:a8:d8:39:02:43:79:46:f8:23:75:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:19:22:55:BD:43:F9:A4:FF:7B:42:8B:3B:17:5E:03:85:CB:65:51
            X509v3 Authority Key Identifier:
                keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:71:31:b4:96:dd:dd:d3:34:e3:4b:44:d1:a9:5b:b2:d1:06:
         9f:70:38:b5:04:b0:be:48:6b:da:87:e6:04:f8:3e:b2:67:61:
         c9:7a:30:63:d9:d8:61:76:72:0e:4f:27:de:ca:bb:59:10:71:
         81:8b:f3:88:0a:60:0a:66:99:03:98:4b:b5:69:ae:3b:20:bc:
         3f:ef:90:f0:9f:63:c6:6c:b4:00:cb:78:2e:b9:9c:e3:e2:9a:
         68:30:4a:ac:06:d3:9d:d4:af:d2:e0:62:85:99:40:6c:52:3a:
         0c:f7:0e:05:28:1d:4f:ab:93:26:85:e7:9b:c3:b0:4d:9c:89:
         8b:b1:3b:1e:d4:a3:14:4e:17:50:9a:f3:5e:74:2f:4d:cf:78:
         e5:a9:7d:14:83:c3:77:e2:5a:33:2e:be:b9:cd:fc:49:92:e4:
         01:15:da:0d:c3:6b:68:bd:11:b2:0a:53:e2:84:f4:04:e7:cc:
         9c:a5:e7:91:e6:e4:eb:32:dd:c1:de:80:de:2a:38:55:08:d9:
         7b:fc:a4:b3:0f:f8:4a:ba:2a:25:d1:84:e6:37:d6:0f:ab:6a:
         f0:17:46:3f:58:5d:65:a2:c1:29:f8:b2:e6:80:3d:d6:17:be:
         0e:2c:11:85:b6:94:04:e2:9c:96:41:fa:a6:68:dc:dd:73:34:
         7e:4a:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:48 2025 by rpki-client