Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
File:                     27560994BA0611EB8B424C22C4F9AE02.roa (raw, json)
Hash identifier:          6pIeJa5XHZxFNB4lFdKcS5COM+fLfin0ZU91W6J3bYE=
Subject key identifier:   C7:3B:D1:6D:8E:A5:76:E8:19:4E:E5:D2:51:A4:E9:A4:5C:1D:71:DB
Certificate issuer:       /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Certificate serial:       061B
Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 23:23:56 +0000
ROA not before:           Thu 02 Oct 2025 23:23:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     45939
IP address blocks:        202.4.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
                          rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
        Validity
            Not Before: Oct  2 23:23:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df098c-d701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:e4:84:59:b4:88:02:41:32:27:48:da:bf:
                    4c:c5:1a:b4:04:1a:fe:41:c5:af:72:6b:11:5d:f8:
                    2f:fc:42:23:7e:46:c0:35:8d:43:a7:1e:88:dc:59:
                    2d:95:ea:5d:a3:cf:e2:26:9e:16:b6:32:f5:e3:a1:
                    14:86:bf:4d:c6:dd:d2:e6:14:21:bb:c7:65:33:17:
                    9e:a3:04:2b:d7:79:87:f7:67:be:d5:e2:38:13:95:
                    b8:47:4a:f2:5c:37:a1:55:45:3a:c6:64:35:04:33:
                    16:87:9b:1b:07:e2:87:c1:8d:89:a5:68:5d:19:d3:
                    b0:a4:ef:6d:c6:48:0f:bf:38:7d:ec:2c:53:29:ab:
                    a2:06:50:3d:02:9c:bc:8d:41:90:c7:2d:a9:31:cd:
                    13:55:ca:d2:a4:98:1b:22:10:c6:19:a9:b8:29:49:
                    12:0e:a5:f1:21:e2:67:c4:d2:1a:de:4a:e7:b0:79:
                    26:4c:2b:b0:b7:0f:69:1e:7e:6b:22:1e:13:4d:15:
                    16:58:49:10:18:1f:fa:7f:b3:fe:31:54:38:77:bb:
                    a2:32:72:0a:5d:83:f0:b9:67:6a:a8:23:e6:a4:95:
                    ed:5e:15:14:86:b3:ec:52:1b:b7:5f:da:1e:b8:08:
                    46:fe:04:b1:e5:b4:f1:51:88:e4:5c:6e:4e:d2:9a:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3B:D1:6D:8E:A5:76:E8:19:4E:E5:D2:51:A4:E9:A4:5C:1D:71:DB
            X509v3 Authority Key Identifier:
                keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:f3:ab:83:75:e3:be:c2:4b:8f:9c:ba:db:ba:3e:97:dc:
         4b:40:65:cd:45:6e:25:25:09:0f:ca:f9:68:1f:6b:57:88:ab:
         52:1e:08:53:34:e6:5c:0c:8f:39:42:f8:c9:66:10:82:1b:91:
         44:48:08:cd:02:fd:f3:7f:04:57:10:7b:81:87:36:9c:2a:f9:
         4d:17:ab:1d:a3:3c:e3:c8:97:19:52:05:70:c8:1b:39:25:4d:
         d7:21:af:e0:6b:1f:97:23:9e:00:e3:d1:0c:31:be:41:01:82:
         8d:11:64:fd:de:bc:cb:01:c6:00:8b:4b:38:ce:03:61:f7:99:
         7e:8f:30:43:33:fd:9a:c5:e2:86:e2:e5:ce:df:9c:f5:50:54:
         b1:89:9e:2f:d8:34:42:9c:09:32:25:00:c2:60:85:38:b6:ea:
         83:3e:94:25:c1:ea:fb:f7:1c:b0:ec:36:36:37:c4:a3:c7:42:
         7a:8e:44:d3:db:ee:88:69:7c:25:ce:23:d9:8b:21:dd:ee:20:
         ec:38:68:b8:95:26:26:97:6e:73:f3:05:c8:d0:97:cb:df:09:
         cb:72:28:5c:97:73:21:c2:39:60:f3:eb:73:0b:91:67:b4:81:
         82:5e:91:b1:3e:4b:cf:c3:ce:e9:8b:54:62:d8:6d:a2:6a:16:
         97:86:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 15:14:07 2025 by rpki-client