Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CA726EB27D6411F0A526106EC4F9AE02.roa
File:                     CA726EB27D6411F0A526106EC4F9AE02.roa (raw, json)
Hash identifier:          y3b59N8xTAyBST+gKWzOT+m6SJf9WUMXCwyOq4G/KEM=
Subject key identifier:   60:B8:74:A6:48:91:09:BE:3C:AC:56:24:FE:56:EC:53:7A:7F:99:7D
Certificate issuer:       /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial:       0B33
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CA726EB27D6411F0A526106EC4F9AE02.roa
Signing time:             Wed 20 Aug 2025 01:27:10 +0000
ROA not before:           Wed 20 Aug 2025 01:27:10 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136989
IP address blocks:        223.119.202.0/24 maxlen: 24
                          223.119.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
                          rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2867 (0xb33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
        Validity
            Not Before: Aug 20 01:27:10 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68a5246d-fa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:99:73:f6:ed:83:86:06:95:93:e8:5e:6e:
                    97:fe:2f:a0:fe:56:9c:9b:99:1a:46:8e:67:ba:df:
                    c7:fa:f7:8e:df:a7:1b:23:a5:6a:9d:c9:19:6b:1e:
                    89:19:f2:d5:c0:8a:27:57:6e:39:45:55:df:cc:fd:
                    e5:53:15:68:c0:e7:e5:64:da:81:80:25:50:7f:6a:
                    10:e0:a4:b7:32:bf:7d:fd:79:ed:bc:06:c8:3b:ae:
                    b1:0d:3f:74:67:5d:0c:f3:7e:7f:39:c2:d4:20:f0:
                    ea:9f:02:04:6a:bc:87:c5:a1:27:aa:f1:7e:8e:44:
                    b3:52:b9:8f:82:67:5d:d2:f8:5e:a0:d4:81:a0:df:
                    8b:3f:39:07:01:e9:8e:9f:4b:27:91:03:60:d4:f8:
                    4e:3d:6c:58:6f:21:2f:60:ba:19:ed:9a:55:ca:5b:
                    e0:01:5c:fd:53:e4:ba:5d:aa:70:49:aa:ff:4d:5e:
                    98:5e:06:cc:c0:66:91:2d:e6:fa:2c:a0:dc:bd:63:
                    42:8a:14:ab:ac:c8:96:f9:45:49:18:5f:4f:46:a7:
                    87:8f:22:7a:f2:35:99:2f:99:2f:ff:8e:2e:a4:47:
                    ec:4d:b2:73:1e:25:24:fb:7e:cc:19:a9:83:b2:59:
                    8c:de:f6:1d:70:39:22:bf:3e:a0:02:c0:a9:30:80:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B8:74:A6:48:91:09:BE:3C:AC:56:24:FE:56:EC:53:7A:7F:99:7D
            X509v3 Authority Key Identifier:
                keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CA726EB27D6411F0A526106EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.119.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:59:64:56:18:4f:bb:5c:00:6a:05:e6:fb:e8:9c:dd:ce:b0:
         d2:67:76:ad:dc:d2:34:3e:5d:34:f6:58:06:c3:e7:9b:91:c2:
         5e:6e:d0:37:42:f0:08:7f:3d:a1:7b:0c:b4:c3:f6:85:21:70:
         95:7c:ac:e0:35:3a:f7:b8:97:fc:57:e0:e5:a3:bb:45:f0:b5:
         ec:07:95:27:8c:b5:36:84:0a:3d:6f:58:49:ce:18:b7:2b:4e:
         cd:36:5c:5b:8f:dc:49:d1:d9:8e:80:62:bc:6b:6f:d5:df:34:
         26:7c:14:b0:a3:c6:35:ee:e4:b0:6f:7c:e9:25:e7:3c:d5:7b:
         59:ec:fd:82:5f:c8:9b:07:02:67:f8:6a:25:02:df:cc:09:af:
         04:56:bb:a7:5a:32:e9:73:b0:5d:7f:fa:b0:8d:4f:5a:34:ca:
         17:80:7f:c0:4c:fc:40:b8:ba:e9:91:fb:cb:e5:7c:0d:ee:4a:
         12:a0:2f:78:3f:c2:e6:16:60:34:3b:65:85:1b:88:de:53:cb:
         70:70:72:52:b1:4e:15:c2:96:46:2b:2b:63:c4:5e:00:d2:49:
         ec:40:2e:97:16:34:76:35:be:76:cd:a7:56:1f:bf:7c:a0:0e:
         5f:cf:4f:bc:2b:89:f6:4c:17:05:3e:48:e3:23:5c:c8:a7:f2:
         9a:29:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:32:02 2025 by rpki-client