Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/E61BEE5C605711EF9150403FC4F9AE02.roa
File:                     E61BEE5C605711EF9150403FC4F9AE02.roa (raw, json)
Hash identifier:          CCiK9Z7hOvpBEdDuVHROFOhxvRBudD3Mcnii4SWAHa4=
Subject key identifier:   5D:9A:0A:7C:BD:6F:6E:18:0D:DC:E5:F4:E4:C8:82:E7:1F:02:66:DB
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       C7
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/E61BEE5C605711EF9150403FC4F9AE02.roa
Signing time:             Thu 03 Jul 2025 06:10:28 +0000
ROA not before:           Thu 03 Jul 2025 06:10:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138997
IP address blocks:        2401:a420::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 05:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Jul  3 06:10:28 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68661ed4-a341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:df:8a:ce:69:79:1f:f8:25:80:07:8e:2e:
                    d2:4d:9e:23:5d:c1:36:13:1d:a9:87:b4:ce:66:5e:
                    93:f6:61:ac:bd:17:70:cf:c3:50:19:29:95:9d:1a:
                    d8:d5:2f:b2:7d:91:31:2d:e0:f2:67:fd:2e:63:74:
                    32:e2:5f:5c:a6:74:93:e9:c1:05:3b:d6:d0:f7:1d:
                    46:f8:1c:9e:29:32:44:96:2c:b3:1f:bb:9f:fd:bf:
                    59:e6:e1:9e:7e:84:47:e7:75:db:c5:f8:cc:78:ad:
                    f9:c0:c5:03:8c:e4:6c:6e:93:71:75:ac:13:d2:b2:
                    af:e8:cc:c0:68:6b:59:01:16:63:d3:36:84:56:38:
                    e7:de:88:b8:4d:a3:1d:79:6f:9d:c5:61:72:f2:36:
                    99:e9:f2:30:fd:06:1e:93:8f:39:9f:04:b8:6e:47:
                    10:04:16:6a:d4:18:4e:fd:67:cf:3e:b1:d3:4d:72:
                    a1:aa:32:4e:57:1c:fd:94:08:61:df:02:56:82:fe:
                    98:4b:ce:c5:0f:9d:b7:78:e0:b4:ae:60:0f:8d:df:
                    90:24:c6:e2:07:a4:0e:e3:8f:c6:82:0b:ac:b3:53:
                    3e:d1:73:96:be:6b:d6:60:62:dd:08:5f:ad:c5:a5:
                    95:6d:49:f4:7a:4f:a7:e5:a7:6a:0b:4c:e9:4b:b3:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:0A:7C:BD:6F:6E:18:0D:DC:E5:F4:E4:C8:82:E7:1F:02:66:DB
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/E61BEE5C605711EF9150403FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a420::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:e9:ac:47:a2:f3:52:3c:39:e1:01:ef:14:d0:61:9d:88:
         0a:1f:2f:3c:ec:5a:88:63:be:2c:de:84:7f:c1:6b:82:da:34:
         e4:fb:ff:98:d2:5b:c4:19:81:ea:61:7f:2e:63:cf:91:94:a5:
         f3:b3:18:2e:61:59:d8:ad:24:4a:b2:d0:3e:b9:13:1e:b2:ad:
         4f:f9:a2:0f:b2:77:a2:8a:80:ba:9b:d1:96:f8:d4:c8:46:9e:
         4f:c0:31:98:03:0f:a7:8d:15:13:8e:57:ae:11:41:22:14:81:
         43:00:9d:52:9b:e2:4c:9b:57:43:ae:eb:17:27:1c:61:a2:a6:
         2e:c4:59:fc:83:fe:60:3a:1f:0b:31:b6:b6:74:76:5b:59:08:
         53:0b:16:3b:b3:da:b5:dd:c4:93:46:fb:62:18:fa:d8:38:ba:
         32:01:31:fb:bf:d0:07:ae:2d:5f:89:90:23:8a:2c:07:ba:07:
         5d:f2:f4:fa:58:01:1b:02:07:41:91:52:29:91:6d:ae:0e:3c:
         bd:88:14:75:e4:c7:0d:4a:a4:5f:ec:1d:96:07:6d:c3:2e:5d:
         c9:cf:6a:5e:6b:5e:22:bb:4b:61:30:15:e8:15:d9:4d:e7:81:
         61:ce:de:68:10:26:38:a7:b2:e9:61:9e:ce:98:e9:b3:e0:23:
         63:7e:75:93
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE1RkIxMTAvBgNVBAUTKDkyRUI4RUYyQzZFMjYxNjk4OEE5OEZENUIxM0VFMkEz
NkIyMjFDNDMwHhcNMjUwNzAzMDYxMDI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY2MWVkNC1hMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVnfis5peR/4JYAHji7STZ4jXcE2Ex2ph7TOZl6T9mGsvRdwz8NQGSmVnRrY
1S+yfZExLeDyZ/0uY3Qy4l9cpnST6cEFO9bQ9x1G+ByeKTJEliyzH7uf/b9Z5uGe
foRH53XbxfjMeK35wMUDjORsbpNxdawT0rKv6MzAaGtZARZj0zaEVjjn3oi4TaMd
eW+dxWFy8jaZ6fIw/QYek485nwS4bkcQBBZq1BhO/WfPPrHTTXKhqjJOVxz9lAhh
3wJWgv6YS87FD523eOC0rmAPjd+QJMbiB6QO44/Ggguss1M+0XOWvmvWYGLdCF+t
xaWVbUn0ek+n5adqC0zpS7M1UwIDAQABo4ICljCCApIwHQYDVR0OBBYEFF2aCny9
b24YDdzl9OTIgucfAmbbMB8GA1UdIwQYMBaAFJLrjvLG4mFpiKmP1bE+4qNrIhxD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTVGQi9DNzNDNDU5ODJF
QzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdXVPOHNiaVlXbUlxWV9Wc1Q3aW8yc2lI
RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t1dU84c2JpWVdtSXFZX1ZzVDdpbzJzaUhFTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE1RkIvQzczQzQ1OTgyRUM3MTFFRjgyMjA4MjczQzRGOUFFMDIvRTYxQkVFNUM2
MDU3MTFFRjkxNTA0MDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAaQgMA0GCSqGSIb3DQEBCwUAA4IBAQBgv+msR6LzUjw5
4QHvFNBhnYgKHy887FqIY74s3oR/wWuC2jTk+/+Y0lvEGYHqYX8uY8+RlKXzsxgu
YVnYrSRKstA+uRMesq1P+aIPsneiioC6m9GW+NTIRp5PwDGYAw+njRUTjleuEUEi
FIFDAJ1Sm+JMm1dDrusXJxxhoqYuxFn8g/5gOh8LMba2dHZbWQhTCxY7s9q13cST
RvtiGPrYOLoyATH7v9AHri1fiZAjiiwHugdd8vT6WAEbAgdBkVIpkW2uDjy9iBR1
5McNSqRf7B2WB23DLl3Jz2pea14iu0thMBXoFdlN54Fhzt5oECY4p7LpYZ7OmOmz
4CNjfnWT
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:34:58 2025 by rpki-client