Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/C5B717905EDA11F0A5EAB579C4F9AE02.roa
File:                     C5B717905EDA11F0A5EAB579C4F9AE02.roa (raw, json)
Hash identifier:          PqNnMtc0YzN3eHNjrg0ykkeSPjuNLhEa4HAV6yMUzA8=
Subject key identifier:   69:93:FB:E2:78:8C:90:FD:D1:B3:18:9D:8D:56:C8:69:FB:A0:3C:F5
Certificate issuer:       /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial:       03
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/C5B717905EDA11F0A5EAB579C4F9AE02.roa
Signing time:             Sat 12 Jul 2025 04:43:36 +0000
ROA not before:           Sat 12 Jul 2025 04:43:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154031
IP address blocks:        2402:15e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
                          rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
        Validity
            Not Before: Jul 12 04:43:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6871e7f8-4272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:e9:54:90:f7:64:1f:c1:5a:64:7b:ca:e3:
                    ff:7b:89:6c:0a:71:ab:fd:0f:03:e0:2a:c3:f3:e5:
                    fb:c8:30:57:49:37:8f:e7:e6:0e:02:3b:f6:66:3c:
                    a3:ad:33:aa:f0:1c:ca:0c:a8:47:93:72:d5:97:1d:
                    83:51:ec:f9:da:f3:7e:68:20:91:e4:1c:da:28:e7:
                    fd:9a:d9:81:61:b6:f0:d5:98:02:3b:c7:e1:a5:e2:
                    d2:56:86:c3:32:16:f7:cf:81:89:63:b5:d3:ee:fd:
                    39:7e:73:b0:fd:59:10:a7:65:d7:ef:4b:dc:bd:32:
                    60:c5:5a:99:5a:f8:ea:62:0f:c3:03:a9:ce:be:d7:
                    df:27:fd:5e:85:a3:4a:83:52:7c:5a:c8:d7:dd:5a:
                    f1:47:0c:7f:ec:95:5b:e7:f8:5c:88:06:a0:77:5b:
                    0f:14:fa:21:d7:ce:d6:f9:76:a7:82:82:20:4a:7f:
                    4f:17:22:ae:64:dd:00:3c:15:da:e0:98:4a:54:c3:
                    04:5d:19:f2:66:da:7f:43:48:b2:45:a1:81:5e:f2:
                    1e:de:86:54:57:33:93:6f:21:18:1c:a2:ba:2c:b7:
                    ef:b9:6a:0b:b3:a9:a6:85:02:cd:c2:75:5f:cf:22:
                    cd:79:c2:0d:97:9f:ef:9f:09:3a:66:19:ca:f3:ab:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:FB:E2:78:8C:90:FD:D1:B3:18:9D:8D:56:C8:69:FB:A0:3C:F5
            X509v3 Authority Key Identifier:
                keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/C5B717905EDA11F0A5EAB579C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:15e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:43:2b:d8:21:c4:a6:06:38:15:e6:6f:34:79:cb:12:03:19:
         74:2c:30:27:54:fe:a4:e9:19:e3:75:fe:38:08:b7:d3:44:08:
         29:36:8e:9b:f8:03:65:0b:9f:4e:50:24:1c:e4:e4:ce:2b:a4:
         27:1e:05:21:b5:7f:1d:c1:ab:54:df:d2:a1:da:f6:d7:63:03:
         ac:c9:95:e3:e4:80:08:b7:90:f2:ab:dc:97:4c:53:b2:be:87:
         85:3b:a5:38:7f:ca:17:d9:b1:00:98:8f:2b:1e:f1:8e:f1:0c:
         a1:30:f5:42:87:79:ff:19:44:5b:f4:70:3d:62:6c:25:36:a6:
         1c:76:59:8f:5f:56:56:e0:45:4e:ee:1c:b3:e3:5f:76:5d:85:
         c7:e3:e0:b1:9c:76:e9:28:33:5f:e2:e8:31:13:5a:f9:ea:54:
         b1:6f:66:0d:93:aa:4a:3c:94:ef:9c:5f:23:d0:8e:a4:e1:53:
         bf:c1:fc:8a:00:05:d4:4d:97:01:8d:34:3d:09:79:94:de:f8:
         c2:82:50:7c:13:af:21:af:48:38:e5:29:20:62:14:9c:79:6e:
         e0:93:42:54:61:33:76:2a:eb:6a:a4:d8:7f:79:60:6a:f8:9d:
         80:c4:40:dc:79:6a:24:dc:46:b7:95:78:94:5e:01:9d:71:21:
         21:e1:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:30:12 2025 by rpki-client