Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/055A1A7A05FC11EFB61A7767C4F9AE02.roa
File:                     055A1A7A05FC11EFB61A7767C4F9AE02.roa (raw, json)
Hash identifier:          J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=
Subject key identifier:   90:4D:E1:B3:6F:74:E3:B6:D7:4C:6C:AE:27:E5:31:A1:B1:A1:47:7C
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0D5A
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/055A1A7A05FC11EFB61A7767C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 18:27:41 +0000
ROA not before:           Thu 10 Jul 2025 18:27:41 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139901
IP address blocks:        2403:1e40:fffc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
                          rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 18:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3418 (0xd5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: Jul 10 18:27:41 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6870061d-09c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1c:f0:27:c9:d8:42:1f:76:3b:4b:54:dd:a4:
                    ce:1c:07:62:db:56:5a:fa:f1:30:4e:38:7a:96:45:
                    b4:57:ba:0f:c9:fa:c6:30:ae:29:24:30:2f:6e:dc:
                    15:1a:2e:79:42:63:9f:d8:51:00:c8:4c:19:7a:b1:
                    5d:9b:53:8f:54:e1:86:a7:5b:cf:76:ff:ed:01:71:
                    35:f2:1d:82:06:e7:46:a1:f4:87:20:4b:ca:cd:73:
                    68:83:32:b9:02:42:77:01:95:f4:6d:19:ea:3b:1a:
                    19:a7:bf:fc:26:05:df:43:c4:59:d5:75:26:3b:6f:
                    ee:60:78:88:5d:83:4a:24:d1:a5:b3:b6:5a:61:55:
                    ab:7d:6a:47:e0:61:76:4d:9b:3c:28:12:b2:9d:d6:
                    2d:7d:53:0d:ce:5b:20:5a:0b:3f:ca:dc:be:2a:31:
                    d3:84:9c:06:a5:36:f2:d9:e4:b8:fe:e7:fc:d8:db:
                    57:5a:5a:b4:4e:5b:9e:5d:56:c2:18:f1:6a:5a:e0:
                    62:e1:11:44:ba:fb:9e:8b:92:fb:5c:36:f5:c3:84:
                    24:15:d6:08:93:28:0c:c2:c0:51:6d:d9:b5:ab:4a:
                    ce:95:29:ea:b9:49:94:7c:da:29:7e:81:b9:b6:8c:
                    7e:b5:e0:f2:a9:4a:d0:e9:d9:15:f1:9a:0e:3c:9c:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4D:E1:B3:6F:74:E3:B6:D7:4C:6C:AE:27:E5:31:A1:B1:A1:47:7C
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/055A1A7A05FC11EFB61A7767C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1e40:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:c5:a2:5c:c1:26:20:d6:34:df:32:ad:5d:50:7b:9e:b0:8a:
         4f:85:5d:1b:38:a7:5c:f1:91:38:df:44:c6:a8:0b:c5:44:6f:
         37:61:a6:5c:4c:68:91:c9:13:2f:3c:92:dd:10:4e:91:3d:49:
         5d:80:36:db:25:e5:94:50:8e:ad:52:b8:d5:ad:7b:46:35:c2:
         db:51:16:4d:3f:8e:80:96:a8:fc:cf:9c:3c:0b:96:06:74:86:
         7a:27:d2:52:5f:34:32:83:d4:91:72:77:69:d6:52:dd:f2:44:
         ab:cc:28:6a:90:f5:d9:9c:74:1e:90:e6:09:a6:f9:68:fd:dc:
         10:67:91:fd:04:34:b5:2c:8d:03:18:51:48:f7:c6:a3:b1:0c:
         ea:14:9d:4d:77:d4:db:29:5f:28:d9:c8:65:8f:28:ea:ee:a8:
         78:55:b7:e6:8b:6d:ae:72:b0:f1:21:1b:5b:3c:d6:a5:12:4a:
         48:b3:42:5f:96:3d:16:13:d1:99:d9:f8:4c:af:c4:14:b8:c4:
         0c:32:5e:7e:0c:c7:60:6e:62:aa:27:03:8a:a5:4a:90:c0:9f:
         78:05:32:30:99:7b:43:ca:c6:01:c9:80:de:4b:b8:98:8e:7a:
         73:8c:90:8a:6f:d9:4b:30:a3:ef:66:75:9f:07:3b:42:10:88:
         21:37:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:30 2025 by rpki-client