Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/16B651C6048411F094895C27C4F9AE02.roa
File:                     16B651C6048411F094895C27C4F9AE02.roa (raw, json)
Hash identifier:          OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=
Subject key identifier:   F9:8C:EC:32:B2:B4:8C:68:F7:EE:2D:5C:59:AF:47:F0:FB:A8:CB:CE
Certificate issuer:       /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1
Certificate serial:       37
Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/16B651C6048411F094895C27C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 00:37:22 +0000
ROA not before:           Tue 01 Jul 2025 00:37:22 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     23917
IP address blocks:        202.2.112.0/20 maxlen: 24
                          2401:c720::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl
                          rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1
        Validity
            Not Before: Jul  1 00:37:22 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68632dc2-ec2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:bd:13:f8:e2:fc:f0:90:48:a6:41:50:bb:
                    00:47:a0:9e:59:0f:59:d1:3e:43:d9:76:e8:c5:f9:
                    1b:1a:8e:65:96:48:e6:9f:9c:1d:d0:4d:e5:69:48:
                    84:58:68:12:3e:3e:a8:85:7b:35:77:23:2c:ed:4c:
                    0e:bb:d7:1b:2b:9d:f9:9f:7c:54:70:71:c8:2e:2e:
                    91:1f:c8:97:6a:75:48:d8:11:8e:b9:65:e2:1e:47:
                    5e:c2:d3:8f:34:44:94:12:d0:db:99:ac:61:41:59:
                    7d:2f:66:09:9a:aa:74:6f:ff:c3:0d:9d:08:d1:e7:
                    94:a5:cb:68:c9:3e:dd:e9:6b:b8:0f:0c:34:6c:c5:
                    b8:16:c0:66:65:23:53:ea:36:ba:bd:dc:13:4d:68:
                    bc:d9:44:11:c8:99:25:6f:fb:73:2a:b4:3d:90:21:
                    26:e8:6a:32:a2:ba:33:50:d6:25:92:ab:27:a3:c9:
                    2f:72:d1:2b:47:7d:02:c4:99:ee:bc:3f:ba:9c:5d:
                    3c:25:d7:32:82:bc:09:37:6e:d4:5e:20:e9:62:8c:
                    a1:1b:42:6c:78:f4:85:6f:92:11:41:0c:97:ff:84:
                    9b:c7:a8:d7:42:0b:e9:2d:f8:3f:9b:a4:e4:11:31:
                    85:77:ef:84:06:05:a6:6d:4d:ba:7a:5a:ae:a9:62:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:EC:32:B2:B4:8C:68:F7:EE:2D:5C:59:AF:47:F0:FB:A8:CB:CE
            X509v3 Authority Key Identifier:
                keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/16B651C6048411F094895C27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.2.112.0/20
                IPv6:
                  2401:c720::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:07:f6:92:2f:ac:ff:07:b7:1a:06:c3:39:13:41:f8:6e:
         1a:87:56:5b:cd:22:17:39:f5:f2:44:e5:a7:2d:22:c4:9c:ec:
         b0:e2:de:7c:a1:f9:e3:35:97:f3:f7:37:09:e1:a6:85:fc:98:
         b1:6a:24:fe:50:a2:0a:19:b6:a6:fe:50:21:2a:a1:e8:6f:1a:
         20:82:da:ff:7a:c7:ae:11:ca:da:d9:35:3f:91:2c:f9:35:d0:
         87:b2:88:f8:0e:70:3d:b5:62:8d:ce:f2:d3:59:e0:08:8b:9c:
         c8:75:3c:55:4f:28:2e:78:66:42:33:1b:9f:68:9e:0e:29:2d:
         57:13:c0:25:75:d4:bf:03:55:69:fb:98:ae:f1:b2:50:18:cf:
         fc:02:33:60:d5:24:ff:74:c4:83:16:32:ad:4f:a4:dd:c3:2e:
         f7:90:f5:08:a6:78:ed:2f:43:ae:64:67:fa:4a:0c:a8:30:12:
         b8:16:ba:e6:34:c0:1b:c3:ed:16:8d:57:b8:b1:3e:4b:a0:dd:
         9a:10:e7:45:0e:c3:91:19:74:d0:00:d8:5a:7c:51:d0:b5:fc:
         60:34:f6:f6:f7:f9:03:78:a3:d8:3f:57:da:de:a7:bd:43:1e:
         e9:6e:28:6d:91:f0:00:40:f8:a1:99:78:f9:64:6e:54:a5:ad:
         ad:b5:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:45:26 2025 by rpki-client