Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/466891560ADA11ECBFAECB29C4F9AE02.roa
File:                     466891560ADA11ECBFAECB29C4F9AE02.roa (raw, json)
Hash identifier:          Gi3ZB3u4tIqQA57JWptzmGj4T0h+RzUq8o/c0VetBYI=
Subject key identifier:   3C:75:1F:1C:D3:36:46:20:B9:78:72:8B:CD:F3:53:C9:09:A1:02:34
Certificate issuer:       /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial:       0B73
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/466891560ADA11ECBFAECB29C4F9AE02.roa
Signing time:             Sat 12 Jul 2025 19:59:26 +0000
ROA not before:           Sat 12 Jul 2025 19:59:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     0
IP address blocks:        45.127.172.0/22 maxlen: 22
                          101.97.43.0/24 maxlen: 24
                          183.177.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
                          rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 19:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
        Validity
            Not Before: Jul 12 19:59:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6872be9e-5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:4d:41:7f:9c:7d:8e:dd:1b:8e:e7:4a:e2:
                    6f:00:e6:77:9e:18:d9:72:56:1e:48:c8:66:55:0a:
                    f7:00:7a:84:19:69:03:f4:09:0f:ca:f8:ad:41:62:
                    b8:30:cc:9d:fd:20:17:9a:2f:4f:ab:4e:2f:67:c6:
                    da:ed:3c:16:ac:69:4b:db:29:b9:14:cb:79:d2:ba:
                    78:ef:c7:20:0c:71:14:cc:59:6c:1d:24:f8:80:db:
                    10:d0:ab:65:aa:cc:87:0b:6c:6b:af:b2:12:28:22:
                    21:a7:d9:75:dc:d7:54:8e:23:1f:07:e0:75:99:01:
                    33:6a:ec:c2:77:bf:0c:dd:2f:7c:07:84:4a:9b:35:
                    94:84:22:52:b6:61:4a:66:cd:71:f8:ab:80:25:4b:
                    e5:53:f9:e8:78:55:0b:c6:01:d6:56:dc:a9:e1:f9:
                    b5:76:6d:eb:6e:bc:74:3f:4f:5f:70:18:43:47:7b:
                    2c:3b:ad:0d:01:e7:79:d2:2b:61:f5:04:f9:60:fc:
                    5a:a5:91:a9:64:be:be:11:00:8c:ef:b5:86:1c:1a:
                    fe:22:a5:df:f0:77:0e:98:a4:e2:70:79:a6:a0:ae:
                    12:f5:54:b5:19:2b:bf:28:ab:c1:75:7b:cd:dd:26:
                    a9:f3:89:60:d0:de:6c:37:97:be:22:6b:1f:1a:b8:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:75:1F:1C:D3:36:46:20:B9:78:72:8B:CD:F3:53:C9:09:A1:02:34
            X509v3 Authority Key Identifier:
                keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/466891560ADA11ECBFAECB29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.172.0/22
                  101.97.43.0/24
                  183.177.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:52:38:2b:8c:a6:cb:79:96:f7:75:e2:ea:b3:e5:51:24:
         cb:dc:38:f1:f8:a6:67:c0:fb:bd:38:c2:87:ac:da:b1:9d:b9:
         d8:6e:65:2c:35:a6:fc:a3:33:8a:eb:22:98:60:bc:1f:68:4d:
         7d:7e:ad:44:3f:bd:13:9c:ec:21:9d:61:a3:0e:f2:ac:b5:de:
         8a:5d:90:45:78:bb:fe:9b:aa:eb:b0:05:cb:c2:4e:fc:62:94:
         26:f5:2a:f2:ac:60:e4:96:4c:0b:c9:db:b8:d4:ef:4a:53:03:
         cd:91:40:2a:91:56:24:f0:b4:ea:6f:1d:45:94:79:a8:84:6d:
         d5:56:6f:c2:60:cd:8b:66:fa:10:fd:40:dc:45:77:2a:c9:71:
         68:97:ad:35:e1:a9:61:04:39:52:f5:46:3c:d7:0a:58:92:67:
         a3:39:33:ab:0f:30:37:b6:74:0a:a0:f9:43:5c:af:a0:24:12:
         cc:c1:d3:23:40:94:8c:29:22:1d:aa:b7:60:69:f8:a3:f3:ce:
         40:04:b8:1a:93:00:6b:8e:12:4e:7d:29:0c:13:17:1a:ea:9c:
         5c:97:8c:69:c2:45:77:98:0e:21:1a:4e:c9:a9:cd:95:5e:e4:
         6d:c3:2c:7c:6e:35:13:91:2e:d5:d6:ef:ab:ff:31:69:10:23:
         34:61:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:32:33 2025 by rpki-client