Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa
File:                     FEDAEBD8932711F0B9305C4FC4F9AE02.roa (raw, json)
Hash identifier:          VjkAptpMs60uk/FTlEzkOXSrZIct+SUWx7NuRhE5BeM=
Subject key identifier:   DB:15:94:B2:3B:FF:98:5C:92:A5:7C:58:DE:8E:CC:D0:DC:1B:5F:4D
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       21C8
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa
Signing time:             Tue 16 Sep 2025 18:07:24 +0000
ROA not before:           Tue 16 Sep 2025 18:07:24 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     31898
IP address blocks:        27.111.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8648 (0x21c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Validity
            Not Before: Sep 16 18:07:24 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68c9a75c-7845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:38:52:15:f4:87:18:31:e2:02:2b:b1:f6:
                    35:27:f8:c0:47:1e:96:c7:30:aa:61:84:3e:e5:f2:
                    89:e5:9b:a9:8a:93:3a:4a:d5:8e:f7:fe:fa:d1:35:
                    de:f4:71:ac:4d:7b:52:ca:0f:60:99:ee:b9:54:23:
                    2b:2b:c9:9f:32:e9:6c:97:7b:86:b9:1a:97:c7:3a:
                    d1:10:f3:25:41:2f:cb:50:3a:5a:4d:5a:e5:9f:1b:
                    04:5a:34:ab:29:d8:47:4a:06:d6:f6:28:bf:42:a7:
                    82:df:33:85:39:5e:ca:f4:8e:6f:22:9c:3e:32:ee:
                    5d:9c:f1:a8:23:ec:15:52:b0:b1:47:9c:17:c3:8b:
                    5e:38:7e:ea:7a:74:71:5e:c1:8f:77:32:bd:db:c5:
                    cb:57:d8:7c:6d:53:2f:1c:d5:6d:f9:b2:fd:a7:f0:
                    2c:0b:80:0f:58:aa:7c:16:21:14:6f:48:24:1c:5e:
                    30:f9:8f:b9:f5:86:fb:7a:0d:94:5c:85:70:93:7d:
                    7d:b7:9d:66:cb:cf:20:2d:7c:0a:0d:55:d7:ad:bf:
                    d6:7b:7f:ae:f2:13:86:78:36:be:f7:58:e8:b9:de:
                    14:fa:8f:bc:a8:12:6f:70:6a:25:ce:c5:8f:df:9e:
                    04:33:ac:7f:17:fc:49:23:41:7a:9d:99:91:d5:46:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:94:B2:3B:FF:98:5C:92:A5:7C:58:DE:8E:CC:D0:DC:1B:5F:4D
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:bc:e1:53:68:7c:1f:83:17:c3:8c:5c:4d:b7:e4:2a:d7:
         e3:8c:ae:c6:2c:b2:70:87:96:43:f8:45:9e:ad:83:e4:c7:2e:
         39:ed:9a:26:de:48:09:a7:2b:92:01:2f:c8:61:d4:34:65:e5:
         aa:f5:d8:55:ba:6d:a7:03:d7:d2:e9:74:54:3c:30:5f:f0:67:
         19:9d:40:f3:78:56:09:56:d1:e6:88:63:85:dc:00:2e:41:ee:
         35:eb:0b:12:0c:f0:22:2e:7c:15:01:7f:3d:b9:b7:fb:a9:87:
         6c:a6:2f:8f:93:a1:6b:2a:b9:98:6d:b7:3d:ff:1d:7e:8a:b5:
         30:ac:bb:c0:c1:b0:40:68:ce:8b:ae:3b:d6:d8:45:bf:83:de:
         1a:5d:76:5c:ea:cc:e5:b2:d1:46:1b:30:57:0f:fa:c8:68:08:
         73:a1:00:b6:9b:f4:50:2a:4d:78:41:0f:1d:93:73:20:f8:79:
         3d:a3:f8:89:dd:9f:5f:0b:7c:da:81:65:68:29:7c:b1:27:5a:
         5b:39:5f:81:80:40:33:51:ab:a1:93:c5:a0:09:2c:4a:c9:65:
         c9:f4:69:74:c9:34:ce:19:ad:d5:28:2f:63:16:0b:df:63:e6:
         76:a4:8a:cf:d0:13:4b:d9:56:80:f8:7d:8d:75:1c:08:5e:ba:
         c5:13:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:02:14 2025 by rpki-client