Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
File:                     1767CE4A93C711EDB3D8A867C4F9AE02.roa (raw, json)
Hash identifier:          MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=
Subject key identifier:   92:90:66:10:33:FE:C3:41:AC:67:24:5E:AC:E3:BF:36:54:D7:09:18
Certificate issuer:       /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial:       05DC
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 23:35:26 +0000
ROA not before:           Thu 10 Jul 2025 23:35:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     29473
IP address blocks:        2001:df6:cd80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
        Validity
            Not Before: Jul 10 23:35:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68704e3d-271f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:14:35:fd:20:41:5c:72:80:e5:e6:a0:62:
                    3c:6f:61:37:87:64:46:2d:e4:c6:97:38:da:91:4d:
                    0e:65:14:52:98:e8:9c:e3:b3:cd:67:8c:97:db:ee:
                    19:97:2a:ed:b0:6d:35:64:72:22:bd:35:11:c2:64:
                    56:40:5c:8f:c9:6b:7f:58:22:49:fa:80:f5:2e:9b:
                    a2:b3:0a:a2:17:b2:1c:f6:c4:a5:35:87:4d:de:93:
                    97:43:32:07:71:d0:c7:15:96:af:27:54:4e:1c:ee:
                    5b:ed:4b:2b:53:71:8c:a5:c2:68:d0:4c:cd:2f:21:
                    91:26:b6:87:1c:ad:9b:85:87:ec:e7:aa:64:2a:36:
                    0f:08:d4:6a:ae:0b:6c:15:6e:b9:9b:31:a5:0d:84:
                    54:1d:6a:45:63:b2:ca:4b:13:80:e0:6a:af:15:c1:
                    27:a4:b3:ae:61:80:1a:36:7f:58:32:f4:1d:14:7c:
                    3f:b1:45:0d:97:60:a9:7e:5e:9e:bf:97:eb:6c:d1:
                    d4:f4:54:b9:d8:dc:86:c5:88:33:f0:b9:ad:35:6a:
                    cd:9c:10:5b:37:d3:29:db:fa:b7:e3:e1:e3:cc:85:
                    d8:db:b0:a2:05:35:d3:f5:ca:5c:35:46:93:be:37:
                    37:26:e3:df:83:a3:99:6c:0c:e9:0a:9c:99:3d:57:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:66:10:33:FE:C3:41:AC:67:24:5E:AC:E3:BF:36:54:D7:09:18
            X509v3 Authority Key Identifier:
                keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:cd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:12:31:a7:e1:3d:a8:7c:da:ca:d3:ec:81:d9:5f:ec:9f:43:
         52:c7:cf:d5:32:3f:b8:93:70:89:a4:1d:64:dd:78:c2:9c:46:
         10:71:26:53:77:97:a0:18:10:7c:56:f8:44:7c:b3:d6:4c:08:
         3b:70:bf:29:cc:7b:77:0f:a8:db:04:b4:b0:6d:34:8d:bc:82:
         0a:39:75:2e:5c:db:1c:69:d9:cb:fa:e6:63:9a:e0:7d:50:e3:
         9b:9c:46:87:cc:f8:cf:a2:1a:70:fc:4a:ea:1c:7c:d4:83:b2:
         dc:ff:43:ff:dd:ec:03:f6:44:e1:e6:4b:74:a9:64:2f:83:8d:
         57:f0:09:72:8b:52:1e:92:c7:e9:e2:5e:be:fe:a7:31:08:d8:
         09:20:2a:91:10:3a:6b:38:72:92:a2:31:97:96:3e:36:07:c9:
         73:c6:94:7b:ed:8d:c7:7c:c0:9e:b0:30:8d:b2:b7:18:0d:5a:
         0a:f4:b3:6a:f9:db:2f:56:aa:5a:6e:d5:a9:55:d1:fd:c3:4c:
         c2:ab:db:16:08:3f:3b:ee:a0:0e:53:d6:4e:37:0a:d8:53:e8:
         bc:88:be:ea:3b:09:57:59:03:4e:6f:1b:5c:b8:44:24:f3:a0:
         fc:35:e5:93:1e:a0:58:b3:c9:ad:2c:13:f1:ac:26:8d:28:d3:
         2f:c8:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:53:07 2025 by rpki-client