Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa
File:                     47D5EEA2A5FF11F08004B67CC4F9AE02.roa (raw, json)
Hash identifier:          iNZxFEtD+6QgSBLSeVmK2n+qo/Nt14F+67ViKVlRAEM=
Subject key identifier:   52:34:23:A0:90:C3:97:D3:53:44:46:75:FC:22:40:49:E9:E4:93:A6
Certificate issuer:       /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial:       0E
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa
Signing time:             Fri 10 Oct 2025 17:33:49 +0000
ROA not before:           Fri 10 Oct 2025 17:33:49 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     15169
IP address blocks:        152.65.192.0/18 maxlen: 22
                          152.65.192.0/19 maxlen: 24
                          152.65.224.0/20 maxlen: 24
                          152.65.240.0/21 maxlen: 24
                          152.65.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Oct 2025 01:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
        Validity
            Not Before: Oct 10 17:33:49 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68e9437d-26ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:e6:c6:f0:ab:fb:ac:71:78:30:1b:d8:a4:
                    80:1c:70:e6:6d:cb:dd:c4:b6:2f:30:1b:21:aa:7b:
                    5c:31:e5:31:31:31:d9:e0:3a:5b:c7:61:52:ca:db:
                    7f:32:82:c9:76:61:ae:a4:21:b6:8c:3d:61:71:ee:
                    3d:79:4e:27:3d:e0:22:9a:17:76:1d:44:d7:83:24:
                    6b:cf:51:7d:0f:7c:0e:99:12:15:28:63:01:5c:bf:
                    e0:7f:f0:77:47:b0:ea:4b:2c:07:b0:bf:82:c4:02:
                    72:2c:dd:28:88:e7:4a:de:e6:28:78:08:1b:b1:b7:
                    70:dc:bb:77:ba:ca:18:5f:35:e3:40:92:e6:7e:b4:
                    6c:73:bf:cb:a8:15:c2:dc:5c:90:d1:78:59:5e:f2:
                    a4:38:83:fb:0b:b3:03:55:2a:3c:62:77:ab:e9:0a:
                    84:e9:2b:e4:cc:17:0c:18:34:08:a9:4d:80:4c:f0:
                    9e:b8:4b:ad:74:24:16:4d:96:98:e5:21:10:a5:8d:
                    80:e6:1f:df:c2:24:f1:43:cb:91:6b:64:8f:77:c0:
                    42:4d:be:9f:c8:a5:de:f8:2e:14:b4:56:80:b7:4c:
                    19:bc:31:bc:0f:52:ec:95:45:1e:b7:17:d5:06:f9:
                    93:b3:39:49:be:0d:ef:d5:cb:c8:f0:b9:2f:5c:ce:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:34:23:A0:90:C3:97:D3:53:44:46:75:FC:22:40:49:E9:E4:93:A6
            X509v3 Authority Key Identifier:
                keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.65.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:64:f5:f5:97:89:e7:05:2f:35:14:0d:dc:30:f2:28:98:f2:
         55:33:4b:db:99:47:6a:bf:29:72:8a:90:f7:36:d0:48:f6:8e:
         52:67:0c:d0:c4:d1:66:2c:ff:f1:0f:17:7d:4c:c9:3b:7a:dc:
         b2:18:da:60:fb:27:73:e1:01:3b:d0:db:25:40:6f:c2:72:e8:
         33:de:90:ec:bb:3b:0b:29:a5:eb:25:d3:36:7b:d3:72:42:bb:
         01:b5:44:9a:1f:80:3a:18:33:59:d3:35:82:05:1c:6e:20:d2:
         e2:8b:7d:02:9c:d8:ef:94:55:af:eb:8a:b4:44:5e:44:91:e5:
         23:45:f3:87:4e:b3:97:24:90:65:60:f1:86:6b:6e:45:15:2b:
         0c:8e:3c:ed:a6:0a:a0:b9:b4:68:89:05:ca:9b:3b:ab:ba:34:
         ef:e2:3e:fb:8b:db:40:69:35:26:68:be:90:df:41:ea:98:27:
         a3:06:ab:37:ba:a5:00:0b:4e:4b:d5:70:27:eb:fd:08:f4:8c:
         48:70:ad:44:a8:6a:f6:a9:0c:a2:bb:b3:52:d5:71:c6:47:f7:
         56:cc:6f:c7:87:3e:20:77:2b:20:5f:da:29:7b:2e:c5:63:33:
         69:01:71:43:58:8c:aa:f4:9d:d1:32:87:a1:bb:f2:3d:79:35:
         55:e0:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:15:47 2025 by rpki-client