Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
File:                     E9CF18DE0F7111F096BBCF24C4F9AE02.roa (raw, json)
Hash identifier:          LJYk/G3tN+KuXhxLY4vLUCBZc2tSEaFJTdOb4sX/qHg=
Subject key identifier:   D7:7C:E8:EA:83:F3:1D:FD:64:48:8F:E1:52:3A:96:CE:2E:5C:CA:AA
Certificate issuer:       /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial:       35
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
Signing time:             Wed 09 Jul 2025 08:44:20 +0000
ROA not before:           Wed 09 Jul 2025 08:44:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138975
IP address blocks:        2001:df3:d540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
        Validity
            Not Before: Jul  9 08:44:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686e2be3-d083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:57:19:7e:4a:86:c1:c6:71:62:52:1f:d6:
                    ff:e8:0d:86:a3:91:21:4a:80:69:2e:ff:9d:0c:b5:
                    f5:db:e7:1c:6e:b4:4c:fb:74:88:a3:c8:0d:b9:01:
                    ff:ed:18:44:a4:ee:be:05:b7:5a:29:37:90:5c:8a:
                    f5:1a:f0:7b:73:2a:df:f9:3b:09:22:37:4f:76:a5:
                    19:f0:71:5b:9e:5d:23:dc:1d:3c:67:8b:0c:33:b2:
                    7f:df:32:49:c7:02:03:e6:15:ab:af:fd:08:59:e2:
                    76:05:8d:e6:cd:f1:6a:ae:34:4d:e6:23:8a:bf:29:
                    1c:74:c1:8c:de:b5:ea:eb:a8:25:92:40:71:92:76:
                    9d:0f:9c:6f:cf:dc:9b:a0:c1:38:06:5b:fe:f1:22:
                    6a:77:80:80:1b:b7:fb:87:66:f5:a9:27:b4:e7:a0:
                    48:f0:8a:8f:f9:3a:b4:86:7d:d6:3a:21:e4:69:8c:
                    fb:82:65:11:e2:25:64:96:2a:2d:f6:a2:47:8e:32:
                    2e:f4:8c:25:73:23:a3:72:1e:b3:ea:b6:a7:17:fc:
                    ab:5e:9a:dc:ee:31:37:ff:40:b7:f2:61:8d:45:c6:
                    d2:65:c2:a4:56:b6:0a:94:b7:d7:39:ad:09:81:cb:
                    70:35:2c:4f:d3:d9:ed:20:ca:d6:79:0f:3b:9a:ed:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:E8:EA:83:F3:1D:FD:64:48:8F:E1:52:3A:96:CE:2E:5C:CA:AA
            X509v3 Authority Key Identifier:
                keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:d540::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:6b:97:09:67:e1:f1:e9:15:9d:c2:db:d0:20:ea:b6:05:6a:
         36:62:2f:3a:67:3a:3b:ec:ca:6d:86:5e:22:96:d9:90:1d:b9:
         cb:4b:9e:f1:43:26:ae:2f:02:09:5f:7a:d3:b6:be:5a:79:53:
         22:74:61:ac:53:f0:5a:a9:3b:a5:bc:ee:a9:d2:0d:47:42:2b:
         27:15:a9:d4:97:1d:f5:e6:c9:46:8c:cb:7b:13:0e:2d:a3:02:
         ff:22:ac:07:5f:1e:f3:5a:13:46:32:be:c7:e8:ae:6e:0a:ef:
         9a:d1:33:b9:82:a1:b8:72:de:65:1e:f8:48:7d:ab:32:68:ea:
         71:48:c0:ac:cc:ef:b3:27:1e:a8:81:b7:56:9e:1c:d7:d6:5b:
         1e:55:ed:b6:fe:de:76:d8:1b:fb:67:ad:8c:ea:0e:a0:69:cc:
         4a:78:24:6a:bf:85:0a:1c:da:d4:48:c2:8f:5c:a1:82:12:de:
         d6:58:9d:7e:97:a2:11:de:37:f3:fc:1e:17:9f:74:37:23:87:
         71:30:42:07:21:a5:4d:e0:04:f0:97:c1:6a:8c:8a:75:19:e4:
         c1:d2:e6:9d:28:78:fd:6b:f2:62:31:c4:45:2b:a8:4a:b6:02:
         b5:76:49:92:14:14:b0:4d:17:fa:30:6e:93:4a:ef:71:12:b7:
         ca:ec:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 05:53:02 2025 by rpki-client