Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/D455E69C623511F0B0F5155FC4F9AE02.roa
File:                     D455E69C623511F0B0F5155FC4F9AE02.roa (raw, json)
Hash identifier:          FJRdymd8wZbvTsi6HMqdNDE91aX5F6UwCVSReU3zMAo=
Subject key identifier:   1F:CC:C5:16:FC:BB:68:5B:D6:07:31:2B:87:A9:86:3D:7C:A3:0B:15
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       025B
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/D455E69C623511F0B0F5155FC4F9AE02.roa
Signing time:             Wed 16 Jul 2025 11:12:58 +0000
ROA not before:           Wed 16 Jul 2025 11:12:58 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     213607
IP address blocks:        115.42.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 02:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Jul 16 11:12:58 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6877893a-6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:cb:2e:d2:dd:a2:73:7e:fb:4f:3a:8d:e9:
                    b0:c8:46:00:92:24:94:3d:3c:ee:4c:6b:fc:2f:43:
                    d1:97:0e:25:8a:75:6d:89:da:a9:07:46:95:b1:5e:
                    92:cd:99:c9:cc:54:da:db:45:a8:84:8f:18:de:81:
                    9a:a9:5d:62:59:f4:bd:50:11:96:d3:08:ab:98:29:
                    41:df:1b:a3:a6:d0:6e:39:9a:8f:f9:c4:22:b1:73:
                    f4:f2:07:b8:9c:ea:ac:62:a9:65:29:91:4a:b6:8a:
                    98:be:f8:a8:9d:43:c8:38:e9:3e:c8:03:09:75:be:
                    75:b1:4f:fc:6d:46:a6:ce:06:08:d1:f5:28:66:f6:
                    2d:f4:1a:e6:57:34:4d:60:79:26:0e:ab:88:41:1e:
                    ce:29:11:9f:f6:5d:92:bb:83:17:d6:56:cc:ce:27:
                    83:8e:35:77:01:da:74:16:26:0b:02:b3:68:17:b0:
                    1e:a0:2f:13:d1:22:5f:ef:25:c7:e5:bb:cb:07:d7:
                    e3:cb:43:4b:8c:ac:86:b5:62:2f:47:2d:3b:0a:f0:
                    b8:3a:a8:61:84:07:ae:03:04:0c:e7:bd:57:c0:41:
                    a4:61:c0:59:5b:63:49:45:9d:0e:ae:54:ed:e4:39:
                    0d:76:96:2d:08:43:44:2b:44:d5:28:7d:e4:0a:f4:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:C5:16:FC:BB:68:5B:D6:07:31:2B:87:A9:86:3D:7C:A3:0B:15
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/D455E69C623511F0B0F5155FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:bd:6e:82:a8:7b:99:9c:58:6f:30:52:5b:d0:b7:ab:12:
         27:15:5e:bf:40:0d:b0:89:d3:6e:8c:30:13:db:7b:f5:ca:ee:
         81:4f:a0:1d:c7:57:03:a9:c7:75:93:38:4e:2b:c0:88:9c:dd:
         fe:a3:ed:77:d1:32:14:1f:d1:1a:ac:40:7d:bf:39:20:44:d3:
         9c:c8:c9:80:5a:b6:00:48:55:dd:34:cf:d8:39:01:37:33:30:
         fc:04:6f:b6:a2:92:3b:37:6c:bb:a1:63:90:14:3c:05:1f:40:
         82:5d:8e:0a:7b:ac:dc:db:98:ed:fe:0a:92:a6:69:f0:73:e7:
         77:a8:01:96:f5:7f:13:08:4b:e7:1a:5d:ba:56:42:d2:7c:79:
         46:8b:53:80:cd:ae:ec:b9:29:c9:9a:47:12:ea:86:58:9a:77:
         47:bc:77:65:56:9b:03:2a:82:57:bb:a7:c9:cd:e0:d2:7d:18:
         f5:62:69:e8:14:e2:86:f2:1a:6f:87:cc:64:2d:f2:63:23:98:
         70:6f:88:2b:5f:a4:73:ba:5c:19:ba:1c:23:b2:fb:5a:c7:87:
         94:58:ab:23:6c:5f:d3:48:ed:3c:0c:29:df:1d:16:8b:d4:ca:
         5f:40:de:6c:1a:f9:96:1e:18:e1:05:86:cc:8a:0f:32:63:83:
         96:3b:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:10:50 2025 by rpki-client