Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/766AE05E614611F09CC5B85AC4F9AE02.roa
File:                     766AE05E614611F09CC5B85AC4F9AE02.roa (raw, json)
Hash identifier:          VxDk7PIGlg4d7UuqFMx0UW7gDN4AF2vfbs5hldjyXwM=
Subject key identifier:   FD:99:5B:D1:2F:E1:60:47:73:CD:94:7D:50:72:D6:86:EE:AA:F0:43
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3665
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/766AE05E614611F09CC5B85AC4F9AE02.roa
Signing time:             Tue 15 Jul 2025 06:39:31 +0000
ROA not before:           Tue 15 Jul 2025 06:39:31 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     834
IP address blocks:        175.29.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 20:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13925 (0x3665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Jul 15 06:39:31 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6875f7a3-03b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:ae:5d:dc:f5:f3:0b:01:f4:97:98:6c:55:
                    b7:71:73:2e:9f:66:41:c5:58:e5:22:b9:5f:ca:a4:
                    6b:0f:ed:a3:22:bf:67:ee:21:6f:01:92:3a:de:b7:
                    e0:e3:26:2b:1d:53:68:fb:3c:cc:3a:11:3f:71:b4:
                    52:83:7b:b5:da:b2:6b:5a:4f:ce:8d:fe:0b:e9:dd:
                    19:72:c0:df:fb:86:a9:4d:ba:14:b9:90:a2:3d:cc:
                    93:f1:38:83:af:70:38:64:57:a6:cd:b3:e0:3d:d7:
                    e6:0e:f4:42:85:e4:55:ee:d6:43:15:81:cb:f4:08:
                    e4:5f:57:c8:07:cc:5b:10:5f:4e:42:da:74:10:0c:
                    85:57:81:ee:cd:4f:64:45:7e:79:35:fb:4c:81:e2:
                    50:89:c7:1b:f6:17:6e:39:ae:02:c6:9e:79:49:5e:
                    cd:41:a9:0a:b7:57:47:4b:c0:06:8a:a7:f9:b4:87:
                    ca:e3:4c:37:a0:87:fe:dd:05:43:0c:d7:a6:0d:a8:
                    98:9f:a5:37:5a:11:a6:d4:d5:94:df:96:e7:94:b8:
                    a3:40:b0:b6:b6:38:2f:4f:91:18:98:ec:1e:dd:3d:
                    e6:88:b3:8c:1e:73:1b:0d:3a:b5:10:4d:22:5f:db:
                    77:c9:cf:d5:67:ce:23:f1:9d:12:c0:df:a6:2b:15:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:5B:D1:2F:E1:60:47:73:CD:94:7D:50:72:D6:86:EE:AA:F0:43
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/766AE05E614611F09CC5B85AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:91:3e:87:54:2b:14:0f:f9:25:0c:aa:3e:50:44:a5:80:
         45:f4:af:3a:4a:9c:a5:79:ab:0f:bb:09:6d:02:71:fd:62:44:
         c0:9f:71:b5:03:75:ad:06:3b:a3:7b:a1:3b:67:aa:ff:47:b9:
         ed:76:21:66:e4:ff:dc:76:3d:9b:26:e1:b0:08:84:9a:b4:9b:
         bb:12:4e:ce:a6:3f:6a:00:e7:37:01:be:37:c6:00:35:17:fc:
         fe:ab:c7:63:f3:b1:7b:fe:a9:3e:53:54:d7:b7:cf:29:62:36:
         96:3b:90:5b:32:28:52:c0:45:f3:a5:ba:93:b5:6d:c3:a8:71:
         b7:75:a2:b2:cf:24:8f:5c:fc:bc:13:5b:1a:76:fc:8b:5e:eb:
         37:c8:53:a1:c5:8c:41:0c:0a:67:78:82:09:b9:12:23:19:0b:
         54:46:a0:b4:94:e3:41:ab:7c:14:c4:98:08:41:9e:d1:b0:bb:
         c4:4a:9e:32:72:c8:54:a3:5d:5b:a5:c1:29:ff:b3:26:5f:e1:
         47:69:7b:8f:34:e6:3b:9c:c0:6e:15:ce:6d:c8:78:12:94:25:
         24:b6:fe:72:82:ba:a8:be:4d:b1:9c:04:8b:53:7d:74:09:28:
         9f:f2:5c:35:62:2f:d4:cf:37:9a:b4:4e:04:91:c8:81:bb:af:
         a0:3d:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:35:38 2025 by rpki-client