Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CAC7F396915A11F0869D352DC4F9AE02.roa
File:                     CAC7F396915A11F0869D352DC4F9AE02.roa (raw, json)
Hash identifier:          sGDUAj0K+hHugFpvWj7A1b4sAOUNF122JYK9lW9KQmA=
Subject key identifier:   D5:60:3C:3E:F3:3A:83:93:91:FA:86:46:A7:4C:A7:05:84:7C:60:E3
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       369D
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CAC7F396915A11F0869D352DC4F9AE02.roa
Signing time:             Sun 14 Sep 2025 11:05:58 +0000
ROA not before:           Sun 14 Sep 2025 11:05:58 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        175.29.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 14:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13981 (0x369d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Sep 14 11:05:58 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68c6a196-71e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:27:dd:8c:14:5f:6f:a5:b7:d0:01:11:11:
                    71:d6:eb:1c:f6:b7:2f:ab:8c:59:82:f1:c2:5b:1c:
                    18:a0:02:12:a1:53:f7:9a:29:f9:f5:1f:a9:e9:03:
                    17:bc:53:af:42:2a:27:2b:fd:f1:fc:d6:1a:6b:43:
                    6a:16:f3:9b:fd:3c:7e:1a:9c:f4:40:3d:9e:2b:a2:
                    37:3c:f5:fd:17:f2:03:0e:05:4a:5b:4d:55:e3:0d:
                    47:9b:53:f0:73:0c:bd:b3:fa:a7:31:80:c3:75:7b:
                    35:63:ce:44:23:71:96:26:92:b7:19:f0:fc:db:92:
                    d2:57:b0:d6:fe:98:e8:3f:ee:0c:4c:48:c4:02:d3:
                    13:3a:9f:47:7d:6d:45:b8:f5:cb:64:c2:af:62:44:
                    28:9f:c3:db:59:a0:38:c8:4e:c4:f5:10:e6:5a:4b:
                    6e:14:9d:5e:73:e1:d8:70:f1:fb:8d:8d:6a:95:ef:
                    5c:94:4b:01:fd:64:71:ce:83:bd:dd:2f:40:d3:bd:
                    33:52:35:58:1f:6a:ff:18:88:24:99:16:3f:a8:41:
                    48:56:17:58:dd:1b:50:f3:bb:f0:4d:55:ec:e6:ff:
                    22:6d:87:12:ed:5d:f8:21:f7:5b:1d:46:83:08:b2:
                    65:b5:04:f2:8c:39:d2:31:72:5b:bc:1b:27:f1:30:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:3C:3E:F3:3A:83:93:91:FA:86:46:A7:4C:A7:05:84:7C:60:E3
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CAC7F396915A11F0869D352DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:69:2b:7f:eb:db:ba:77:fb:a2:4b:59:9d:76:84:02:23:
         77:e2:b9:41:a9:7d:20:ae:49:1c:f9:6d:15:74:b3:76:b9:80:
         a7:1c:04:de:c7:94:8e:46:bd:21:0d:04:08:67:a6:7b:18:7f:
         6f:a0:fa:b8:34:d2:77:64:1e:52:a6:c1:f6:6f:c2:02:50:0a:
         08:62:27:a1:98:ae:a2:d5:bc:a3:b7:76:f6:98:da:3e:ed:29:
         06:5d:da:61:c6:15:41:08:b8:56:74:86:0f:d3:0c:77:2d:3e:
         6d:8f:8a:cd:d5:aa:b2:26:35:7e:13:7e:26:a7:bd:f5:5d:35:
         b0:6b:20:76:a0:19:2f:d8:50:66:1b:58:3f:68:18:c1:36:98:
         29:20:e2:85:b1:4b:64:f8:32:bb:0f:2c:24:cf:6b:8b:70:0f:
         0a:9c:4f:8c:87:4b:ae:82:cc:00:bb:2b:aa:ee:5f:33:38:79:
         1e:3a:b2:f8:3f:d2:cd:95:f6:d6:ae:aa:3d:39:f5:54:d4:f7:
         90:84:68:03:d9:e9:ff:25:88:08:89:8d:18:6f:42:70:9c:ac:
         7f:7d:46:00:5a:a3:15:9e:4d:48:95:32:53:40:e1:f1:37:86:
         dd:23:9f:fb:ea:34:d6:7a:cf:b1:6e:28:0a:4e:c8:33:2b:81:
         f9:d9:91:61
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUwOTE0MTEwNTU4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGM2YTE5Ni03MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Kcn3YwUX2+lt9ABERFx1usc9rcvq4xZgvHCWxwYoAISoVP3min59R+p6QMX
vFOvQionK/3x/NYaa0NqFvOb/Tx+Gpz0QD2eK6I3PPX9F/IDDgVKW01V4w1Hm1Pw
cwy9s/qnMYDDdXs1Y85EI3GWJpK3GfD825LSV7DW/pjoP+4MTEjEAtMTOp9HfW1F
uPXLZMKvYkQon8PbWaA4yE7E9RDmWktuFJ1ec+HYcPH7jY1qle9clEsB/WRxzoO9
3S9A070zUjVYH2r/GIgkmRY/qEFIVhdY3RtQ87vwTVXs5v8ibYcS7V34IfdbHUaD
CLJltQTyjDnSMXJbvBsn8TBqQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNVgPD7z
OoOTkfqGRqdMpwWEfGDjMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvQ0FDN0YzOTY5
MTVBMTFGMDg2OUQzNTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvHREwDQYJKoZIhvcNAQELBQADggEBAAp2aSt/69u6d/ui
S1mddoQCI3fiuUGpfSCuSRz5bRV0s3a5gKccBN7HlI5GvSENBAhnpnsYf2+g+rg0
0ndkHlKmwfZvwgJQCghiJ6GYrqLVvKO3dvaY2j7tKQZd2mHGFUEIuFZ0hg/TDHct
Pm2Pis3VqrImNX4TfianvfVdNbBrIHagGS/YUGYbWD9oGME2mCkg4oWxS2T4MrsP
LCTPa4twDwqcT4yHS66CzAC7K6ruXzM4eR46svg/0s2V9tauqj059VTU95CEaAPZ
6f8liAiJjRhvQnCcrH99RgBaoxWeTUiVMlNA4fE3ht0jn/vqNNZ6z7FuKApOyDMr
gfnZkWE=
-----END CERTIFICATE-----
Generated at Thu Sep 18 15:10:02 2025 by rpki-client