Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CB91CC20915A11F0869D352DC4F9AE02.roa
File:                     CB91CC20915A11F0869D352DC4F9AE02.roa (raw, json)
Hash identifier:          dUYPfEp2WEHft3jNa01MbOjXePX/+13up+6x5zykbQY=
Subject key identifier:   BF:8E:88:EB:04:96:85:5A:1E:58:DC:DC:A7:B6:FF:EF:E2:B3:01:A5
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       369E
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CB91CC20915A11F0869D352DC4F9AE02.roa
Signing time:             Sun 14 Sep 2025 11:06:00 +0000
ROA not before:           Sun 14 Sep 2025 11:06:00 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     834
IP address blocks:        175.29.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 14:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13982 (0x369e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Sep 14 11:06:00 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68c6a197-b61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:09:02:f5:09:1f:50:35:5f:60:5b:32:26:
                    dc:b2:d4:b9:91:a9:0d:c4:7f:ce:b1:c0:b0:14:45:
                    b7:e0:be:ea:2a:6d:be:84:9c:d7:6e:fc:72:c2:54:
                    76:ef:0e:85:41:74:f4:4d:30:92:52:93:94:a9:28:
                    87:58:c5:03:bf:1d:5c:ee:f0:e9:e7:f2:24:9a:e4:
                    65:a9:84:65:3f:c2:d3:11:c8:eb:2f:66:a3:1b:f6:
                    39:a6:2c:cc:6c:9f:78:9b:cf:d7:a8:26:7c:1c:6a:
                    24:48:f2:99:b6:e1:0d:00:01:8a:3d:9e:bb:29:c8:
                    7f:3d:ad:4e:8e:16:45:96:55:9a:95:89:4e:3a:8f:
                    29:30:d2:8d:d1:5d:8a:2b:36:fd:3c:6d:d0:25:6e:
                    4d:17:64:f7:61:25:c2:ab:34:e7:3e:0a:19:b5:b3:
                    ed:a5:00:a2:7f:b4:9e:72:12:11:6a:d6:96:02:46:
                    de:ed:1c:8a:4c:f7:af:b9:de:1e:43:76:ae:88:18:
                    78:a5:0b:68:0c:62:ba:3a:d0:4b:a7:6c:ac:35:23:
                    6d:02:28:05:6f:07:70:2b:f9:a1:e4:7b:1c:c2:53:
                    bd:51:11:b6:ce:a0:c5:94:91:5a:d0:51:77:08:d1:
                    f6:6b:41:bb:49:c1:26:1d:a7:f4:15:9e:dd:94:b4:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8E:88:EB:04:96:85:5A:1E:58:DC:DC:A7:B6:FF:EF:E2:B3:01:A5
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CB91CC20915A11F0869D352DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:60:3f:47:03:1e:48:7b:a6:b5:c3:8a:a1:a8:19:84:b1:46:
         38:f7:61:26:ae:dd:bc:f8:2c:b5:6a:bd:c4:c9:aa:8e:ec:bb:
         b4:f2:fa:57:49:ad:de:f6:5f:5f:8c:b0:1d:3c:0d:56:0e:a1:
         5c:c7:47:61:98:b7:78:f3:be:db:3e:5e:79:ae:5c:87:e7:ee:
         16:e7:f8:3f:3a:90:5c:cc:42:a0:47:f0:6d:5b:89:f1:c8:06:
         19:68:d4:ec:28:74:4e:ad:ff:8b:e7:f9:3b:b8:8b:b3:03:39:
         62:96:0f:a1:f7:3a:8f:5f:d1:8f:df:a5:7c:64:86:cf:cb:a5:
         0d:bc:47:f0:0f:b5:45:26:82:f3:3c:66:4b:94:a2:4b:3c:ef:
         69:d2:57:9b:06:e7:54:85:22:a3:ce:43:b9:6e:b8:a3:ea:cf:
         fa:06:5a:5e:94:a9:dc:ed:6c:49:ef:8c:6e:69:44:22:71:53:
         fc:2f:36:53:1c:b7:bd:31:ac:45:f4:12:dd:84:8f:c4:8d:14:
         b2:25:97:b9:3c:fe:a4:95:63:24:7f:c8:c8:75:b2:7f:9f:46:
         aa:23:ed:e7:33:7d:0f:ff:03:6b:bb:19:a5:a4:57:9f:38:e1:
         54:a0:e5:26:28:e4:31:a2:55:19:d8:4b:e7:af:3c:bf:eb:b4:
         cc:ad:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:35:12 2025 by rpki-client