Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DCAF30B6E4AC11EF86681673C4F9AE02.roa
File:                     DCAF30B6E4AC11EF86681673C4F9AE02.roa (raw, json)
Hash identifier:          CCgryJwN6xFRuehVX3urvAQNyTPWJr+/1FV0HN0I8as=
Subject key identifier:   D1:98:9B:E4:59:78:58:7C:99:2A:C2:C1:0F:55:DD:F7:24:42:47:25
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       368B
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DCAF30B6E4AC11EF86681673C4F9AE02.roa
Signing time:             Thu 04 Sep 2025 09:42:08 +0000
ROA not before:           Thu 04 Sep 2025 09:42:08 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     4637
IP address blocks:        175.29.19.0/24 maxlen: 24
                          175.29.20.0/24 maxlen: 24
                          175.29.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13963 (0x368b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Sep  4 09:42:08 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b95ef0-a1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:54:ab:7a:3a:25:9a:72:0d:61:db:fb:54:f6:
                    42:00:c2:f0:dc:c5:76:b6:41:ed:b4:83:b9:da:1f:
                    ab:ba:a4:09:c9:dc:25:c4:78:25:a8:93:c8:de:d5:
                    c9:6a:bd:7e:15:18:cc:12:b3:bb:b5:75:a2:16:b3:
                    7b:83:fc:c9:a7:75:7f:0a:ec:fa:6b:70:ca:7f:c0:
                    37:93:94:ce:1d:d2:5b:f3:cb:b3:4d:9d:64:78:11:
                    b0:6f:2c:74:c0:30:ad:0a:01:f9:7a:08:6f:90:fd:
                    38:be:a3:96:41:97:7c:3a:06:58:00:ad:3d:31:c7:
                    fa:5e:c3:97:37:3d:f6:f0:ce:3f:d2:e5:8f:7e:80:
                    dc:8e:61:41:8c:d7:6f:f9:c8:4e:56:74:c1:81:25:
                    a7:33:cd:78:a2:4b:85:6e:65:77:35:0a:35:38:13:
                    31:49:c9:06:ba:69:1c:1a:56:3b:6a:ac:06:69:61:
                    ff:d6:fe:84:3f:8f:16:72:db:d6:e3:54:2d:69:66:
                    39:db:a5:11:58:95:10:8b:91:54:2a:7a:f9:bf:55:
                    35:c2:13:cc:a5:29:2d:8d:ff:30:31:d6:2b:e2:16:
                    48:ae:c6:c6:75:b6:d7:0b:3e:eb:ef:e0:20:9d:44:
                    20:32:84:40:c1:ef:16:7e:c6:eb:43:95:7e:3a:55:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:98:9B:E4:59:78:58:7C:99:2A:C2:C1:0F:55:DD:F7:24:42:47:25
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DCAF30B6E4AC11EF86681673C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.19.0-175.29.20.255
                  175.29.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:d1:d9:6a:1e:bb:84:7a:c8:b8:2d:13:4d:d5:0d:3b:33:
         e2:34:f7:ff:70:c6:6a:7e:15:42:30:a3:ac:b1:27:44:f9:be:
         61:5d:39:8c:03:b4:36:e0:2d:95:cc:84:42:bf:ae:83:b3:92:
         75:5f:67:37:59:ee:ac:04:c3:73:5f:81:f1:7e:08:fd:7e:42:
         1b:e6:9f:2e:ff:23:fa:66:21:ab:ed:1f:b8:02:dd:45:92:ac:
         40:51:ee:92:3f:f6:77:2e:0f:b2:82:46:9d:f8:06:29:37:50:
         a6:e5:96:ed:73:9f:f7:35:e2:9f:8f:d5:01:79:99:11:86:09:
         c0:32:41:52:c4:5e:08:7f:0a:45:59:89:5e:e1:13:e4:a4:23:
         0d:4c:ca:4f:ac:cd:65:2f:c2:fc:71:76:ef:e5:a7:f7:b4:19:
         56:c1:97:bb:8b:29:1b:7f:32:0c:7c:1e:c0:3d:d6:b0:47:96:
         77:47:78:17:8d:25:6a:1c:1a:2f:47:bc:79:b9:b4:a8:2f:4f:
         c2:6d:b7:27:6c:b3:47:44:1f:79:4f:90:cb:85:3e:11:2e:ff:
         5c:d3:82:36:d7:32:62:43:93:a6:b6:76:05:7c:93:64:d6:d6:
         94:91:d6:58:ea:8f:3a:31:30:d0:0e:b6:3e:e6:d5:39:50:07:
         60:b0:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:52 2025 by rpki-client