Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/6981A2B8879A11F0A06BE519C4F9AE02.roa
File:                     6981A2B8879A11F0A06BE519C4F9AE02.roa (raw, json)
Hash identifier:          7R6c3P6vpeH4DdhQAPICMa8Q+S+CZI2f3bujefwXy6o=
Subject key identifier:   F9:0F:23:AA:E9:96:F5:66:A4:9D:B7:1A:4A:19:34:A2:BA:40:1A:74
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       0682
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/6981A2B8879A11F0A06BE519C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 01:16:11 +0000
ROA not before:           Tue 02 Sep 2025 01:16:11 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     138384
IP address blocks:        193.82.160.0/19 maxlen: 19
                          193.114.32.0/19 maxlen: 19
                          193.114.64.0/19 maxlen: 19
                          193.114.192.0/18 maxlen: 18
                          193.115.0.0/19 maxlen: 19
                          193.117.96.0/19 maxlen: 19
                          193.118.0.0/19 maxlen: 19
                          193.118.64.0/19 maxlen: 19
                          193.119.128.0/17 maxlen: 17
                          194.193.64.0/19 maxlen: 19
                          194.193.224.0/19 maxlen: 19
                          194.223.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 22:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Sep  2 01:16:11 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68b6455b-3e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:23:f7:32:3a:b5:b2:46:3a:ba:e9:c8:93:
                    51:32:94:ed:5c:e8:6b:91:18:22:9a:4c:7c:a3:cc:
                    32:13:81:35:e1:d9:dd:95:2c:26:e4:fc:e8:7a:ba:
                    33:f5:15:d0:26:5a:ca:b0:ed:20:8e:99:1e:50:b3:
                    0b:6e:eb:b1:42:7b:c7:5f:af:15:f6:9d:de:7e:30:
                    df:a0:97:a9:37:d1:f0:2c:06:e3:48:fa:42:48:2e:
                    8e:a6:e8:12:3f:d7:ef:c0:a6:13:d1:cc:c2:9c:11:
                    db:01:90:7a:80:ed:dc:98:3b:63:f3:a3:ac:c1:46:
                    f3:1d:42:00:d1:0b:7e:0a:72:7e:96:d4:7e:52:96:
                    d3:64:6a:99:b2:e0:ca:23:a8:c9:8b:b4:6c:e1:89:
                    69:fe:39:90:49:e6:6c:88:20:de:b3:1b:95:f3:a9:
                    46:52:fd:97:5f:9a:9d:bd:9c:38:d9:37:38:be:e7:
                    c0:e1:63:b1:cc:34:a7:db:8b:ae:14:21:ee:02:70:
                    6f:ec:9e:11:dc:d1:7c:e7:fb:0b:72:5f:5c:72:93:
                    0f:e7:50:e1:b6:e2:93:10:06:07:17:9b:5a:f0:03:
                    ec:f7:25:dc:4e:a5:50:73:41:6b:5e:6d:40:7f:5f:
                    f0:ce:f8:61:79:b2:f2:c3:a9:ee:58:91:3b:f7:83:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0F:23:AA:E9:96:F5:66:A4:9D:B7:1A:4A:19:34:A2:BA:40:1A:74
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/6981A2B8879A11F0A06BE519C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.82.160.0/19
                  193.114.32.0-193.114.95.255
                  193.114.192.0-193.115.31.255
                  193.117.96.0/19
                  193.118.0.0/19
                  193.118.64.0/19
                  193.119.128.0/17
                  194.193.64.0/19
                  194.193.224.0/19
                  194.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:18:7c:9a:62:16:da:be:cc:d2:05:37:d2:3e:e0:6f:13:bb:
         5d:22:0d:34:14:0c:28:85:05:8c:6d:6c:86:23:d1:1a:ce:12:
         21:be:d5:d1:a2:ba:22:b0:2d:76:59:79:c6:b4:f6:d7:41:49:
         ef:38:f5:62:23:7d:7e:6b:92:a2:d6:2b:ea:b1:08:c6:a4:81:
         2f:6b:16:3d:ad:22:0b:4b:02:00:e8:30:2a:f5:e9:a7:0f:b3:
         2a:fa:74:32:07:ff:ce:30:e3:71:0e:0a:13:3e:75:86:96:9b:
         59:ba:79:cd:9a:07:ae:99:ac:b2:1e:7b:a9:eb:25:17:76:de:
         31:f5:d7:5c:ff:a2:22:bb:17:93:fd:b7:b3:0d:8c:8b:f2:9c:
         81:d4:08:ec:95:12:e9:a1:1b:71:a8:3d:a5:ef:d9:71:54:93:
         74:ce:6a:58:45:a6:f7:97:63:88:49:a1:d4:42:f3:c8:1f:dd:
         f7:11:6b:cc:38:90:26:8a:a9:81:ac:f4:9d:4a:f5:19:e2:19:
         d5:76:04:f1:2f:9c:a4:0e:9e:6c:eb:d3:9c:7c:47:6a:cb:d4:
         a1:65:ca:bb:95:b8:cf:e1:3b:51:28:42:59:de:e6:97:6d:1c:
         23:e8:b6:49:fc:5a:82:34:dd:46:4d:d6:a3:0c:bf:76:89:32:
         fa:e3:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:48:25 2025 by rpki-client