Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/6D85335A58BC11F0983EE987C4F9AE02.roa
File:                     6D85335A58BC11F0983EE987C4F9AE02.roa (raw, json)
Hash identifier:          YJ4UnxpzDCCzQhrx6wFr1GrzFRiuwNVyQ4kIp3p0jlQ=
Subject key identifier:   13:E5:43:53:18:B7:87:12:F4:BE:50:7B:4C:A5:DB:D9:D2:D5:0F:15
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       0138
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/6D85335A58BC11F0983EE987C4F9AE02.roa
Signing time:             Sun 21 Sep 2025 14:04:36 +0000
ROA not before:           Sun 21 Sep 2025 14:04:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154024
IP address blocks:        202.71.184.0/23 maxlen: 24
                          2401:8ea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 06:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Sep 21 14:04:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68d005f4-0cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:05:c4:30:2b:3c:dd:c6:11:ff:3e:6b:f9:
                    c8:04:7a:02:35:f8:cd:72:1b:1b:55:04:c0:2d:03:
                    de:92:83:6d:88:5a:4b:32:90:cc:b3:c3:0d:42:c8:
                    9a:ea:21:e3:49:3b:da:91:28:f3:6c:60:f3:8c:8d:
                    40:17:8f:da:53:46:5a:8d:d2:18:74:bf:d0:7d:95:
                    c0:88:51:f8:6e:a8:b8:58:41:4c:bd:70:33:95:6d:
                    00:39:f9:39:3f:b5:54:53:b4:ba:06:37:ab:62:5f:
                    8b:43:83:f1:35:9c:a5:7c:ca:1e:4f:2f:31:56:87:
                    67:69:f1:18:cc:60:ea:4d:b5:99:d7:67:e9:71:98:
                    f3:d1:10:ca:7c:61:f7:d2:f9:af:45:f2:ec:a3:e1:
                    9f:96:65:e9:63:5e:a5:ba:08:c6:f5:64:82:c2:61:
                    bf:ce:68:5d:46:5c:e7:f3:90:4c:b1:95:50:53:f2:
                    93:a5:28:17:22:21:18:b2:43:82:4f:34:c1:a9:49:
                    21:f0:2f:e3:c6:a4:b5:c9:3c:23:86:21:dd:c2:98:
                    60:a4:88:58:a7:86:56:64:6e:45:6c:96:99:f2:b9:
                    11:68:ad:52:c4:5d:ae:1e:49:f5:18:fc:10:bb:9c:
                    8e:67:d5:1a:82:60:df:40:06:22:49:05:b0:6f:70:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E5:43:53:18:B7:87:12:F4:BE:50:7B:4C:A5:DB:D9:D2:D5:0F:15
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/6D85335A58BC11F0983EE987C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.71.184.0/23
                IPv6:
                  2401:8ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:b5:d0:e2:67:69:98:8a:28:ee:18:18:2d:f6:9b:36:7b:
         04:7d:17:18:02:6d:28:e7:01:fc:f2:87:00:44:5c:40:4f:4c:
         62:49:cf:55:d1:3e:c2:a6:b0:b4:44:a7:e3:17:49:07:34:6e:
         ad:be:bf:dd:e0:bd:95:0d:57:c0:65:3a:74:68:a5:61:97:b8:
         a7:7f:f3:9a:b8:df:68:41:1e:e9:a4:aa:9f:0b:8b:05:8e:30:
         9f:fe:bf:72:ef:1c:47:fd:08:ed:ef:3c:6a:00:68:e2:09:07:
         27:14:36:68:05:3c:85:98:07:a0:2e:bd:14:55:be:90:98:0b:
         3f:dd:70:29:c0:5a:44:fd:41:3f:b1:46:0f:05:fc:39:48:28:
         f9:0c:61:ce:32:9a:7f:30:5d:37:b8:98:c4:0f:d6:2c:36:35:
         e2:aa:bd:8f:a1:86:c9:4a:e3:82:47:ed:f4:9b:d6:4a:c9:45:
         be:dd:53:8c:69:95:16:3b:ee:bf:a9:ce:00:9c:ad:69:a2:f4:
         d8:3b:ad:b5:d4:a2:70:de:4b:c9:51:c2:1e:a6:4e:42:1d:77:
         cc:90:ff:88:95:bb:9e:77:fb:4d:bc:2a:bf:8c:eb:a6:7c:0f:
         8b:d5:85:45:c3:67:bf:04:7a:d9:d2:87:7f:00:ec:58:63:20:
         5c:25:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 01:38:05 2025 by rpki-client