Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
File:                     04EB22A890CF11EDA79E3741C4F9AE02.roa (raw, json)
Hash identifier:          RahmBGJB4y7C6A/mYLOsrrDyF3aZw2gC8S+ZiRLra3M=
Subject key identifier:   5B:D1:FB:3D:CA:82:4E:0C:B8:7F:AB:14:AE:1E:03:23:2C:3C:76:14
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D47
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:54:24 +0000
ROA not before:           Thu 28 Aug 2025 14:54:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149064
IP address blocks:        2001:df0:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19783 (0x4d47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:54:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06da0-b597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:bb:84:6e:ca:5f:da:76:df:37:cc:85:94:
                    3c:03:3f:2e:0b:92:bf:1b:06:55:98:3e:4d:5b:6a:
                    84:30:af:9b:0f:01:62:8b:70:21:b6:e2:2e:d6:0d:
                    68:06:28:ba:b8:1e:f7:bc:c2:8a:ae:b5:0a:78:12:
                    d1:41:a7:97:03:79:83:07:3e:c8:59:2e:4f:4e:d3:
                    10:b7:8e:15:29:8b:3f:7d:39:d5:e4:07:96:32:9d:
                    a9:32:c5:72:34:c3:57:df:69:cc:3a:d1:96:21:9c:
                    90:45:41:f0:d0:6e:f0:3b:c8:c5:c4:9b:94:91:c9:
                    83:33:7b:3b:4f:f2:d6:53:0d:c4:c8:84:01:de:0b:
                    cd:23:f0:d3:c9:84:11:80:5b:b2:9c:7b:90:9f:f7:
                    96:63:d3:a2:6d:ea:0b:0c:ec:b4:6f:de:65:a1:d0:
                    25:1a:0e:8b:89:dc:67:6d:44:6f:fa:98:15:a3:95:
                    d6:25:fa:fe:03:24:3e:fb:39:fb:bb:dc:10:57:f1:
                    8a:6e:92:3d:27:4c:e7:b3:82:6b:18:33:ff:2a:dd:
                    26:0e:fe:c1:db:d6:63:bf:bf:a1:53:97:37:21:f7:
                    bc:4f:fc:2e:24:97:d7:c7:8a:2b:36:7c:cc:5a:3c:
                    f7:cf:d0:a5:73:71:87:1c:57:bc:40:84:c2:d4:ff:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D1:FB:3D:CA:82:4E:0C:B8:7F:AB:14:AE:1E:03:23:2C:3C:76:14
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:89:35:04:eb:f6:89:21:e6:12:52:c7:42:61:f9:37:de:f0:
         24:68:a7:1b:96:00:78:4d:dd:52:de:ab:f5:ca:84:f2:6d:a2:
         6a:a4:d0:b0:d1:ac:d2:2c:3a:a4:b8:18:5b:01:3f:68:72:31:
         c3:8a:f1:00:f5:27:c7:f2:3f:c9:1a:f8:89:6e:dd:b7:d8:bc:
         c5:00:e3:27:8c:48:31:a2:44:54:b6:3f:3c:ac:7e:42:9b:4b:
         db:a1:84:0f:8f:2c:d8:92:6e:6d:8b:d3:70:61:0d:73:40:60:
         fb:a2:67:ad:32:2c:00:0e:4d:fa:49:fe:a8:c0:18:be:61:be:
         79:da:0b:ce:90:4e:80:1a:3a:2f:42:c0:22:2d:d3:9c:9d:47:
         7c:6c:24:c9:7c:8c:38:88:f5:37:01:9f:77:fe:e6:64:ee:3f:
         aa:83:20:18:b7:8f:33:80:3b:b9:e1:5d:ba:2d:ec:00:b0:68:
         ae:80:a1:33:1f:e9:9a:7b:83:e5:f5:cc:58:38:6d:4f:78:af:
         db:b7:da:7f:29:eb:a8:d2:f9:3a:0a:dc:eb:26:0d:1a:c0:d3:
         f1:07:c5:d1:12:6a:e6:5c:3b:81:f8:41:a6:dd:aa:68:a9:12:
         c2:3b:66:3a:dc:a8:52:89:85:69:8a:7e:94:dd:83:a8:87:0b:
         f9:65:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:35:25 2025 by rpki-client