Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53CDEE805D4811F0B045442CC4F9AE02.roa
File:                     53CDEE805D4811F0B045442CC4F9AE02.roa (raw, json)
Hash identifier:          gcYGrgK4bmA0ojAdtleodgYmuCiJywp8MruL7RhFXLQ=
Subject key identifier:   75:DC:C7:8D:6E:F0:2B:04:D5:27:36:DB:78:AC:CB:52:E1:E7:05:91
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DEE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53CDEE805D4811F0B045442CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:56:41 +0000
ROA not before:           Thu 28 Aug 2025 14:56:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154003
IP address blocks:        2001:df5:cbc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 14:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19950 (0x4dee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e29-448b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:c5:3c:12:d6:f2:f9:8d:da:81:18:98:14:
                    7c:38:e9:da:52:76:4e:a5:81:ef:6e:c3:aa:d7:0d:
                    09:6f:57:ad:7e:25:f3:f9:88:f4:37:fc:80:94:c9:
                    19:c5:73:83:9f:3a:43:eb:0d:63:97:ef:9a:d0:61:
                    31:2d:95:b1:a6:8a:69:ed:6e:0c:e9:75:6d:81:af:
                    37:59:e2:c1:24:43:f4:18:f2:8f:ab:fe:52:47:24:
                    fd:a9:ef:30:a0:e6:fb:21:3a:7c:e5:2b:47:2e:c9:
                    8e:91:cb:14:21:e3:5f:88:12:d5:4e:6b:36:a3:e4:
                    40:fd:86:8b:54:37:d9:b0:02:68:ff:d3:a6:3c:6a:
                    90:3d:45:2b:78:af:e1:f6:50:d1:36:73:51:5f:2b:
                    a6:cb:d0:aa:f3:93:8a:b7:5e:1a:1f:f0:bd:80:d8:
                    98:51:3b:7c:6e:95:8b:b8:63:66:d5:60:28:58:53:
                    69:8b:56:8e:e7:c5:88:46:74:ed:17:76:2c:05:71:
                    ad:0c:ff:9d:cd:7e:16:2f:e3:d6:2f:2b:8c:fc:de:
                    ae:1e:16:10:be:b3:bf:0d:02:89:5b:fe:a8:cf:01:
                    29:1f:90:58:31:5e:8c:43:54:8c:67:ab:24:c4:66:
                    0b:03:b0:c4:ae:4d:b4:cb:03:79:77:95:f1:05:cf:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DC:C7:8D:6E:F0:2B:04:D5:27:36:DB:78:AC:CB:52:E1:E7:05:91
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53CDEE805D4811F0B045442CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:cbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:be:e8:28:d2:ad:71:5d:f0:c4:02:78:be:cf:e5:6b:bf:
         22:38:bd:8d:47:69:88:6a:da:2d:1b:f2:e4:3a:e5:ac:43:88:
         28:6f:38:08:4b:93:30:f7:cf:a4:e2:83:4d:30:3a:c7:ce:08:
         0e:33:b3:76:94:59:75:8e:cc:cf:e2:99:bc:de:13:6f:4f:33:
         3a:23:d6:90:6b:da:4f:73:8b:db:b2:65:7c:48:4f:5e:08:8b:
         2e:15:6f:bd:5e:9a:24:f3:9c:d0:2b:d9:ba:e2:4c:d5:dd:4d:
         dd:12:52:0d:b7:81:74:4a:c6:09:ed:e6:64:18:da:fa:4d:39:
         4b:4d:48:23:cb:2c:ad:26:f2:e7:88:fc:13:b9:9b:ac:e9:74:
         01:ac:0a:f9:29:b4:d3:7b:bb:d3:da:c7:75:b9:e5:c8:8e:a0:
         10:9a:a6:03:90:43:ac:c6:62:9f:91:95:39:6e:77:f9:c7:a5:
         b0:2f:0e:4f:83:41:3e:90:f8:ae:0f:f8:4d:db:9b:89:d2:aa:
         5d:99:6a:27:ed:06:e5:28:38:ad:77:f4:fe:e1:f3:65:8d:08:
         69:1f:ad:66:88:1b:99:33:e2:06:14:2b:44:29:f2:b7:a0:31:
         32:b3:c9:77:25:04:9b:26:f4:ab:30:97:e4:da:28:a9:82:24:
         f1:3b:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:28:16 2025 by rpki-client