Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
File:                     5674F86CC2BC11EF9A776235C4F9AE02.roa (raw, json)
Hash identifier:          2krRDtscC87A2h2ZZGgk7uZNRm/C59d9e/xiT6vtEgc=
Subject key identifier:   3B:51:C1:78:C7:E9:5A:8C:8C:95:0E:72:74:92:C2:E4:EC:AA:4D:CC
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DD7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:56:23 +0000
ROA not before:           Thu 28 Aug 2025 14:56:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153428
IP address blocks:        2001:df4:a8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19927 (0x4dd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e17-409f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:da:27:e7:96:89:b4:a0:6a:3c:6c:f5:7b:
                    2d:45:84:af:c2:70:88:8d:53:3c:c9:da:b1:f1:b1:
                    0a:57:ef:30:b4:8d:4f:98:9b:1f:12:48:ec:b6:57:
                    45:7c:ba:0f:0d:31:e0:86:89:f7:82:1a:a5:35:81:
                    25:bc:4d:4e:a2:8f:e8:f1:fe:d7:5a:9b:d9:93:c5:
                    68:1c:b2:69:09:94:53:15:3e:f5:2a:a2:4a:f0:35:
                    d8:06:1f:aa:35:d7:03:bd:dd:81:f8:f5:fa:89:e5:
                    50:40:8e:06:16:c9:31:5a:cd:14:b4:56:75:e1:08:
                    9b:e6:90:6c:27:b0:b5:8a:9a:b4:7c:25:6b:21:96:
                    41:8c:6d:56:bc:f7:8e:92:8d:e5:74:b4:9d:ca:e1:
                    52:b7:18:62:61:d9:50:7e:9d:a7:94:8b:48:06:48:
                    8c:65:8b:e2:d8:2f:83:94:6f:7b:d9:1a:c1:35:56:
                    eb:6c:16:66:95:59:c1:4c:44:b6:00:71:da:bf:db:
                    7c:91:87:d6:97:66:8f:66:d7:80:28:f8:fa:9f:3f:
                    42:c9:66:6b:ff:2f:c1:2f:5a:ee:39:4e:67:34:d6:
                    0f:f7:c8:6c:14:78:42:3a:8c:4f:a3:fc:b6:48:5d:
                    9b:f7:c3:b5:46:79:ea:97:ff:04:a9:de:9a:98:ef:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:51:C1:78:C7:E9:5A:8C:8C:95:0E:72:74:92:C2:E4:EC:AA:4D:CC
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:35:c9:2e:d6:ec:0a:9b:c9:5b:ac:bf:c6:cf:0f:af:22:
         00:61:c9:c9:b1:35:51:fc:14:f3:aa:f7:89:3a:03:97:4a:7a:
         d8:cf:07:48:2e:dd:08:81:70:e0:de:79:29:8d:30:46:f6:55:
         09:f6:27:05:24:0c:e7:5c:f4:35:07:3b:13:9e:a3:f2:71:79:
         12:ba:3a:1b:29:cd:b2:bf:23:4b:df:cc:47:08:ae:e7:4b:7b:
         af:3e:10:1e:5a:c3:e4:c0:db:ad:2e:ec:2c:e2:41:38:6f:e7:
         21:12:71:dd:ab:ec:1b:7e:3d:0d:d2:18:e8:25:f7:d8:02:ce:
         de:20:b8:d7:32:1b:32:31:16:ca:82:13:c0:01:42:98:44:49:
         74:16:95:b4:5e:75:35:ad:95:82:ed:f6:14:f6:d9:92:04:8c:
         11:7d:15:f5:51:47:bc:65:22:a0:68:10:19:70:70:7e:40:1d:
         15:71:54:8c:1a:dd:0e:3e:23:40:98:d0:a4:ad:9e:5b:2f:a4:
         79:a7:fa:07:6b:c1:c4:6f:af:84:27:4b:bb:36:82:8d:4f:be:
         94:87:75:2e:5b:9c:7d:eb:f8:7c:db:ab:9a:16:6b:19:b0:18:
         06:9a:93:e4:24:d2:36:b8:e5:c6:b8:df:46:75:87:65:bb:13:
         4a:7a:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:43:27 2025 by rpki-client