Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73D66EB2E76111EFA6202269C4F9AE02.roa
File:                     73D66EB2E76111EFA6202269C4F9AE02.roa (raw, json)
Hash identifier:          DI2N7pw7FOKaNCaT/VzQP4f9vtrfE26Q0prZdp+3SfM=
Subject key identifier:   E9:50:B1:74:41:81:97:35:34:15:D8:24:6C:3A:C4:9F:52:FD:5E:45
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DDF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73D66EB2E76111EFA6202269C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:56:29 +0000
ROA not before:           Thu 28 Aug 2025 14:56:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153535
IP address blocks:        2001:df4:eb40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19935 (0x4ddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e1d-8b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:93:7f:12:dc:84:66:be:1c:b5:ee:e6:7c:
                    75:5b:38:ea:41:e3:cb:ad:c8:5e:e6:71:ab:6c:31:
                    21:23:32:b4:24:6f:14:b9:80:df:a5:6a:9a:c5:12:
                    17:c1:d8:0f:3d:c5:8a:a2:f4:93:2e:07:74:0f:ef:
                    f8:1f:73:5b:4c:5f:47:2c:05:8f:2d:10:79:e7:83:
                    20:8d:04:3d:17:4c:82:03:5d:ef:48:ee:41:e9:79:
                    d7:d2:a6:1e:b9:23:6b:e7:4d:f8:37:1a:97:ee:fd:
                    57:6f:81:a9:d1:eb:d8:cc:a0:b2:29:b9:93:72:00:
                    f6:eb:a3:89:04:fb:b5:c0:56:69:45:7c:17:a6:d6:
                    10:34:94:74:24:a0:4a:ab:32:d9:f7:52:a3:9a:ca:
                    56:14:03:a2:66:ae:4c:ae:5d:83:35:a6:cb:53:e2:
                    fa:98:b7:0c:77:9e:13:56:3a:b0:dc:94:b7:d1:ca:
                    93:7c:92:99:a3:96:b7:5d:a7:af:f9:c4:63:7d:5e:
                    e0:d6:11:0e:d3:7d:be:c0:45:04:9f:19:84:c2:95:
                    bd:b4:06:07:e2:29:7e:b2:d4:83:8b:31:03:45:23:
                    f9:68:12:4f:6b:77:18:3a:e6:c5:ec:49:e5:85:97:
                    b4:fe:0b:b2:3a:e6:de:0e:3c:12:0c:98:13:5c:e5:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:50:B1:74:41:81:97:35:34:15:D8:24:6C:3A:C4:9F:52:FD:5E:45
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73D66EB2E76111EFA6202269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:eb40::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:65:21:e3:f6:84:e0:27:e3:ea:0d:ee:6b:de:a0:7b:fc:43:
         b6:cb:8d:a2:64:b6:28:74:9d:a2:8d:e6:41:74:4a:0e:eb:a7:
         71:a4:3a:94:7b:d7:09:7f:c9:ac:73:3f:03:1a:47:39:20:b5:
         1e:32:26:9e:b6:40:e7:2a:27:89:78:82:02:7e:f9:ed:0b:63:
         ef:14:22:c8:38:65:33:09:f0:c5:f0:2d:6e:83:b3:0d:9b:56:
         d0:11:5b:19:46:5a:fc:c9:aa:37:20:8d:7f:a9:61:9d:a6:37:
         1c:b8:5d:98:f5:c1:9c:98:77:3e:40:65:2e:31:f1:c6:44:7d:
         d0:77:9d:7f:66:ee:f4:da:7d:bc:01:56:0c:76:b5:28:19:24:
         05:7a:4a:b6:3b:41:80:55:03:df:c9:01:fb:6a:d4:7d:07:7f:
         c1:75:d6:ea:ba:a1:fb:51:e0:95:53:9a:f3:75:e3:b9:e0:e8:
         c3:db:41:56:35:27:f8:d9:2d:a0:74:f9:63:3f:61:38:5d:d4:
         53:44:67:57:dc:53:dd:9e:55:27:e6:88:17:28:79:b6:05:66:
         0b:bb:31:86:66:69:4e:02:62:5f:c2:ad:64:d8:83:8a:e9:97:
         69:18:a3:f7:1b:d1:12:bd:aa:26:15:e8:f6:12:24:d1:1f:69:
         58:8c:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:43:28 2025 by rpki-client