Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ADF40E7C608F11F0856BA159C4F9AE02.roa
File:                     ADF40E7C608F11F0856BA159C4F9AE02.roa (raw, json)
Hash identifier:          E6dvzdr+G1snuQNrwBeDzN3TjhA0qiqYNtKvgHgcZm8=
Subject key identifier:   5D:BC:1A:03:C7:54:4B:FD:ED:7F:56:4E:74:0F:3E:1A:A7:C7:45:78
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4BBE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ADF40E7C608F11F0856BA159C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 08:51:06 +0000
ROA not before:           Mon 14 Jul 2025 08:51:06 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     154042
IP address blocks:        2001:df5:d740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 14:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19390 (0x4bbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jul 14 08:51:06 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6874c4fa-ed27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:06:40:42:e4:c5:f6:82:93:be:fa:67:d7:ce:
                    10:10:06:53:43:99:98:bd:a2:58:53:04:a3:fe:eb:
                    d2:87:d0:f0:f8:74:fb:17:f3:74:d9:a0:1b:c1:7a:
                    59:e4:e3:92:28:97:6b:ce:de:71:79:7f:85:fc:61:
                    e3:96:b2:9e:2a:a4:88:2e:65:4d:8b:b6:ba:04:5d:
                    cf:59:ab:e3:8e:92:a4:3e:ad:5c:aa:d5:b9:d1:5c:
                    4b:cb:03:52:d4:25:78:f7:7e:06:ec:26:ac:65:68:
                    f2:c2:c5:7a:55:07:33:4a:ed:bb:ca:d3:58:2c:af:
                    6e:84:e3:00:78:e5:77:78:ee:22:7b:c3:2e:35:19:
                    f7:22:0a:cc:c3:f9:09:69:a9:eb:64:c5:aa:66:32:
                    51:c2:97:42:89:54:7f:03:16:4e:57:1d:44:bc:8b:
                    9e:08:f1:91:9c:45:56:31:cc:8b:b7:13:a5:15:41:
                    29:32:86:86:8c:34:84:c4:f2:4f:e6:40:57:57:d6:
                    57:97:9d:fe:55:a6:85:13:d6:c4:f4:49:63:fa:04:
                    69:40:8e:14:4f:ed:27:b7:0a:dc:8c:06:f5:7d:f9:
                    95:2c:72:e4:ae:e6:d8:77:90:56:5d:51:03:5d:b6:
                    d8:98:c6:13:e4:95:39:36:6e:1b:3a:c4:aa:21:66:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:1A:03:C7:54:4B:FD:ED:7F:56:4E:74:0F:3E:1A:A7:C7:45:78
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ADF40E7C608F11F0856BA159C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d740::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:f1:17:32:35:a7:bc:a1:aa:35:0b:79:53:c0:07:0d:71:
         73:cc:b7:e8:1a:2c:e8:29:b9:03:78:e0:3d:cf:12:52:c4:61:
         51:30:c9:02:f5:59:38:80:3c:f8:47:0d:dc:c4:f3:f9:be:03:
         6c:9d:0e:93:0f:46:2b:b0:17:a0:ae:c9:ef:96:e4:d5:7a:06:
         55:69:cd:3e:50:81:f6:ef:49:92:2c:fa:50:28:e3:07:fa:56:
         aa:01:b1:40:d5:64:10:f5:b9:c0:92:ae:69:1f:bb:bb:da:31:
         9d:14:e8:0e:31:ff:56:73:54:e6:c6:14:ae:42:aa:3f:0e:de:
         04:ec:0c:b1:97:6e:16:c8:f7:dd:16:d6:c3:8f:b9:90:e6:0e:
         84:9f:4e:15:6e:66:3f:fb:32:e0:f8:9e:65:5b:99:43:a1:0a:
         ce:b1:c2:39:9e:82:74:b2:4a:cc:23:13:81:b9:59:88:94:37:
         47:eb:0f:e5:dd:1e:2a:38:c6:93:ff:11:90:b5:7d:02:04:6c:
         17:5a:4d:01:16:72:43:41:35:56:7e:92:16:7f:a0:c2:d6:1d:
         fa:80:39:c7:35:5d:d7:1c:87:ce:81:38:1f:26:a3:b0:d2:0a:
         d0:7f:72:d9:c8:12:40:f7:a0:42:47:a8:41:22:ad:e9:ea:ac:
         0a:9e:e6:ab
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICS74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwNzE0MDg1MTA2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc0YzRmYS1lZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8gZAQuTF9oKTvvpn184QEAZTQ5mYvaJYUwSj/uvSh9Dw+HT7F/N02aAbwXpZ
5OOSKJdrzt5xeX+F/GHjlrKeKqSILmVNi7a6BF3PWavjjpKkPq1cqtW50VxLywNS
1CV4934G7CasZWjywsV6VQczSu27ytNYLK9uhOMAeOV3eO4ie8MuNRn3IgrMw/kJ
aanrZMWqZjJRwpdCiVR/AxZOVx1EvIueCPGRnEVWMcyLtxOlFUEpMoaGjDSExPJP
5kBXV9ZXl53+VaaFE9bE9Elj+gRpQI4UT+0ntwrcjAb1ffmVLHLkrubYd5BWXVED
XbbYmMYT5JU5Nm4bOsSqIWbVbQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFF28GgPH
VEv97X9WTnQPPhqnx0V4MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQURGNDBFN0M2
MDhGMTFGMDg1NkJBMTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3110AwDQYJKoZIhvcNAQELBQADggEBAB+Y8RcyNae8
oao1C3lTwAcNcXPMt+gaLOgpuQN44D3PElLEYVEwyQL1WTiAPPhHDdzE8/m+A2yd
DpMPRiuwF6Cuye+W5NV6BlVpzT5QgfbvSZIs+lAo4wf6VqoBsUDVZBD1ucCSrmkf
u7vaMZ0U6A4x/1ZzVObGFK5Cqj8O3gTsDLGXbhbI990W1sOPuZDmDoSfThVuZj/7
MuD4nmVbmUOhCs6xwjmegnSySswjE4G5WYiUN0frD+XdHio4xpP/EZC1fQIEbBda
TQEWckNBNVZ+khZ/oMLWHfqAOcc1Xdcch86BOB8mo7DSCtB/ctnIEkD3oEJHqEEi
renqrAqe5qs=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:03:55 2025 by rpki-client