Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3AB8AB4E81811EEACBDBB30C4F9AE02.roa
File:                     D3AB8AB4E81811EEACBDBB30C4F9AE02.roa (raw, json)
Hash identifier:          6cH6JUZwKDjFna43btwW7zg+tvsoMDauJbKGeqVHmgQ=
Subject key identifier:   F2:8B:14:D9:DD:CF:F9:90:CC:24:C1:F0:3F:DE:22:84:D0:EA:EF:55
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DB5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3AB8AB4E81811EEACBDBB30C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:55:53 +0000
ROA not before:           Thu 28 Aug 2025 14:55:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151911
IP address blocks:        2401:8920::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19893 (0x4db5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06df9-0532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:f4:90:df:9e:6a:88:e2:a1:40:06:7e:d0:
                    8d:05:89:e8:07:fd:59:b2:f8:f4:fb:49:a5:37:33:
                    26:95:69:f6:ca:a0:d1:16:3d:63:fc:ec:8e:bf:ce:
                    56:b5:dd:4b:be:a6:67:fc:78:a8:83:69:27:7e:c6:
                    ff:88:fc:76:e9:ce:a8:26:ef:c3:67:d7:1f:9e:b2:
                    a1:79:13:a5:05:a8:60:ed:aa:46:67:22:f4:85:95:
                    f5:98:5f:fa:51:b3:6d:0c:fc:53:db:4a:88:a7:e8:
                    8c:c9:4e:3b:8d:35:5a:45:66:c8:bd:d1:cd:f9:35:
                    46:80:67:46:1a:9a:1b:a1:ce:b1:4a:49:98:bb:b9:
                    b2:07:5f:4a:6c:50:84:1d:df:b7:43:68:4c:6e:7c:
                    ea:49:63:e3:83:f6:03:8a:ff:83:7c:1b:5b:83:fd:
                    8d:59:d1:d2:88:c3:86:b8:74:c1:80:97:25:14:6d:
                    c3:7c:8c:6c:f3:c4:ad:b2:7c:1b:f2:b9:b1:7d:30:
                    54:4b:9a:fb:11:8b:19:be:1f:5b:af:88:18:85:43:
                    98:9f:9e:43:dc:29:c4:f9:11:a2:c6:e7:f7:b7:08:
                    15:e4:30:2d:89:36:83:41:4a:93:9a:0f:41:07:6b:
                    f7:32:9a:ad:a6:45:dc:a6:3c:2b:09:55:28:d7:7f:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8B:14:D9:DD:CF:F9:90:CC:24:C1:F0:3F:DE:22:84:D0:EA:EF:55
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D3AB8AB4E81811EEACBDBB30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8920::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:de:56:b8:6c:3f:4c:c5:a4:5c:b0:6f:18:f2:54:b0:97:a1:
         f4:8e:8b:74:ef:0d:16:7b:24:8c:87:a9:d8:7f:79:44:84:46:
         64:e7:66:b4:f0:1d:2d:1b:24:a0:e6:25:66:33:22:2f:23:1b:
         c2:86:7d:db:f5:44:3b:40:2a:d6:32:f3:44:85:0c:8c:ff:2a:
         9a:ab:ac:92:39:42:dd:15:e5:2c:c9:be:20:7e:05:91:b3:b6:
         73:11:56:67:14:21:2d:45:87:7a:90:d9:72:f9:8a:21:42:a9:
         a3:d2:26:99:95:3d:06:d4:2b:ba:1d:40:0b:2c:2e:9b:b6:38:
         49:03:85:34:e9:76:7b:4a:72:1a:16:22:f5:86:da:9b:83:ed:
         81:7b:bf:af:ab:2c:78:d1:da:0b:b8:30:48:e1:dd:6f:c3:db:
         1d:b3:79:70:33:2b:9d:13:39:71:d0:35:23:1a:2d:61:7e:6b:
         38:cd:28:50:36:4e:f4:93:41:c9:3b:5e:2d:3e:9b:51:de:3c:
         ea:70:53:38:27:cb:85:83:bc:71:b1:db:43:f1:dd:eb:28:d1:
         8a:96:bb:14:59:4f:9b:ad:60:92:28:24:81:e9:97:86:49:e9:
         a1:f3:5e:7a:48:49:11:a7:f5:2e:69:ba:0f:9c:f8:c1:5f:13:
         bc:5d:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:38:33 2025 by rpki-client