Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E8FBE58C6E4D11F09E60AF15C4F9AE02.roa
File:                     E8FBE58C6E4D11F09E60AF15C4F9AE02.roa (raw, json)
Hash identifier:          F3Nkvr8Ot+/Vj1pN7iXz4hhR7XsF6oalV5YpZrBcH1c=
Subject key identifier:   CC:70:C6:FB:51:D5:CB:0C:65:8B:50:A6:4A:16:A8:ED:6F:DA:EF:7D
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3673
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E8FBE58C6E4D11F09E60AF15C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 20:35:35 +0000
ROA not before:           Thu 31 Jul 2025 20:35:35 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        175.29.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13939 (0x3673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Jul 31 20:35:35 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=688bd397-dfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:3b:e8:2c:e1:69:80:6b:7a:23:96:01:82:
                    6b:cf:b3:21:7f:24:ad:97:fb:cc:bb:d0:5a:d6:a8:
                    85:11:64:6f:c7:ce:12:23:b4:27:e9:e5:33:e6:a5:
                    93:73:6e:da:b8:d6:ea:54:9e:a4:0d:16:96:f3:3b:
                    48:b4:e6:8a:24:4a:11:e9:b4:9e:df:21:8f:52:08:
                    79:f5:a8:3d:be:86:d1:0c:8f:2a:92:c9:b9:c0:55:
                    f3:9c:01:55:25:56:e5:54:4c:0f:db:ec:c0:5f:32:
                    76:f9:5a:ad:f0:e9:b4:2c:70:ca:38:b8:99:97:58:
                    d0:85:64:9c:47:3f:b2:9a:d6:a8:39:90:7e:29:b1:
                    2c:6a:c5:65:cf:8d:1b:f9:0b:7f:48:dd:56:0c:51:
                    76:f1:27:19:42:3e:dc:49:29:ea:5b:af:f0:a4:05:
                    0c:c9:55:a9:4b:ef:10:90:07:5b:6d:77:04:f5:8f:
                    4b:a9:ba:45:e8:89:2e:cd:36:71:59:41:c6:38:62:
                    92:7f:d4:27:80:5f:40:a5:ea:d8:7c:26:e8:54:df:
                    98:83:7a:70:65:1c:48:c0:8b:78:76:a0:4e:d5:dc:
                    2c:0d:9d:08:20:a5:ba:f6:96:b1:d9:61:0a:1f:ee:
                    24:c6:8c:9c:53:6f:75:56:4c:85:af:29:98:6c:72:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:C6:FB:51:D5:CB:0C:65:8B:50:A6:4A:16:A8:ED:6F:DA:EF:7D
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E8FBE58C6E4D11F09E60AF15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:da:11:0f:ae:2f:34:34:10:57:57:dc:30:0d:b3:7f:96:c3:
         ad:bc:72:8d:ba:1a:67:4c:0c:a8:8c:be:5f:58:66:3a:5a:2a:
         84:93:40:46:ae:e8:34:8b:64:0e:69:f9:88:f1:8e:03:f9:63:
         97:5a:71:92:21:a8:fe:b8:c4:96:0f:42:f5:e1:08:85:83:19:
         93:22:6f:5b:d8:2c:69:6c:46:47:ad:66:54:62:7a:6f:61:80:
         db:79:fe:81:b2:0d:64:52:d0:a3:c2:51:72:03:2a:df:c0:87:
         ef:7e:ad:d5:81:90:de:7f:89:1a:ff:77:77:f5:2c:a5:e6:65:
         ab:52:e6:3a:4c:ab:0f:ad:5b:cb:89:af:cd:3e:29:76:b5:ac:
         a0:1e:94:30:9c:d2:76:b2:7e:4c:4f:ea:55:de:55:17:35:21:
         74:ba:95:ad:93:ad:71:de:11:f4:e4:16:fe:51:63:37:b0:2c:
         75:f9:63:4c:8a:b1:b8:51:47:2b:19:f9:26:be:4b:62:89:4b:
         48:de:03:44:bc:c2:f3:91:71:27:3b:0f:b6:24:0b:f8:f8:0a:
         de:8c:2e:f5:2b:a1:d8:2e:63:3d:43:4b:de:4f:11:78:2c:cb:
         49:47:01:81:93:20:f0:a1:9a:03:bd:fd:24:35:bd:7b:33:d9:
         d5:e1:b0:46
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUwNzMxMjAzNTM1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhiZDM5Ny1kZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzg76CzhaYBreiOWAYJrz7MhfyStl/vMu9Ba1qiFEWRvx84SI7Qn6eUz5qWT
c27auNbqVJ6kDRaW8ztItOaKJEoR6bSe3yGPUgh59ag9vobRDI8qksm5wFXznAFV
JVblVEwP2+zAXzJ2+Vqt8Om0LHDKOLiZl1jQhWScRz+ymtaoOZB+KbEsasVlz40b
+Qt/SN1WDFF28ScZQj7cSSnqW6/wpAUMyVWpS+8QkAdbbXcE9Y9LqbpF6IkuzTZx
WUHGOGKSf9QngF9AperYfCboVN+Yg3pwZRxIwIt4dqBO1dwsDZ0IIKW69pax2WEK
H+4kxoycU291VkyFrymYbHLRKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMxwxvtR
1csMZYtQpkoWqO1v2u99MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvRThGQkU1OEM2
RTREMTFGMDlFNjBBRjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGvHRYwDQYJKoZIhvcNAQELBQADggEBACbaEQ+uLzQ0EFdX
3DANs3+Ww628co26GmdMDKiMvl9YZjpaKoSTQEau6DSLZA5p+YjxjgP5Y5dacZIh
qP64xJYPQvXhCIWDGZMib1vYLGlsRketZlRiem9hgNt5/oGyDWRS0KPCUXIDKt/A
h+9+rdWBkN5/iRr/d3f1LKXmZatS5jpMqw+tW8uJr80+KXa1rKAelDCc0nayfkxP
6lXeVRc1IXS6la2TrXHeEfTkFv5RYzewLHX5Y0yKsbhRRysZ+Sa+S2KJS0jeA0S8
wvORcSc7D7YkC/j4Ct6MLvUrodguYz1DS95PEXgsy0lHAYGTIPChmgO9/SQ1vXsz
2dXhsEY=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:29 2025 by rpki-client