Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
File:                     D0680FF86AB211F0976F001AC4F9AE02.roa (raw, json)
Hash identifier:          u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=
Subject key identifier:   AD:8C:D4:6C:E0:73:B1:3D:0D:BE:75:81:34:7C:37:57:05:9E:69:D9
Certificate issuer:       /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial:       85
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
Signing time:             Sun 27 Jul 2025 06:27:48 +0000
ROA not before:           Sun 27 Jul 2025 06:27:48 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     140119
IP address blocks:        2401:e920:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
        Validity
            Not Before: Jul 27 06:27:48 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6885c6e4-ef2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:f8:ea:b4:ae:1d:93:9b:ed:29:50:ac:9c:
                    c4:0d:88:bb:d4:25:0c:c7:39:2f:8d:b5:79:7d:00:
                    3d:4e:ba:7c:bb:c6:e0:78:00:8d:f5:38:34:ee:d2:
                    5a:28:d9:75:af:13:2f:0d:8e:38:fe:93:1f:2e:ce:
                    4b:a7:1e:2c:53:cd:73:b4:94:9d:e7:b0:af:09:9f:
                    61:b0:bf:9d:50:22:29:35:dc:f3:0b:fd:47:08:6c:
                    cb:b3:a2:17:2a:f6:08:71:8b:c3:b4:c6:62:88:89:
                    67:9f:0a:ca:c3:d1:d2:1b:72:dc:5d:dd:8f:87:2e:
                    e3:7d:df:06:a2:79:f8:50:03:cf:16:ab:07:7a:18:
                    df:d3:32:7f:95:0d:3f:fd:e1:07:3f:db:8a:61:15:
                    0b:8a:bd:31:df:70:a7:c9:8d:3f:30:b0:10:c1:df:
                    30:b5:11:e6:2c:6e:35:8c:7a:f4:38:ac:75:4d:4e:
                    03:7c:c2:78:2a:a6:94:f2:c9:fd:1b:26:10:8b:87:
                    07:39:43:1b:2a:36:0e:d1:b4:92:0c:cd:0c:b5:b5:
                    ff:05:f7:66:02:0a:28:34:c5:eb:b0:5f:4e:59:05:
                    13:94:b0:c1:42:6d:d2:1a:af:b1:00:19:f0:97:ab:
                    d7:d1:61:3a:55:96:53:f5:b8:49:ef:9a:84:c0:be:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:D4:6C:E0:73:B1:3D:0D:BE:75:81:34:7C:37:57:05:9E:69:D9
            X509v3 Authority Key Identifier:
                keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e920:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:81:92:38:88:17:35:26:65:67:ae:63:a2:4a:32:53:55:
         d7:10:35:c6:98:ba:47:34:44:8e:bd:63:bd:99:d8:e8:14:22:
         bb:28:48:df:05:f6:0e:b0:0f:ed:bd:bf:0a:65:3e:8e:be:9a:
         8d:3c:23:00:ec:bc:67:d5:8d:db:4c:f3:73:34:5e:32:a1:14:
         60:7f:76:15:64:4f:ae:05:af:ad:ec:f7:a2:a7:b9:2f:58:3c:
         34:02:30:ac:ab:70:37:8e:a1:4c:f0:89:67:8d:8d:31:b5:04:
         72:64:fb:34:90:22:84:22:5e:54:52:ba:1b:01:82:27:36:e8:
         16:1b:82:1c:b3:d8:7a:4b:6a:78:fc:4a:e3:16:55:82:c5:06:
         a8:f2:43:17:55:39:fc:a4:9d:c9:51:5d:9a:b5:b7:69:04:38:
         e5:c9:ec:92:64:85:e9:a4:64:91:84:4d:cb:c2:be:ff:51:59:
         11:2c:fb:b8:a7:1a:be:40:dd:e6:d4:61:41:92:ac:45:56:fb:
         46:c2:6e:15:02:11:65:b1:08:55:3a:b8:e7:f9:44:6e:8e:2d:
         08:ad:aa:08:73:53:6f:f0:9d:bd:3f:88:80:3f:43:b2:f1:9c:
         89:6b:23:8d:52:7f:c2:91:81:41:4a:5b:4f:8d:f4:a4:2d:30:
         12:79:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:11 2025 by rpki-client