Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
File:                     F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (raw, json)
Hash identifier:          9Ico4h3XlCaLtqQIGUKMAvjEzVqPREECMseESR6/+Rs=
Subject key identifier:   22:5C:52:0A:AC:AF:6B:E5:47:06:0C:96:22:6D:1E:49:A8:15:95:B5
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       35C9
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 14:50:22 +0000
ROA not before:           Thu 24 Jul 2025 14:50:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138003
IP address blocks:        203.209.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13769 (0x35c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6882482e-955a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:f3:90:a9:aa:27:34:e6:24:71:cf:01:86:
                    f2:40:83:02:38:7e:58:39:ae:a1:20:36:ed:2c:6e:
                    f9:63:de:95:00:7b:06:ae:d9:9e:3a:d5:6f:02:72:
                    39:94:8f:ca:17:e1:bd:f4:55:19:f0:02:71:69:ef:
                    77:33:5c:d4:1f:78:9a:0b:65:4c:86:15:f3:8f:7e:
                    2b:99:a9:73:b6:81:ca:14:e5:ff:5f:66:02:1e:f2:
                    0d:1d:2e:21:08:aa:6f:b6:fa:5a:08:15:69:0d:ee:
                    f3:c0:d4:ac:a0:34:f4:46:78:23:cf:a5:9d:a2:56:
                    4c:89:2e:2f:bd:65:d4:4f:56:35:94:28:c6:5a:87:
                    58:6e:28:6b:77:af:b5:5c:eb:75:79:f4:a8:8b:16:
                    73:69:59:49:1f:a6:2c:fc:39:31:fe:6a:11:c7:82:
                    6a:33:95:e4:c9:8b:13:b2:22:d7:e0:c4:88:ee:23:
                    d8:3a:64:9d:bf:08:cc:99:39:13:06:6f:4d:3b:7d:
                    ba:8e:ac:73:14:d4:c3:1a:f9:5b:1a:9e:44:6c:fb:
                    f4:ab:8d:92:c9:1a:57:e9:b9:02:0e:ea:41:d3:a9:
                    d5:af:18:44:d2:40:81:e5:4d:e6:8a:57:e4:38:4e:
                    8b:a4:d9:d2:9a:31:12:d2:52:a3:87:25:f5:0e:c6:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:52:0A:AC:AF:6B:E5:47:06:0C:96:22:6D:1E:49:A8:15:95:B5
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:e1:89:18:d1:e3:99:fe:84:56:a3:7b:5f:53:2b:eb:ed:
         f6:83:14:4f:1b:94:fb:80:35:11:ad:7c:f0:9c:30:d5:46:b7:
         d1:eb:32:64:86:3c:a5:84:2b:7c:3f:14:fe:a0:28:33:19:52:
         a1:b6:2c:87:42:2e:02:d3:e8:fe:91:94:8d:92:23:c2:f4:0b:
         60:df:c3:ee:7a:0f:08:d9:01:25:83:13:27:09:0a:31:70:19:
         7a:b1:9a:24:56:2a:e1:83:6c:b6:ba:18:c4:72:b9:46:fb:e0:
         05:e2:6e:c8:ba:8a:a2:20:0f:34:27:42:12:42:8f:72:ca:35:
         82:3b:57:83:10:a3:d6:23:a6:f2:6f:18:60:c3:04:08:e6:60:
         32:c9:b6:16:59:e5:09:40:d6:3d:3f:9e:0c:23:60:cb:69:c2:
         2a:35:15:5f:8c:02:9e:e6:aa:8e:6d:00:0d:84:b0:5a:ef:4f:
         24:ab:a6:95:8e:36:f0:12:2a:49:f6:60:78:d6:cd:c5:b5:26:
         ae:0d:9d:15:70:2f:ee:a3:90:fa:34:f3:05:07:7e:f6:eb:bc:
         9f:da:65:48:36:f6:74:bf:21:40:24:b2:a6:63:bd:f8:cc:bf:
         20:71:90:a4:c2:a6:53:a4:f6:dd:70:7d:39:10:71:68:8e:1b:
         89:e4:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:38 2025 by rpki-client