Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/F8160AD86E1C11F0A9381E85C4F9AE02.roa
File:                     F8160AD86E1C11F0A9381E85C4F9AE02.roa (raw, json)
Hash identifier:          C6WLz8pg0rqM3qeZ+YC0BJ8jpvArrDDfO+jGLc5bHSQ=
Subject key identifier:   C8:D1:9D:01:7C:E1:A4:61:3E:EB:C5:E0:FD:2A:A6:E2:3C:9B:FD:09
Certificate issuer:       /CN=A91758EC/serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68
Certificate serial:       08
Authority key identifier: B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/F8160AD86E1C11F0A9381E85C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 14:45:15 +0000
ROA not before:           Thu 31 Jul 2025 14:45:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134231
IP address blocks:        2001:df5:e540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl
                          rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758EC, serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68
        Validity
            Not Before: Jul 31 14:45:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688b817b-db5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:9c:3d:09:26:b4:a0:4c:e5:c6:c3:a6:1f:
                    11:bd:c0:bb:74:0b:03:9f:49:84:5c:77:4a:cc:be:
                    c8:e5:ad:68:8d:ba:ed:6c:75:0a:73:18:eb:c0:5d:
                    d8:5c:62:b5:aa:e0:b8:9a:47:63:66:f4:0a:4f:5f:
                    e5:e9:51:dc:40:2c:eb:de:f6:a4:ef:37:99:1b:a0:
                    73:e6:e2:82:d4:cc:a7:4c:f0:0c:d8:1c:7c:3b:38:
                    ff:36:86:db:8a:f9:5f:d6:0f:62:b7:24:ea:53:ba:
                    3f:bf:93:24:66:19:55:30:94:58:8c:f1:b5:ee:08:
                    40:63:d1:a7:31:9c:08:ab:31:ba:a3:3b:4b:45:05:
                    3b:93:46:82:78:e0:1d:06:15:a1:ef:92:6d:0c:f2:
                    90:07:7e:ca:58:92:e1:5c:f0:43:74:53:6b:c3:53:
                    0c:48:e2:f3:a7:3c:9c:f1:e2:1f:c9:0a:f2:87:eb:
                    bd:17:a0:d3:35:e5:3e:33:83:ce:3b:37:ca:0a:f3:
                    62:d9:52:25:12:8f:e5:62:2d:f1:c5:18:37:af:a1:
                    a1:74:8f:cb:3d:51:a6:02:c3:24:ed:dc:73:69:62:
                    cc:61:5c:aa:6c:6a:7c:38:c6:3d:6f:c8:78:65:2e:
                    83:c6:82:43:53:00:f6:b7:d1:b6:9d:01:ca:e8:6c:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D1:9D:01:7C:E1:A4:61:3E:EB:C5:E0:FD:2A:A6:E2:3C:9B:FD:09
            X509v3 Authority Key Identifier:
                keyid:B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/F8160AD86E1C11F0A9381E85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:e540::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:09:bd:18:58:f6:0b:3b:b9:df:a4:8f:7b:b2:47:0f:a4:09:
         c0:00:3c:db:2c:ed:eb:81:af:c3:b3:3c:42:e1:f4:fd:8c:86:
         b4:ed:0d:31:82:b7:f9:15:3a:c1:4d:98:b2:72:5a:15:7e:77:
         fb:b9:bf:18:00:be:f9:b2:1f:87:68:90:3f:f4:92:18:3f:4a:
         21:d7:99:2d:81:0c:88:33:3a:37:3a:66:33:0f:8f:e8:fc:a1:
         50:95:64:bc:45:ad:ac:16:96:98:c5:df:6d:6b:96:c1:2c:5b:
         f0:af:bd:20:eb:1f:95:1f:ee:aa:36:12:20:cc:36:cc:b2:dc:
         55:5b:f2:96:e6:84:6e:01:46:56:66:56:c5:b7:3b:6d:a2:65:
         4c:e1:b0:fe:72:eb:f5:f3:01:ca:19:36:b7:2a:f1:4d:a0:f5:
         a5:a2:86:9d:38:0b:fa:9d:80:74:bc:4a:70:8e:a7:75:60:9c:
         d7:4e:79:39:19:be:24:d5:3f:68:50:db:fc:6b:5d:41:3f:48:
         74:ae:63:b5:5b:d9:4e:37:87:24:14:fd:d7:72:09:5d:aa:02:
         89:38:b1:9c:8e:cb:b0:85:17:62:76:11:f1:cf:66:17:5b:81:
         81:6c:d1:66:4b:0b:98:34:93:cd:93:bb:da:ff:5e:3e:aa:1e:
         b7:d6:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:33:58 2025 by rpki-client