Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/F025BAB69D5911EEAA9F0413C4F9AE02.roa
File:                     F025BAB69D5911EEAA9F0413C4F9AE02.roa (raw, json)
Hash identifier:          zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=
Subject key identifier:   91:3D:10:17:BB:46:99:4A:DB:3B:9A:78:3C:D2:60:01:D8:14:CE:7D
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3F86
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/F025BAB69D5911EEAA9F0413C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 14:50:12 +0000
ROA not before:           Sat 02 Aug 2025 14:50:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     3970
IP address blocks:        2001:df7:5380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16262 (0x3f86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Aug  2 14:50:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688e25a4-ebba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:11:d8:97:4e:a5:f3:ab:71:b9:24:d5:0c:
                    00:e0:2f:52:83:31:63:43:6f:ea:b8:94:b5:15:fb:
                    28:4a:49:5e:79:0b:8d:70:ab:bf:1e:d9:f0:b8:28:
                    ea:8e:8c:d0:6f:41:eb:73:0f:29:c8:45:f4:59:33:
                    75:3c:71:68:86:8b:81:8a:81:60:c9:2f:4c:0c:66:
                    02:c7:d3:b1:6a:f0:30:9f:f2:d0:89:1b:4c:67:cd:
                    18:54:3f:61:47:d4:8f:89:fd:e5:44:7b:53:ac:f5:
                    f3:ea:32:46:e0:53:bf:21:af:49:99:bc:18:f4:e7:
                    7e:06:23:4b:29:ad:6a:c1:49:03:40:e1:a1:f8:8e:
                    fb:b1:5a:24:19:81:dc:a2:54:82:08:1d:46:f2:fe:
                    f3:19:54:b8:57:f4:4d:6d:d6:0c:47:44:26:8c:e8:
                    a4:75:38:1c:c2:56:aa:b7:21:5e:e8:42:3a:65:f4:
                    70:e8:22:04:38:96:c1:6b:7e:a3:e5:23:38:d2:ad:
                    40:ae:a5:77:27:46:09:c7:9a:24:54:64:5b:06:62:
                    b5:98:5f:17:2e:98:9b:00:e3:e5:1f:61:8d:a1:03:
                    02:0b:65:0c:e8:a3:b8:99:c6:ab:8b:ac:8f:63:4b:
                    c6:f4:ba:ff:54:4f:06:9b:8d:56:6d:0d:f3:4e:f2:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3D:10:17:BB:46:99:4A:DB:3B:9A:78:3C:D2:60:01:D8:14:CE:7D
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/F025BAB69D5911EEAA9F0413C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5380::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:10:a0:69:62:fd:de:8c:f6:f0:f4:3c:82:30:d7:af:f7:16:
         08:51:b4:f7:ed:d3:09:f9:2d:ea:4f:eb:8e:7a:76:19:ab:d7:
         0b:db:05:3a:cc:cc:09:14:cb:cd:49:6e:e5:33:44:7a:dc:16:
         25:33:21:9b:c7:f6:6b:c2:1c:75:cd:f3:ca:bb:aa:fc:12:2d:
         13:5e:1d:1d:9e:02:7e:46:d2:1d:b4:5f:3f:fd:bb:ce:19:99:
         f9:48:da:bc:50:5f:91:a2:1c:53:2a:aa:87:08:c3:12:84:97:
         f0:42:6e:2f:00:27:c1:0e:52:5f:56:0c:5b:b9:e5:cf:8b:14:
         3d:13:7d:cf:a3:22:70:31:c1:78:c2:18:90:e5:47:e2:17:29:
         8b:c7:5b:9b:c9:38:02:ea:c3:df:7e:68:b7:76:16:88:e4:1c:
         3f:7b:54:d3:36:27:28:a6:af:e5:ba:38:23:68:78:8b:88:53:
         92:ce:28:c9:12:41:5a:3d:4f:ed:c2:3e:7e:e9:2c:9f:d4:71:
         8a:0a:b2:89:f9:55:ac:eb:f0:25:0d:b4:84:f0:f4:50:12:58:
         d7:3f:47:d1:7b:07:c0:d3:f7:09:a5:c9:89:9a:34:52:92:26:
         69:e2:2e:85:a0:7a:a6:cc:cb:82:21:74:f6:ce:b7:9f:94:02:
         29:b6:07:7f
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICP4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjUwODAyMTQ1MDEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhlMjVhNC1lYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveoR2JdOpfOrcbkk1QwA4C9SgzFjQ2/quJS1FfsoSkleeQuNcKu/HtnwuCjq
jozQb0Hrcw8pyEX0WTN1PHFohouBioFgyS9MDGYCx9OxavAwn/LQiRtMZ80YVD9h
R9SPif3lRHtTrPXz6jJG4FO/Ia9JmbwY9Od+BiNLKa1qwUkDQOGh+I77sVokGYHc
olSCCB1G8v7zGVS4V/RNbdYMR0QmjOikdTgcwlaqtyFe6EI6ZfRw6CIEOJbBa36j
5SM40q1ArqV3J0YJx5okVGRbBmK1mF8XLpibAOPlH2GNoQMCC2UM6KO4mcari6yP
Y0vG9Lr/VE8Gm41WbQ3zTvKIfwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJE9EBe7
RplK2zuaeDzSYAHYFM59MB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvRjAyNUJBQjY5
RDU5MTFFRUFBOUYwNDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ33U4AwDQYJKoZIhvcNAQELBQADggEBADgQoGli/d6M
9vD0PIIw16/3FghRtPft0wn5LepP6456dhmr1wvbBTrMzAkUy81JbuUzRHrcFiUz
IZvH9mvCHHXN88q7qvwSLRNeHR2eAn5G0h20Xz/9u84ZmflI2rxQX5GiHFMqqocI
wxKEl/BCbi8AJ8EOUl9WDFu55c+LFD0Tfc+jInAxwXjCGJDlR+IXKYvHW5vJOALq
w99+aLd2FojkHD97VNM2Jyimr+W6OCNoeIuIU5LOKMkSQVo9T+3CPn7pLJ/UcYoK
son5Vazr8CUNtITw9FASWNc/R9F7B8DT9wmlyYmaNFKSJmniLoWgeqbMy4IhdPbO
t5+UAim2B38=
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:01 2025 by rpki-client