Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
File:                     764601EE6A7A11EFAF10EC37C4F9AE02.roa (raw, json)
Hash identifier:          KC0xcucgFsPCAN+N80I9dtcN0tPHYNAOVU4Hu0w2pjA=
Subject key identifier:   67:77:8C:29:9A:B4:BD:0C:E6:97:71:13:FE:3B:35:4E:6F:B9:F1:4B
Certificate issuer:       /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial:       262D
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 15:52:59 +0000
ROA not before:           Wed 30 Jul 2025 15:52:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38071
IP address blocks:        58.147.168.0/21 maxlen: 24
                          223.27.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9773 (0x262d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
        Validity
            Not Before: Jul 30 15:52:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688a3fda-7513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:85:f0:40:f8:b3:ea:0b:18:b2:e4:75:98:
                    1b:26:09:98:5c:8c:0d:32:97:4e:b6:91:07:b6:aa:
                    8f:54:4e:27:db:74:e8:28:53:6c:55:61:77:d4:fc:
                    49:99:b5:e5:97:93:3f:42:b5:60:fb:64:6c:97:fe:
                    da:72:74:5d:23:bf:28:f3:f2:3c:9a:1c:6c:e1:3d:
                    ce:eb:4b:6b:d1:1f:b4:f0:86:5d:01:fa:24:d3:55:
                    33:71:83:7a:35:f1:bc:63:4f:08:18:3f:c2:1f:cd:
                    df:05:f1:99:fd:d6:9b:7e:c7:d2:4b:99:b8:8f:3c:
                    7b:4a:8e:05:8d:72:96:43:c5:31:e7:81:0e:86:64:
                    b4:99:98:2f:d0:e8:08:8a:ce:ce:92:6b:1c:22:21:
                    01:5b:56:e7:9d:ca:60:01:17:0a:d7:e7:24:9a:d1:
                    58:c7:be:3a:97:78:f0:e0:1f:ef:25:88:18:fe:12:
                    8b:f1:75:dc:63:33:1f:35:7b:56:40:f5:79:f5:17:
                    ab:88:97:33:4d:33:c8:bb:e8:b1:6c:96:9a:47:e1:
                    40:d2:35:8c:a8:70:df:d2:69:19:9f:e0:4f:c2:95:
                    dd:89:63:3e:e3:0d:78:93:6a:2a:bc:f3:9e:df:ee:
                    6e:8a:35:94:6c:b5:e9:4c:c5:d1:a4:7d:f1:21:34:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:8C:29:9A:B4:BD:0C:E6:97:71:13:FE:3B:35:4E:6F:B9:F1:4B
            X509v3 Authority Key Identifier:
                keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.168.0/21
                  223.27.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:f5:bd:99:1c:35:2d:a9:2b:10:c9:53:e7:ce:6f:07:43:d1:
         6c:0c:ee:1c:f6:e7:ed:96:58:7a:9a:e7:c0:ef:4f:2b:a8:03:
         90:d4:7c:ff:e7:7d:35:61:dc:b5:c5:97:28:05:68:ff:ff:5c:
         e4:f0:88:f6:a9:a0:6a:20:30:5f:b7:e8:f0:12:48:2b:b6:92:
         fa:cc:20:fd:2e:46:f6:fb:34:13:f0:c1:f7:ba:4b:a5:a2:0d:
         e8:3c:cf:f2:72:3a:58:a9:e6:27:55:62:03:ca:54:16:73:a6:
         35:0e:a9:b9:51:38:f6:34:8f:86:6d:e0:e3:5d:9b:0d:63:74:
         c4:8e:3b:e8:58:96:40:00:3d:c5:aa:60:43:e7:61:fd:3c:fc:
         c7:0e:8e:e1:b9:6d:4a:91:91:68:48:23:16:07:63:ce:08:3b:
         df:80:91:7f:a8:f3:4a:21:f6:1e:b9:79:4c:78:06:e8:c7:31:
         fc:98:18:9b:88:ca:a0:3d:60:50:0f:ad:d9:46:ef:a3:ca:bd:
         76:2b:c2:ec:cf:a2:fd:34:79:6a:50:a7:7c:cf:63:e0:57:67:
         91:29:4a:ec:64:48:99:5f:39:16:4c:d0:f1:1a:ce:5d:36:73:
         57:af:62:cd:b5:88:f0:ba:dd:8f:f1:7f:00:14:04:02:6c:38:
         0e:74:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:36 2025 by rpki-client