Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8D9878B6736D11F0AA6D9947C4F9AE02.roa
File:                     8D9878B6736D11F0AA6D9947C4F9AE02.roa (raw, json)
Hash identifier:          uRMpT9tQxyZtLK+tJQ+7ipIFtrJYkZrSZvEJVCTSWtE=
Subject key identifier:   53:D8:1D:70:B4:97:7B:20:1A:17:D7:2B:DB:5B:74:3F:9D:AF:F4:51
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       064F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8D9878B6736D11F0AA6D9947C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 09:04:41 +0000
ROA not before:           Thu 07 Aug 2025 09:04:41 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     154091
IP address blocks:        198.56.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug  7 09:04:41 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68946c29-d0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:11:c9:f1:f2:6b:14:13:c9:ea:26:86:51:
                    96:73:39:5a:9f:db:59:d7:89:3c:fe:7b:84:37:dc:
                    b6:2e:30:e3:88:8b:02:db:42:8a:f5:f5:d9:d5:c3:
                    26:7a:3f:dd:2a:32:62:d6:4e:59:96:86:11:d0:2f:
                    09:48:40:03:c3:d3:16:32:21:49:1c:15:ee:5a:b8:
                    e6:17:6f:fe:e9:ad:e5:cd:f1:0e:90:ae:8a:c1:49:
                    26:59:c6:f1:f5:06:19:df:32:78:51:b8:1c:08:50:
                    68:ae:63:da:f9:f4:fe:df:6d:a4:3a:5e:8d:16:dc:
                    96:20:65:77:17:94:7b:d6:60:4c:e0:67:61:d7:08:
                    b0:74:55:d2:25:fb:98:fa:5a:18:06:b1:01:57:84:
                    fe:8c:68:32:ae:2f:5a:66:47:89:34:fb:40:33:05:
                    40:53:24:b8:de:39:a4:cb:13:0a:9c:66:0a:1b:01:
                    92:5a:21:5c:4e:bf:8e:ce:2c:e2:1f:1a:0f:0e:b0:
                    b0:24:91:69:6d:ea:50:fc:4e:e2:dd:3a:60:12:bb:
                    46:d7:11:15:0a:96:ac:6b:64:ed:b1:15:f1:89:12:
                    6b:6f:f0:b5:a2:42:70:c5:41:44:8b:50:d3:73:8b:
                    60:c9:6a:8d:1a:0f:d0:e0:50:98:e0:48:04:82:9d:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D8:1D:70:B4:97:7B:20:1A:17:D7:2B:DB:5B:74:3F:9D:AF:F4:51
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8D9878B6736D11F0AA6D9947C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.56.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:c9:58:81:31:22:50:27:1a:42:d8:7e:fb:b6:f7:99:23:
         9a:15:10:51:04:3d:34:20:26:97:32:be:69:50:3b:d5:f0:33:
         9e:46:ff:e7:dc:d4:8b:d8:6b:31:32:3c:a4:57:b8:c0:e9:eb:
         98:38:8f:a8:0b:24:d4:83:57:29:cd:e7:35:11:91:d4:76:3c:
         8c:ac:8b:44:4f:c2:4a:78:5c:7b:12:74:a9:2d:6e:6d:83:39:
         ca:b2:71:1e:c6:ab:96:70:b8:00:77:60:fa:d4:4b:d1:b0:0d:
         c3:33:a8:16:8d:7b:4a:58:f7:f1:86:9c:67:a4:2c:09:58:fa:
         f1:43:49:bc:cf:15:f7:45:49:e9:59:a8:40:93:b7:8b:f0:cc:
         06:96:9c:41:ae:7e:9f:e8:e7:f2:3a:09:8c:b5:4c:20:a7:f6:
         af:76:80:60:e0:94:88:95:09:31:89:7b:07:b0:6a:6b:1a:c7:
         6e:32:fc:c8:96:0e:22:e4:4e:7d:e2:b4:fb:e6:35:21:e2:8d:
         7b:ab:96:0a:1f:30:b3:df:50:81:3e:df:d2:66:7b:d6:c3:a1:
         94:be:b8:62:91:f6:96:39:67:2a:23:7d:93:d4:9f:d5:8d:08:
         06:6e:d7:87:90:a8:a4:62:2d:f6:b5:01:e9:11:88:a8:80:78:
         fc:e2:f1:97
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODA3MDkwNDQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk0NmMyOS1kMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgURyfHyaxQTyeomhlGWczlan9tZ14k8/nuEN9y2LjDjiIsC20KK9fXZ1cMm
ej/dKjJi1k5ZloYR0C8JSEADw9MWMiFJHBXuWrjmF2/+6a3lzfEOkK6KwUkmWcbx
9QYZ3zJ4UbgcCFBormPa+fT+322kOl6NFtyWIGV3F5R71mBM4Gdh1wiwdFXSJfuY
+loYBrEBV4T+jGgyri9aZkeJNPtAMwVAUyS43jmkyxMKnGYKGwGSWiFcTr+Ozizi
HxoPDrCwJJFpbepQ/E7i3TpgErtG1xEVCpasa2TtsRXxiRJrb/C1okJwxUFEi1DT
c4tgyWqNGg/Q4FCY4EgEgp3EbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFPYHXC0
l3sgGhfXK9tbdD+dr/RRMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOEQ5ODc4QjY3
MzZEMTFGMEFBNkQ5OTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHGOBYwDQYJKoZIhvcNAQELBQADggEBAEW9yViBMSJQJxpC
2H77tveZI5oVEFEEPTQgJpcyvmlQO9XwM55G/+fc1IvYazEyPKRXuMDp65g4j6gL
JNSDVynN5zURkdR2PIysi0RPwkp4XHsSdKktbm2DOcqycR7Gq5ZwuAB3YPrUS9Gw
DcMzqBaNe0pY9/GGnGekLAlY+vFDSbzPFfdFSelZqECTt4vwzAaWnEGufp/o5/I6
CYy1TCCn9q92gGDglIiVCTGJewewamsax24y/MiWDiLkTn3itPvmNSHijXurlgof
MLPfUIE+39Jme9bDoZS+uGKR9pY5ZyojfZPUn9WNCAZu14eQqKRiLfa1AekRiKiA
ePzi8Zc=
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:15 2025 by rpki-client