Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
File:                     55F31770736F11F0A16F9258C4F9AE02.roa (raw, json)
Hash identifier:          Sr+ucZ2EgFFs7yiEWkfrKWXFX1DawT56zEHz/wMkbIw=
Subject key identifier:   65:D0:FE:2E:57:C8:CF:02:1A:1C:1C:14:87:A0:4D:D9:A1:D3:1D:29
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4C1C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 09:17:27 +0000
ROA not before:           Thu 07 Aug 2025 09:17:27 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149113
IP address blocks:        2001:df4:a240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 08:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19484 (0x4c1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug  7 09:17:27 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68946f27-48d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:62:a3:93:20:f4:2a:97:29:21:65:2a:3e:
                    9f:64:8a:61:1c:dd:ea:4c:1d:87:42:ee:16:2a:09:
                    42:11:6d:f6:a8:06:3d:61:9b:35:97:d7:be:03:75:
                    18:74:5a:b4:e9:e7:79:59:68:54:7a:19:ad:76:d7:
                    56:db:f1:aa:3d:24:6e:68:5f:c1:6a:d6:8a:a0:bc:
                    e8:e2:f8:4f:3c:9a:c5:72:9b:00:6a:9f:d0:99:af:
                    0e:ef:72:c0:45:07:08:8d:a9:26:23:12:b3:13:f8:
                    71:6f:84:04:b4:83:cf:a8:d9:96:02:63:25:10:cd:
                    d8:57:92:4e:5e:67:eb:62:52:64:ed:d8:9a:ba:25:
                    29:61:ae:f4:1c:42:33:07:67:bb:98:e4:46:09:75:
                    2a:56:22:46:14:d5:fd:c6:36:82:61:fc:2b:3e:5a:
                    c2:26:35:2c:6c:75:d4:99:93:c6:41:22:ab:c9:45:
                    3e:f0:62:35:88:c3:b3:1f:76:05:91:c5:d2:61:ff:
                    96:98:2e:37:70:e1:93:1b:b8:bb:e4:a5:dd:42:a6:
                    1b:b8:88:d6:43:a1:25:35:cc:fa:2c:5b:1a:b3:b9:
                    e2:74:e0:87:65:cc:b3:8e:8d:3d:13:d5:37:db:5c:
                    8f:70:f0:6e:52:1b:66:39:8f:cb:73:a4:60:fc:ee:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:FE:2E:57:C8:CF:02:1A:1C:1C:14:87:A0:4D:D9:A1:D3:1D:29
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a240::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:de:18:27:cd:0d:24:f1:75:ad:6f:0f:e0:f7:e8:e2:85:
         74:f6:82:7c:af:14:ee:65:a6:31:31:e8:98:86:ef:c9:a0:57:
         68:9f:38:b5:f3:63:1d:27:da:36:ef:6d:b8:78:ac:2c:21:a1:
         33:73:2b:15:51:32:53:a3:56:ea:d8:1e:b4:e9:4b:6f:4c:c9:
         d6:2e:c9:d1:e9:d2:de:52:c3:16:51:d9:12:36:ce:9c:97:1f:
         08:59:14:df:ab:f7:9c:a8:f4:ff:82:a5:d0:55:45:ad:f8:d4:
         5c:a0:24:e3:25:23:d0:3c:39:19:9e:90:64:dc:9c:31:18:0c:
         da:52:20:82:65:58:ca:98:ed:f6:a6:ad:97:82:48:96:75:07:
         86:02:13:f7:72:95:94:3d:23:2d:99:69:f8:ef:ad:5f:18:12:
         9e:64:4b:cf:e0:18:15:6b:ff:6d:af:6e:b6:dc:da:9e:32:16:
         db:31:aa:32:e0:6b:d6:5b:75:49:d2:c2:82:38:42:3f:f1:2f:
         d6:89:72:60:8a:9c:fd:dd:6a:1f:ca:dc:b4:40:ea:e6:51:b6:
         32:75:d2:41:90:be:37:1e:a6:27:f5:d7:c9:a2:e7:c7:3a:56:
         43:0d:35:2f:ee:d6:cd:f6:6e:04:41:66:fb:79:3b:b9:01:a2:
         27:24:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 11:05:52 2025 by rpki-client