Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/A460F59AB30111F0870CBA50C4F9AE02.roa
File:                     A460F59AB30111F0870CBA50C4F9AE02.roa (raw, json)
Hash identifier:          OniChjyeEXj5cVvVwWs//hBr0jYalsY+nH9sGBE3ExQ=
Subject key identifier:   AA:72:71:ED:77:08:F5:0C:9E:02:C1:49:34:D5:67:38:B4:58:BB:4B
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       093E
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/A460F59AB30111F0870CBA50C4F9AE02.roa
Signing time:             Mon 27 Oct 2025 06:53:28 +0000
ROA not before:           Mon 27 Oct 2025 06:53:28 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138619
IP address blocks:        2404:6ac0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Oct 27 06:53:28 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68ff16e8-97da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:5b:07:64:8b:ad:e9:46:34:35:e9:78:3e:
                    3d:de:ca:1c:93:cf:7c:28:16:fb:f2:db:58:70:72:
                    db:08:2d:18:5b:12:93:9d:5c:82:d4:4d:a6:18:e0:
                    5b:15:48:41:6d:40:03:49:43:fa:52:11:10:b8:12:
                    c7:f8:89:1e:43:4b:cf:35:85:c8:e9:e9:af:69:70:
                    66:c9:2a:ef:ea:ce:10:52:ca:05:92:87:6c:24:8d:
                    19:a2:47:b6:23:c5:bc:d6:79:d4:10:77:bc:66:42:
                    26:e4:ac:00:81:6e:92:3b:7f:64:8d:14:30:61:9e:
                    df:a4:70:63:21:77:0e:2c:f8:f7:b7:41:4d:51:75:
                    66:b9:0a:9d:4a:ef:9e:5a:2f:dd:dd:79:57:da:b8:
                    b7:71:2b:76:4d:fe:da:43:d8:78:5c:d4:cc:d0:5d:
                    c8:8a:ec:ac:92:ee:a6:c0:f0:81:fe:29:cc:c3:4b:
                    de:f7:59:22:22:55:c8:1e:bc:ed:5f:e9:e4:0d:bb:
                    b8:62:a9:6c:01:83:57:de:ce:cf:34:78:20:9c:df:
                    e7:95:ed:98:61:a9:4d:44:fe:a2:7c:f5:9a:fc:8e:
                    66:62:d7:a8:14:d3:d9:dc:37:cb:9c:f2:cd:5e:8f:
                    9f:9f:65:93:60:45:e0:70:f9:2d:61:ee:80:1d:5e:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:72:71:ED:77:08:F5:0C:9E:02:C1:49:34:D5:67:38:B4:58:BB:4B
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/A460F59AB30111F0870CBA50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:9a:30:3e:b3:c4:45:ad:33:fa:72:07:0c:23:1b:c1:41:a9:
         20:b0:ac:e9:4e:76:55:3c:66:9a:bb:4c:be:9b:bf:8c:a8:f1:
         c3:6f:a4:be:8d:6d:c2:f4:83:f3:cb:4b:62:bc:fa:16:d9:c5:
         e1:dc:39:95:d0:6c:70:66:60:d1:b1:5b:08:2e:c3:45:eb:e7:
         2f:4c:7e:ad:8d:de:07:01:82:5e:8e:ee:00:0c:3f:81:4c:14:
         2b:ea:43:f8:51:65:a7:2b:83:e2:dc:7c:ce:f8:48:44:52:7c:
         cc:cb:dc:27:dd:ba:6e:a6:9d:32:59:52:e4:7d:84:4d:db:70:
         f3:c8:11:de:21:57:1b:b3:a6:f8:4d:e5:6d:cb:e3:97:74:50:
         38:89:0b:91:f2:78:7a:44:d8:96:90:04:13:fa:24:d2:da:de:
         01:66:e8:91:47:45:d6:86:49:cb:68:da:30:d0:c7:87:d6:9a:
         11:bc:fa:5d:a5:b9:eb:5d:00:13:07:bb:05:fd:43:e3:eb:7e:
         9e:a0:78:d5:53:f3:a0:35:78:05:14:b6:d8:62:09:e9:3f:64:
         d3:1e:5f:21:08:a7:81:9b:91:11:b5:4d:9d:60:a9:2c:bb:6d:
         8a:0c:fe:7b:d2:0d:69:89:57:cb:c4:ea:b0:ce:86:3e:50:92:
         04:8b:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:54:46 2025 by rpki-client