Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/49E75ECAD66F11EF8C443287C4F9AE02.roa
File:                     49E75ECAD66F11EF8C443287C4F9AE02.roa (raw, json)
Hash identifier:          6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=
Subject key identifier:   3F:40:07:77:EF:83:1A:23:8D:84:18:FB:E2:EE:05:10:EA:27:23:37
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0982
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/49E75ECAD66F11EF8C443287C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 21:01:52 +0000
ROA not before:           Sat 02 Aug 2025 21:01:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     214675
IP address blocks:        2406:7ec0:1006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Aug  2 21:01:52 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688e7cc0-260d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:53:ee:55:ac:1a:5d:6c:5b:6d:b9:e7:3c:
                    ce:a0:f2:74:50:de:86:1a:16:13:a8:2a:b1:63:97:
                    a8:ca:bf:bd:f1:02:64:63:86:a6:88:6f:fa:89:6d:
                    c6:c5:8a:80:fb:54:79:a7:cc:63:3b:16:e4:3a:9b:
                    9e:7c:97:cd:32:fc:bd:49:60:46:90:5d:11:40:66:
                    be:c3:e3:06:94:4c:32:c5:ff:a6:9c:4e:0b:66:41:
                    e5:a1:dc:bb:6c:3d:28:10:b2:80:6b:6e:7f:99:d3:
                    1b:5e:02:a0:1c:eb:61:bf:7c:ac:f5:c1:ee:2c:23:
                    0c:32:fb:23:21:bf:d4:34:0b:c0:08:e2:68:ad:94:
                    b7:a9:e5:d5:d0:c5:48:8e:88:00:ba:8d:61:ec:c9:
                    53:a8:46:6c:a7:c8:f4:a8:cf:8a:4d:95:31:cc:9b:
                    88:ee:e4:01:12:6a:5a:d3:cd:b5:63:85:88:e4:dd:
                    28:9e:5d:fe:ce:e0:f3:43:bc:c5:0b:7c:d5:d3:86:
                    4d:7b:8c:71:f6:4e:09:5b:a2:85:27:37:0a:d9:56:
                    fc:dc:2e:d6:df:96:d9:1b:12:de:c1:dc:29:ab:8f:
                    7c:01:a0:76:72:d8:d3:f2:73:ce:d8:dd:b9:4a:7d:
                    2b:78:b0:7a:3b:52:48:b5:b2:fa:7e:f1:d6:86:74:
                    24:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:40:07:77:EF:83:1A:23:8D:84:18:FB:E2:EE:05:10:EA:27:23:37
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/49E75ECAD66F11EF8C443287C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:06:9c:a6:98:77:61:c3:a4:d8:01:33:d5:12:8a:5e:59:
         77:0e:a9:91:4b:ab:94:43:70:c1:59:33:07:8f:3f:4f:93:60:
         3f:45:42:df:c4:c3:c1:83:96:97:1d:40:48:f1:b5:17:8c:5b:
         47:3f:41:c4:f8:02:54:62:da:b7:46:a0:1a:50:e5:19:c1:59:
         6a:27:54:b0:42:f5:bd:39:a1:39:77:4b:00:de:f2:94:a0:77:
         fe:f3:f8:1d:f8:8c:f9:83:96:d8:40:12:18:8d:44:fb:a9:99:
         83:62:14:1f:d8:5d:6d:14:38:56:87:3b:34:09:1b:d7:6f:c1:
         0b:19:b9:ee:3e:16:97:dd:2c:4c:50:24:20:61:9a:e3:27:36:
         46:75:4a:31:c3:be:2d:2f:4e:15:4f:47:3e:68:56:8d:75:93:
         ad:35:ea:24:ed:e5:92:2b:83:78:b4:b2:e8:f1:16:5e:14:96:
         3d:28:a7:3d:ff:02:ee:94:a6:22:c8:ff:d5:e6:71:49:ae:4e:
         d6:96:e4:d4:e6:12:4f:e8:38:37:c4:9d:c4:e8:6b:92:8c:4f:
         de:b2:cb:be:59:e8:84:92:d8:5c:71:6c:2f:7a:33:0e:96:1e:
         35:96:10:e3:9d:d9:2a:e2:53:92:12:55:9a:01:f5:e2:ab:b0:
         24:57:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:38 2025 by rpki-client