Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
File:                     501941C093F211EEA029A113C4F9AE02.roa (raw, json)
Hash identifier:          FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=
Subject key identifier:   BD:7D:64:4C:A2:94:AA:D7:CB:16:50:57:55:44:D1:AA:A5:BA:78:B1
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0980
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 21:01:51 +0000
ROA not before:           Sat 02 Aug 2025 21:01:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150325
IP address blocks:        2406:7ec0:1000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Aug  2 21:01:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688e7cbe-d14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:75:fe:56:43:15:be:10:e6:88:72:34:1f:
                    90:ca:9c:2e:c6:b0:fc:91:b9:49:6f:8a:77:b3:36:
                    30:27:5f:22:87:b4:4b:88:bd:42:2a:ed:7f:1e:11:
                    ca:72:66:17:60:d7:12:d0:a1:d6:83:2a:3b:3e:94:
                    47:dd:97:fe:10:8d:ec:69:c6:eb:9d:0b:ac:68:f6:
                    80:07:ef:f6:d7:a6:ea:a6:bd:cb:06:a1:8b:7e:c5:
                    af:7a:bd:e2:e1:ed:2a:c8:98:6d:7d:3d:6b:14:66:
                    51:84:ec:12:ed:78:cc:9a:ed:cc:e8:de:15:18:d2:
                    96:30:61:21:cc:35:73:03:5e:47:74:2e:2b:8f:34:
                    fe:f8:ac:b5:3b:d7:a9:e4:5f:90:72:9d:0a:96:ff:
                    50:33:17:71:29:31:b2:67:f2:7d:6e:5a:4f:20:d1:
                    fc:01:64:5c:13:bb:22:f4:f7:e2:2f:02:de:8f:5d:
                    8d:73:1e:6b:a6:52:d1:88:3c:eb:eb:33:2f:8c:15:
                    52:29:e1:75:eb:4b:21:74:33:04:cf:f0:09:39:e3:
                    96:4f:f8:7b:cb:15:a4:1d:8e:d1:da:29:8a:aa:34:
                    5c:d5:62:45:7a:74:2b:05:b4:4e:b6:c5:34:0d:a6:
                    ad:59:77:52:70:e6:9f:68:ec:45:ba:1a:8b:e5:f6:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:64:4C:A2:94:AA:D7:CB:16:50:57:55:44:D1:AA:A5:BA:78:B1
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1000::/46

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:74:96:74:9d:2b:49:40:03:7c:5b:61:25:f6:da:93:3e:
         18:1f:4b:a9:7f:ce:7d:35:5d:4c:68:ac:f8:85:f2:ae:85:51:
         02:c3:1e:15:0b:25:e3:5b:51:4c:bd:65:03:e6:51:07:78:f7:
         13:2c:6f:e0:3c:44:86:64:af:56:0a:d1:d9:81:7e:f7:19:f3:
         35:1a:3c:0f:8e:6a:0f:9b:7b:04:05:5a:dd:c5:25:cd:ba:1d:
         1b:00:b9:11:eb:63:5c:03:35:90:28:15:b1:96:c3:75:d0:c3:
         d6:11:44:b7:8d:9b:5b:8c:49:16:49:7c:8f:8a:9c:e0:31:d0:
         38:8b:55:94:c4:f3:1e:bb:ac:f7:f9:5d:ce:db:0a:60:31:67:
         a0:a4:13:e6:19:a6:5e:15:da:6c:18:1e:db:00:18:c3:a1:d4:
         69:20:f6:82:26:3e:58:a6:b1:3b:75:b4:db:22:74:60:27:0a:
         39:6f:ce:b8:d4:81:f2:bd:df:a2:c9:6c:94:61:32:2f:ad:8d:
         01:d6:d4:10:77:f8:95:2f:82:68:5a:13:4f:ca:cb:ae:f4:ea:
         ad:33:b1:b0:bd:3d:87:21:53:34:9e:06:e5:f5:0b:62:4f:38:
         18:64:b9:1d:11:e7:cb:10:0c:20:6e:6a:a0:27:b0:e7:0a:c4:
         da:ca:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:03 2025 by rpki-client