Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/781C64FAF58611ED89273159C4F9AE02.roa
File:                     781C64FAF58611ED89273159C4F9AE02.roa (raw, json)
Hash identifier:          lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=
Subject key identifier:   82:0D:5B:A5:7C:05:A0:B5:16:39:9D:00:01:39:56:2B:EF:37:95:29
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       097F
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/781C64FAF58611ED89273159C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 21:01:49 +0000
ROA not before:           Sat 02 Aug 2025 21:01:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140868
IP address blocks:        2001:df4:1781::/48 maxlen: 48
                          2406:7ec0::/33 maxlen: 41
                          2406:7ec0:1004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 20:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Aug  2 21:01:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688e7cbd-3b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:51:a0:80:eb:60:e9:1c:a4:b0:8c:28:d6:
                    4d:03:f0:c5:83:df:19:ad:ea:ee:14:17:0e:03:86:
                    5d:f6:a7:f6:1d:48:2c:97:44:ef:cb:26:3c:9b:a1:
                    e0:9d:2b:e3:da:6a:d4:bd:e2:d8:1a:2c:99:18:d5:
                    90:f7:ad:b6:ab:cd:3f:68:06:d6:fc:2d:e2:80:00:
                    c7:44:0c:40:d6:e1:67:fd:c9:39:7b:b6:03:6a:3f:
                    f6:eb:0a:1a:00:ef:c5:1f:db:11:f9:60:71:73:1a:
                    b4:4b:68:ee:4b:41:19:3e:3c:c6:c9:86:21:0c:50:
                    55:47:5d:2f:af:a8:b3:a7:62:2d:09:6c:c9:fa:ad:
                    1f:b1:1d:ef:36:a2:97:64:67:dc:07:bd:7e:17:df:
                    05:3b:3b:5a:6b:86:75:f2:07:62:03:8b:e0:a5:1e:
                    be:e9:c9:9f:77:d4:ee:f9:62:df:7b:67:01:87:14:
                    fc:e2:23:da:ea:d6:92:37:7b:89:11:53:1a:c7:cc:
                    75:d5:05:6b:fe:5b:4a:60:9c:cd:36:20:8b:22:f0:
                    10:82:ec:1e:cb:7b:6a:d0:49:e9:1c:a7:82:dc:38:
                    30:60:6d:30:7c:25:e5:ec:d8:48:17:d1:6f:7a:31:
                    bf:53:d8:f9:22:47:31:59:84:60:a2:ec:68:4a:3c:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:5B:A5:7C:05:A0:B5:16:39:9D:00:01:39:56:2B:EF:37:95:29
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/781C64FAF58611ED89273159C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1781::/48
                  2406:7ec0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:b8:20:b0:7f:58:72:99:f0:8a:01:dc:8f:bb:32:8d:ac:
         76:f4:9c:3d:d1:64:2e:98:b8:71:5d:42:34:d3:a4:67:01:26:
         e2:44:31:91:3b:17:47:40:b3:ad:fe:38:6b:25:2b:5d:d6:01:
         c1:06:88:02:e9:bd:47:4f:43:00:01:ce:4f:a1:da:ae:b5:e8:
         0c:e4:7f:74:72:69:46:58:e7:77:b7:97:e8:f6:cf:b3:fa:8a:
         af:07:1f:7f:d1:bc:71:2b:c8:a7:18:82:9e:4c:ca:bc:a9:88:
         e4:a4:40:23:88:19:fc:0f:90:91:c5:e4:d6:81:bb:44:75:ae:
         86:80:85:88:d6:5a:fe:be:f5:74:dc:5d:f6:d1:0d:58:a1:6d:
         16:8d:78:39:64:5e:1e:72:c4:0d:d3:7e:48:db:1b:db:6f:ce:
         fa:51:2f:ed:4b:19:22:d5:fe:ce:92:8c:21:b1:23:b3:08:c6:
         c8:f6:57:cc:3c:70:ac:f7:b2:f2:6d:2c:78:b3:07:f0:94:d5:
         2c:ff:56:c4:aa:81:b9:56:05:87:66:bb:34:ab:a7:b7:e7:12:
         d8:c7:74:a7:5e:16:e5:dc:1a:5c:95:4d:4a:d9:5c:4c:e1:93:
         55:21:9e:67:26:d7:83:59:a1:52:9f:91:df:a7:5e:76:6c:3e:
         42:ab:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:46 2025 by rpki-client