Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/E2245D966E8B11F09764751EC4F9AE02.roa
File:                     E2245D966E8B11F09764751EC4F9AE02.roa (raw, json)
Hash identifier:          5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=
Subject key identifier:   25:F8:EE:10:C5:37:9F:79:BA:B7:FD:94:12:61:C7:14:F5:30:CE:5A
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       0C
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/E2245D966E8B11F09764751EC4F9AE02.roa
Signing time:             Fri 01 Aug 2025 03:59:12 +0000
ROA not before:           Fri 01 Aug 2025 03:59:12 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:df5:27c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Aug  1 03:59:12 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=688c3b90-f459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:c7:29:7c:7f:72:25:4a:dd:d1:fa:6f:c2:
                    84:64:9e:c9:4d:44:b4:cd:86:4c:a8:6e:4c:fb:8d:
                    78:76:07:5e:3e:35:7f:18:48:36:4c:84:9a:3b:c8:
                    3c:0c:5c:d3:78:c3:51:8a:da:8c:a7:24:ee:98:48:
                    8d:29:2d:15:1d:fb:9e:58:59:a1:45:43:e0:5e:c3:
                    04:e1:48:e2:3e:bf:77:87:f4:6a:b0:6e:62:34:0e:
                    f7:2b:41:cc:07:13:d6:7a:7f:93:28:a9:4b:36:d8:
                    27:3f:e1:75:54:11:9a:57:8a:9b:72:07:43:69:04:
                    45:d6:04:7c:99:f6:09:e4:f5:34:26:dd:ca:17:ce:
                    a2:b9:4c:d3:62:86:d9:9b:6d:de:c9:01:39:3a:6c:
                    14:4b:bf:15:e1:0d:79:ab:9c:0c:0b:92:0b:62:62:
                    7d:99:13:d5:f6:75:50:9f:20:e1:b1:a1:c0:56:34:
                    86:84:66:2d:cc:f6:3a:91:99:04:6d:46:ac:d6:ba:
                    c2:b7:3b:72:78:4f:a1:44:5a:ac:9f:bf:e0:db:3f:
                    7d:6e:a8:57:35:92:b7:5d:ce:25:3a:28:60:7d:2a:
                    e1:da:21:8a:2d:7a:06:c6:ea:9d:d3:13:87:b5:f1:
                    33:c1:ea:1f:28:2a:3b:3e:d4:ba:de:e2:a8:ac:5e:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F8:EE:10:C5:37:9F:79:BA:B7:FD:94:12:61:C7:14:F5:30:CE:5A
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/E2245D966E8B11F09764751EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:27c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:92:52:d0:a0:3a:84:27:68:dc:a9:15:27:00:8e:4a:48:0a:
         53:d0:4a:99:4c:73:dd:77:19:f9:ec:7c:f7:fe:e3:df:ad:8b:
         59:5a:cd:8a:b8:72:b2:c4:57:94:96:94:4c:c0:eb:d8:80:eb:
         7d:54:93:b5:1f:e0:2f:4b:96:ea:e1:b2:09:6a:d4:a0:71:93:
         7a:da:98:15:28:db:9b:b2:d7:56:02:24:0a:30:42:fd:fa:42:
         e9:7c:62:cd:f0:c7:05:b9:53:70:d5:87:be:c5:79:9e:67:4c:
         1c:e1:6c:5b:39:89:8f:16:a1:99:b4:af:22:a1:1b:d9:a2:dc:
         36:ea:67:d6:37:a1:4a:8c:d6:3c:b6:bb:87:44:58:ca:35:7c:
         35:b3:a5:09:71:94:77:23:60:b0:8e:80:e0:22:bb:4b:7a:c8:
         13:5f:5f:ac:be:4d:27:f4:15:f5:cc:8a:84:5f:37:88:9c:3c:
         e6:49:97:47:1c:62:59:ba:3c:8b:f4:05:98:f2:5b:70:29:4a:
         33:2a:99:bd:90:0b:ff:2c:0a:d6:59:3a:00:f0:66:7f:89:32:
         4c:24:a3:53:93:6f:51:70:5f:7a:65:de:d6:9a:28:04:7a:c2:
         ff:2c:86:6a:18:ee:98:76:7e:2b:e2:ac:5b:71:28:d7:43:0d:
         d4:3d:35:48
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw
QjVDQ0M2MDAeFw0yNTA4MDEwMzU5MTJaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4OGMzYjkwLWY0NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1Z8cpfH9yJUrd0fpvwoRknslNRLTNhkyobkz7jXh2B14+NX8YSDZMhJo7yDwM
XNN4w1GK2oynJO6YSI0pLRUd+55YWaFFQ+BewwThSOI+v3eH9GqwbmI0DvcrQcwH
E9Z6f5MoqUs22Cc/4XVUEZpXiptyB0NpBEXWBHyZ9gnk9TQm3coXzqK5TNNihtmb
bd7JATk6bBRLvxXhDXmrnAwLkgtiYn2ZE9X2dVCfIOGxocBWNIaEZi3M9jqRmQRt
RqzWusK3O3J4T6FEWqyfv+DbP31uqFc1krddziU6KGB9KuHaIYotegbG6p3TE4e1
8TPB6h8oKjs+1Lre4qisXtE1AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUJfjuEMU3
n3m6t/2UEmHHFPUwzlowHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz
RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDk2MS84RTU5OTZDNDYwM0QxMUYwQjE1MDVCMjFDNEY5QUUwMi9FMjI0NUQ5NjZF
OEIxMUYwOTc2NDc1MUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfUnwDANBgkqhkiG9w0BAQsFAAOCAQEAIZJS0KA6hCdo
3KkVJwCOSkgKU9BKmUxz3XcZ+ex89/7j362LWVrNirhyssRXlJaUTMDr2IDrfVST
tR/gL0uW6uGyCWrUoHGTetqYFSjbm7LXVgIkCjBC/fpC6XxizfDHBblTcNWHvsV5
nmdMHOFsWzmJjxahmbSvIqEb2aLcNupn1jehSozWPLa7h0RYyjV8NbOlCXGUdyNg
sI6A4CK7S3rIE19frL5NJ/QV9cyKhF83iJw85kmXRxxiWbo8i/QFmPJbcClKMyqZ
vZAL/ywK1lk6APBmf4kyTCSjU5NvUXBfemXe1pooBHrC/yyGahjumHZ+K+KsW3Eo
10MN1D01SA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:50:48 2025 by rpki-client