Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa
File:                     A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (raw, json)
Hash identifier:          uBoNIMKOZ7mdZtPmDt522sQeNo1Hui8N7OHysFbsQzg=
Subject key identifier:   74:80:02:8A:70:D0:58:38:6C:C2:66:93:41:C5:10:1F:F3:C8:4B:F2
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       0A5B
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa
Signing time:             Wed 06 Aug 2025 20:31:26 +0000
ROA not before:           Wed 06 Aug 2025 20:31:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        58.181.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: Aug  6 20:31:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6893bb9e-abbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b8:94:2b:f2:b1:4b:f0:b3:e1:e1:2d:cb:76:
                    35:66:40:f3:84:dd:fc:c2:a7:6c:cb:ab:3e:28:4d:
                    3a:74:17:18:80:06:87:24:49:90:db:1e:dd:b5:ef:
                    af:68:89:a5:5f:f8:68:cd:35:e6:99:57:82:9d:59:
                    21:1b:fb:e1:ca:25:25:6e:5b:e5:d3:d7:64:f7:a6:
                    21:dd:e4:67:09:4f:40:62:8a:b9:9c:aa:63:a8:93:
                    c6:86:0a:78:57:61:51:41:6f:24:a8:65:80:ff:ab:
                    8b:92:ec:b8:7a:c4:9f:22:a2:13:bd:ed:5d:1e:bb:
                    8b:8a:00:25:65:f0:59:0a:f7:fb:5d:34:e3:af:23:
                    72:01:5f:39:8f:4e:cb:cc:75:6f:a0:54:3b:89:48:
                    e8:58:c8:a1:43:76:bf:5c:54:89:c3:eb:e9:00:83:
                    d4:4a:bc:1c:14:fc:23:40:be:d7:96:47:38:07:d3:
                    50:7c:0d:dc:d2:12:04:13:fb:ce:22:bf:7d:f3:0f:
                    67:56:cb:f1:45:31:53:1a:81:4b:54:b6:63:05:20:
                    8f:e1:88:5e:b8:f1:7e:f3:fc:58:c4:5d:b8:b3:5c:
                    17:2c:6b:ac:28:08:0b:0e:73:42:47:49:15:ff:54:
                    6b:ac:3a:6b:a2:c1:7e:39:8b:e0:96:38:53:d3:bb:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:80:02:8A:70:D0:58:38:6C:C2:66:93:41:C5:10:1F:F3:C8:4B:F2
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:6f:65:c6:40:4a:58:e4:0a:fa:00:89:3a:3a:a1:bb:08:
         8d:e4:7e:42:a8:51:87:1a:81:80:70:c9:e4:e0:23:3a:d3:10:
         98:9b:bd:53:ac:5c:1f:25:ed:c1:ca:da:c3:7b:14:84:21:f6:
         f1:0b:d6:6f:9e:f9:10:74:dd:72:39:18:d5:c1:21:d3:79:ad:
         5c:40:27:aa:58:52:36:1a:38:61:57:29:13:9e:52:79:84:85:
         b0:84:c1:b0:de:02:f5:2d:22:e0:46:aa:e5:4a:c9:e6:d1:be:
         10:d6:23:7b:44:ca:4a:86:4f:f4:3f:1a:06:95:d4:43:fc:f6:
         9d:35:44:9b:db:b7:ff:22:fc:c0:55:ee:7e:cb:34:31:ec:e0:
         a6:4d:97:e1:7f:da:10:cf:ea:3d:b5:66:35:9d:70:92:e0:ab:
         c2:6d:9b:26:b0:5b:16:c6:3f:13:8e:b2:66:02:1d:48:c2:05:
         96:a5:b1:ec:b3:c7:42:c6:c3:4e:ec:68:7a:07:64:3b:ac:26:
         74:16:3f:56:ed:f1:19:50:33:8e:81:ba:e4:c1:0e:e2:05:12:
         f1:cc:50:f3:1e:37:07:86:a9:cd:53:57:20:ed:d1:58:0d:da:
         31:52:55:e2:24:03:93:6d:40:87:a6:42:bf:22:4a:69:85:1e:
         ae:27:44:f1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4
MkNGNkE1QjMwHhcNMjUwODA2MjAzMTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODkzYmI5ZS1hYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4LiUK/KxS/Cz4eEty3Y1ZkDzhN38wqdsy6s+KE06dBcYgAaHJEmQ2x7dte+v
aImlX/hozTXmmVeCnVkhG/vhyiUlblvl09dk96Yh3eRnCU9AYoq5nKpjqJPGhgp4
V2FRQW8kqGWA/6uLkuy4esSfIqITve1dHruLigAlZfBZCvf7XTTjryNyAV85j07L
zHVvoFQ7iUjoWMihQ3a/XFSJw+vpAIPUSrwcFPwjQL7Xlkc4B9NQfA3c0hIEE/vO
Ir998w9nVsvxRTFTGoFLVLZjBSCP4YheuPF+8/xYxF24s1wXLGusKAgLDnNCR0kV
/1RrrDprosF+OYvgljhT07u93QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHSAAopw
0Fg4bMJmk0HFEB/zyEvyMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz
QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvQTNENTBCMkVB
M0RCMTFFQTk4QkM1RDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA6tV8wDQYJKoZIhvcNAQELBQADggEBAE87b2XGQEpY5Ar6
AIk6OqG7CI3kfkKoUYcagYBwyeTgIzrTEJibvVOsXB8l7cHK2sN7FIQh9vEL1m+e
+RB03XI5GNXBIdN5rVxAJ6pYUjYaOGFXKROeUnmEhbCEwbDeAvUtIuBGquVKyebR
vhDWI3tEykqGT/Q/GgaV1EP89p01RJvbt/8i/MBV7n7LNDHs4KZNl+F/2hDP6j21
ZjWdcJLgq8JtmyawWxbGPxOOsmYCHUjCBZalseyzx0LGw07saHoHZDusJnQWP1bt
8RlQM46BuuTBDuIFEvHMUPMeNweGqc1TVyDt0VgN2jFSVeIkA5NtQIemQr8iSmmF
Hq4nRPE=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:51 2025 by rpki-client