Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/E7D03568F89011ECB5F98148C4F9AE02.roa
File:                     E7D03568F89011ECB5F98148C4F9AE02.roa (raw, json)
Hash identifier:          M5PKDMLMdavH6GN3M2mqYtrVkK8hWINqy8WhALabjko=
Subject key identifier:   AE:2C:32:B1:EB:D4:D5:48:9A:A5:F1:30:DA:AE:21:EC:8C:99:65:C4
Certificate issuer:       /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial:       02DA
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/E7D03568F89011ECB5F98148C4F9AE02.roa
Signing time:             Sat 05 Jul 2025 02:09:45 +0000
ROA not before:           Sat 05 Jul 2025 02:09:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149993
IP address blocks:        2001:df0:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
                          rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
        Validity
            Not Before: Jul  5 02:09:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68688969-b6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:f0:cc:53:0b:6a:8b:7f:51:dd:57:e1:32:
                    55:9f:b3:df:e2:5c:a3:21:82:60:e8:b2:81:fe:b0:
                    8a:75:a4:88:87:b6:65:63:ac:71:9b:75:58:b2:52:
                    27:e5:09:1d:03:8f:2d:5b:26:f9:90:65:4b:30:26:
                    7d:37:65:fb:9c:5a:ae:55:0d:b4:9b:f8:3c:58:04:
                    f1:d0:8a:d6:2e:8c:6d:56:c9:e8:c4:a3:ce:f2:ea:
                    5e:8f:90:c1:69:54:35:3a:89:96:4d:14:2f:c1:4c:
                    d5:60:f4:8f:12:2e:fb:97:16:d0:19:11:10:dd:76:
                    8d:f9:56:fc:13:fc:c9:98:ea:3e:4b:7b:54:4b:ab:
                    5f:63:2a:44:57:e7:3c:de:12:42:f0:bf:43:ed:b5:
                    77:ce:42:59:7b:88:bf:60:a8:2a:be:8a:ee:67:67:
                    2d:6a:20:03:95:7b:fe:e6:e5:6d:9b:0e:e6:20:40:
                    62:48:4d:a4:39:e8:8f:3f:56:4c:62:e1:95:f7:59:
                    65:24:db:f9:1d:c5:3b:d8:a8:87:25:fb:31:5c:e4:
                    00:72:76:a2:22:2d:0a:2d:2a:71:b1:1f:fd:06:9b:
                    d3:bf:56:11:24:9f:c2:88:0a:4f:1f:85:10:45:cc:
                    c8:af:b8:47:ef:9a:cc:c8:b3:3b:9e:f9:5f:da:11:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2C:32:B1:EB:D4:D5:48:9A:A5:F1:30:DA:AE:21:EC:8C:99:65:C4
            X509v3 Authority Key Identifier:
                keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/E7D03568F89011ECB5F98148C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:ca:a0:11:1a:5f:8d:e7:3d:5e:dc:76:06:ba:7a:29:6c:
         6c:a6:74:89:f0:08:d8:f7:c8:73:77:55:60:9f:a8:ad:76:79:
         ab:2c:73:7f:e1:3a:24:d6:2a:c3:db:46:9a:12:40:fa:03:ff:
         d9:2b:ad:97:12:8d:a9:a8:44:64:25:df:f9:36:55:3b:b7:54:
         68:64:87:1a:f2:be:fa:7f:ab:bb:ab:56:58:6e:01:72:fa:2b:
         9e:7e:fe:4e:28:7f:80:88:70:75:2a:04:1a:b0:4f:9f:51:bf:
         53:3e:65:8e:43:fe:4d:27:e1:77:bf:8d:86:82:89:97:97:9e:
         8b:49:05:de:40:39:59:d4:88:0e:7e:fb:fe:22:a3:8e:f6:00:
         95:b2:f3:bc:32:11:2b:3d:2b:03:11:92:e0:8a:97:22:b6:3a:
         c6:eb:04:96:4f:c3:58:70:d8:e2:7a:82:d2:d5:12:f2:63:94:
         07:c8:ee:0b:91:10:92:84:48:1f:b8:ca:b2:bf:9e:35:84:1f:
         fb:ee:af:b8:ae:41:4a:59:e0:46:a0:1f:10:dc:2f:09:20:22:
         63:df:56:1f:ed:c0:a4:af:9b:10:9b:fb:74:be:46:a9:c0:65:
         6e:11:ef:b8:4c:84:da:0e:4f:af:c7:d4:95:74:db:2d:91:91:
         f1:ed:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:17 2025 by rpki-client