Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/81087EBA66EE11F0B7640387C4F9AE02.roa
File:                     81087EBA66EE11F0B7640387C4F9AE02.roa (raw, json)
Hash identifier:          QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=
Subject key identifier:   B8:38:3D:1C:55:07:69:8B:73:A2:8B:29:18:77:65:F7:55:BB:B5:7A
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       0261
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/81087EBA66EE11F0B7640387C4F9AE02.roa
Signing time:             Tue 22 Jul 2025 11:25:00 +0000
ROA not before:           Tue 22 Jul 2025 11:25:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134428
IP address blocks:        115.42.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Jul 22 11:25:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=687f750c-4115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:39:a5:a4:5f:3e:d0:a8:9a:37:9f:83:a8:
                    c6:e3:52:85:85:72:3e:d5:30:e2:14:99:32:96:b3:
                    b4:e5:1e:f3:3a:dc:ed:ea:94:8c:a4:d1:38:5c:80:
                    b8:50:e5:f8:3b:77:5e:3f:91:97:3c:e6:65:9a:af:
                    79:12:e3:19:39:7d:7a:b6:a8:d6:ec:10:82:7c:94:
                    c0:96:de:37:58:10:c7:bb:3e:f9:5c:d0:8c:6f:5f:
                    a8:05:43:a1:a8:a0:47:9c:c1:79:31:5f:d8:df:8b:
                    f9:37:fb:a0:4a:f5:68:ca:bf:e7:32:a6:c0:ec:4b:
                    27:d9:d9:cc:9b:bc:2b:69:a5:1e:f3:95:f9:fb:09:
                    9b:13:86:08:7c:e2:ae:c4:91:42:a6:70:57:43:50:
                    ea:9c:20:95:2d:e7:8a:ab:5c:9b:c0:f8:82:7a:80:
                    49:0a:de:92:d8:b2:e7:db:1e:4f:70:23:ce:67:4f:
                    32:9f:bf:55:d9:17:00:45:5d:a8:13:95:31:3c:5a:
                    42:34:4d:e3:25:bd:58:46:95:ce:71:a1:0d:a8:f5:
                    70:63:d1:bd:bb:93:88:5e:c1:17:2a:31:3f:ff:68:
                    c5:d4:cd:a0:ce:c3:32:d7:ea:a8:7b:1f:53:8f:f6:
                    d1:df:49:b8:f4:c6:d0:f9:89:79:05:c5:87:32:c7:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:3D:1C:55:07:69:8B:73:A2:8B:29:18:77:65:F7:55:BB:B5:7A
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/81087EBA66EE11F0B7640387C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:68:da:d6:69:78:7c:25:79:48:3d:62:d6:15:e7:64:27:
         51:0d:54:20:f5:e7:46:17:8b:34:8a:15:dc:b2:5c:cb:92:0d:
         0e:b6:e6:5d:2a:b0:03:0c:8f:5a:d1:83:89:c3:f0:6d:f7:b4:
         7c:39:20:5c:2d:49:6b:b4:df:b3:5f:0e:99:7f:a0:40:e4:61:
         fb:f2:2b:bf:b4:7b:b7:67:29:5f:48:e4:a1:c9:ba:4c:dd:fc:
         e5:1c:71:ba:8c:49:67:70:92:4b:2d:39:05:14:30:b7:91:90:
         72:23:76:dd:d9:62:71:0e:fc:39:0d:ac:87:38:53:cd:c1:77:
         fb:22:fc:fd:c9:df:8d:39:51:8f:c3:24:51:5b:b3:96:85:96:
         eb:c9:f2:2a:5c:13:9f:05:6f:b7:32:d3:9f:aa:47:7d:38:b4:
         84:70:27:5c:45:1a:c6:a2:9a:85:2b:24:e0:5b:7d:2a:32:f0:
         37:22:c0:9e:32:34:6c:ef:74:e9:44:a4:3e:30:a5:a0:de:5e:
         4d:02:d1:8a:ec:51:42:33:fb:cf:53:e0:08:cd:4a:e0:dd:f5:
         7f:e5:46:fc:25:b6:b5:3e:9a:4c:f4:83:62:9d:e2:8b:49:9c:
         50:bf:94:14:28:d0:b4:d3:e3:44:ce:a9:8c:b8:ff:89:18:a1:
         ef:ad:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:33 2025 by rpki-client