Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/DAAFB93452D811ECB51CE973C4F9AE02.roa
File:                     DAAFB93452D811ECB51CE973C4F9AE02.roa (raw, json)
Hash identifier:          sVJ4xmQIxIPOVr7S4dflP2gw9ZFe79XmXr2w6VNbh3M=
Subject key identifier:   1B:E9:30:37:F7:1C:5D:39:AB:7F:CE:AC:BA:9E:93:BB:AA:46:76:FB
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       07FB
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/DAAFB93452D811ECB51CE973C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 22:24:33 +0000
ROA not before:           Wed 08 Oct 2025 22:24:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38084
IP address blocks:        123.255.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  8 22:24:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e6e4a1-a95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:1f:01:aa:e0:5e:de:5c:cc:ef:5e:5d:48:
                    30:05:a7:9a:17:c2:00:af:b4:6e:33:e7:b8:42:8d:
                    48:b0:07:8e:d7:12:57:61:61:6f:66:ea:e6:ab:17:
                    42:41:a1:c9:47:36:79:cd:e3:b3:ab:1a:bd:40:06:
                    c8:61:b3:8c:80:2f:da:24:eb:a6:c7:3a:f8:c5:09:
                    e1:f9:2e:62:c6:5c:27:08:1b:3f:1a:04:99:ef:b3:
                    d5:af:bf:50:ae:e6:13:db:bf:df:22:a9:35:a8:9d:
                    01:12:5b:e5:a2:e0:db:36:45:24:ee:c0:e7:b6:c7:
                    cc:c7:99:15:32:72:9e:e3:f4:28:f5:2e:e9:5d:9c:
                    00:42:85:1d:74:1a:67:b7:d4:f5:8b:10:b4:56:41:
                    c3:05:e1:11:92:3d:38:16:58:90:6a:f8:70:d1:ac:
                    38:68:00:35:23:b9:95:c6:8b:a7:89:36:96:0a:f4:
                    5e:5c:6d:07:6f:58:05:46:f4:40:7f:81:54:5e:d6:
                    ab:7f:44:58:ff:6a:c8:4b:d7:5a:67:89:a6:e4:ef:
                    2b:47:61:33:a6:62:27:32:0d:42:67:1a:06:97:44:
                    07:ff:c7:61:61:6d:7a:24:6f:9f:79:aa:5b:5a:5c:
                    da:75:ee:48:41:7d:a4:fb:5f:18:ec:33:a0:74:4f:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:30:37:F7:1C:5D:39:AB:7F:CE:AC:BA:9E:93:BB:AA:46:76:FB
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/DAAFB93452D811ECB51CE973C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.255.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:6a:d9:38:39:20:57:c2:8a:ae:cb:bd:17:b1:db:07:f4:
         f4:32:45:8c:f7:86:d3:97:a5:cd:29:0e:ae:19:58:1f:1c:bc:
         ff:ff:42:9d:bf:7f:8a:6a:0e:bd:f9:0c:e7:dc:8b:e1:6f:8c:
         82:3f:ca:3a:08:0a:c9:d7:6c:21:e9:09:ea:36:c1:8c:07:51:
         94:50:58:b1:89:97:3c:26:0d:f5:00:53:36:27:7d:6c:e8:55:
         19:eb:3b:be:6f:6d:24:3e:8c:ff:cc:44:d0:95:a3:7f:ec:44:
         cf:9f:1e:b4:33:03:8e:6d:f8:a1:96:33:ca:64:89:8e:29:c8:
         68:71:50:fd:e9:88:0d:91:9c:1f:2e:e5:29:66:12:6b:af:d7:
         a6:cb:5a:e6:3d:f3:0a:a3:55:dc:88:be:c3:11:30:23:5e:e3:
         a8:02:d4:ad:ff:3e:b2:fe:6b:ec:62:56:1e:d5:6b:ed:f0:6e:
         62:97:7e:6a:29:90:86:55:c8:e6:cb:7d:4c:df:b1:92:80:9b:
         70:dd:8f:05:cb:9a:d0:ed:36:20:1d:04:2e:2a:17:ca:5a:44:
         8c:6a:d2:9b:94:b6:26:79:c9:9a:c5:57:ca:11:5a:6f:0e:d5:
         81:11:a2:5e:1e:3e:09:4e:d8:b9:27:fe:07:43:9e:dd:59:e4:
         cc:a8:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:17:01 2025 by rpki-client