Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
File:                     2286A2E29C7611EF9FB2F666C4F9AE02.roa (raw, json)
Hash identifier:          P+MDqwlpQ+T4fGuih7G/kbcjFN6OohbJ1qxRjj8GaJU=
Subject key identifier:   08:69:91:EE:82:8F:74:C4:12:D4:E2:0C:DA:8B:AF:79:CE:3F:DB:FF
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36B1
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:35 +0000
ROA not before:           Wed 08 Oct 2025 14:40:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134465
IP address blocks:        175.29.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14001 (0x36b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677e3-f1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:0f:7d:c4:31:9c:c3:0d:b5:bd:35:f1:14:
                    13:1d:75:11:0d:89:61:03:22:16:dd:90:5a:9f:0c:
                    f3:74:97:a4:98:ea:0d:72:d3:d2:8c:61:49:e3:ef:
                    39:d8:cb:2e:71:85:5a:69:67:45:47:0c:b3:94:80:
                    df:c5:b2:9c:5f:c6:f7:e3:c1:36:cb:58:79:cd:a3:
                    8a:f9:64:0d:3e:7e:0d:9b:4d:47:d9:cb:3b:45:5f:
                    83:3e:cb:52:6d:18:6c:9e:30:5f:e1:31:83:5a:5b:
                    82:52:9b:71:0f:65:d9:ef:80:db:6a:c7:d6:a6:e2:
                    79:0a:ab:e6:46:58:62:a7:ea:2c:c6:cc:65:b2:65:
                    ea:df:3c:0c:7f:4a:e8:2e:b6:80:8a:af:af:f6:68:
                    da:50:cc:e4:b8:14:f8:c4:e4:40:05:17:b6:b8:3d:
                    c0:57:2a:18:b7:77:c6:84:26:76:e3:b8:74:7e:28:
                    a3:0c:2c:92:dd:9c:21:4d:3b:f3:28:cb:b0:d6:d4:
                    19:8f:38:93:8a:c4:49:83:b3:92:cc:ae:03:06:a8:
                    c5:54:46:20:de:95:f3:d4:89:09:81:49:92:74:3c:
                    8b:b1:82:bb:56:12:34:0d:1f:b2:6b:4a:f3:26:3b:
                    68:bd:77:b0:f5:5c:fb:4b:b0:68:09:1f:43:b5:5a:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:69:91:EE:82:8F:74:C4:12:D4:E2:0C:DA:8B:AF:79:CE:3F:DB:FF
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:5a:ab:62:2c:1f:4f:b2:1e:27:7a:50:2c:b2:71:de:38:47:
         84:52:97:c8:e2:fa:93:62:ce:bc:75:78:fe:74:4a:65:a5:2b:
         5b:8b:36:7b:b4:f5:50:b7:81:50:ba:8b:9a:70:08:ff:8a:0a:
         30:a4:cd:8f:19:6f:2a:55:ed:9f:66:af:c3:76:2e:71:98:fd:
         91:9f:87:4f:93:30:a9:4c:ff:83:09:05:f4:28:83:8d:07:be:
         13:51:d5:97:36:88:1d:c1:59:34:41:cf:5d:7c:23:46:f6:02:
         92:19:7e:fa:1f:9f:e0:59:f4:38:f2:71:b9:2a:2b:d6:d7:f1:
         bd:70:37:ac:fc:4b:ee:b6:e7:6a:61:b4:67:03:ec:d2:b6:83:
         d0:17:7e:26:fe:7a:21:e2:6f:ae:e0:45:3c:70:d6:44:2c:a6:
         dd:76:fd:04:80:12:fb:99:10:c4:98:31:bb:00:4b:1e:08:e3:
         b0:bf:e7:cb:c9:03:38:bf:49:7f:89:11:e1:98:db:fb:d2:ab:
         0e:88:89:5f:13:59:d7:33:a2:be:50:89:23:ed:9c:c4:fe:15:
         5d:74:bd:95:74:de:0b:33:e0:0a:b2:4f:85:e9:e4:a4:87:b7:
         65:fa:2d:79:e8:e7:c0:66:83:d8:36:31:43:79:4e:4a:47:f1:
         83:f8:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:10 2025 by rpki-client