Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/50D27D064F4011F0B9682923C4F9AE02.roa
File:                     50D27D064F4011F0B9682923C4F9AE02.roa (raw, json)
Hash identifier:          ATjF/OkaAli5uM5JKSTpuXuC82OhJa+1oWAkMp+cg9Y=
Subject key identifier:   C9:17:47:A0:7D:CA:21:29:65:12:AB:23:7A:57:60:1F:27:4E:3A:1F
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3654
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/50D27D064F4011F0B9682923C4F9AE02.roa
Signing time:             Sun 22 Jun 2025 08:10:10 +0000
ROA not before:           Sun 22 Jun 2025 08:10:10 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     834
IP address blocks:        175.29.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 14:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13908 (0x3654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Jun 22 08:10:10 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6857ba62-8657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:e7:12:c0:5b:f4:49:b2:6f:0c:2d:02:b1:
                    ae:6a:7c:1d:8c:d8:e2:bd:44:78:ab:5f:8b:ba:21:
                    dd:e4:84:3c:5a:eb:95:7b:e3:3f:bc:e6:0d:e2:71:
                    85:27:76:9a:25:a2:d3:45:70:06:77:9a:ef:e3:a0:
                    82:e9:70:df:ae:a3:31:d8:d1:bd:04:6b:69:90:b9:
                    9b:ba:c9:8c:b5:67:81:1c:5d:a7:d6:64:a0:8a:a3:
                    5c:7b:1c:9c:cd:48:93:01:a4:03:ae:17:04:da:ce:
                    88:1a:a8:71:57:35:bf:8a:90:e6:f8:60:60:82:d5:
                    71:0d:bb:ab:da:e9:aa:02:4f:25:86:9f:78:0d:a3:
                    07:58:ff:9a:9b:e7:81:9c:33:15:e0:04:ea:5e:15:
                    c6:1a:86:49:24:91:b1:28:d7:51:46:2b:2c:22:ab:
                    58:3b:4d:08:48:1f:7e:d9:fa:71:9b:b9:7a:77:c1:
                    63:5b:3e:1a:7f:49:ad:01:15:d5:68:9a:53:4d:23:
                    5a:20:b9:b0:c5:de:ed:0a:8d:22:4f:c8:ed:be:89:
                    7f:16:ab:e0:78:9e:71:56:6e:e0:cd:c5:4c:32:95:
                    aa:24:d9:5d:96:6a:da:36:4a:d3:a0:51:58:7b:97:
                    ce:25:33:df:2c:58:56:07:3a:83:5e:2d:5a:69:f2:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:17:47:A0:7D:CA:21:29:65:12:AB:23:7A:57:60:1F:27:4E:3A:1F
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/50D27D064F4011F0B9682923C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:46:1d:86:03:dd:03:11:96:d6:f3:93:2a:d8:9e:63:63:
         4e:0b:f5:ef:2b:9e:b7:e8:a1:ab:a9:e6:26:0b:31:82:e0:29:
         2e:b8:40:27:f6:29:67:d7:ca:b2:f9:b7:5f:b0:57:26:b7:0b:
         82:21:26:a1:55:af:a4:a3:8c:0c:66:20:3a:ce:98:3b:b1:e2:
         13:85:5c:c1:a4:20:bc:68:a2:f0:23:64:f9:8c:f5:3c:1d:f9:
         52:0c:aa:57:1b:69:de:f1:d4:50:95:ff:b1:db:a5:db:84:6c:
         3b:15:fe:92:fe:98:d6:df:45:d7:8f:8a:e2:e1:af:1f:7e:6c:
         d7:ac:20:85:78:4e:b3:48:0d:b4:04:19:a7:cb:1a:ec:62:ba:
         67:6c:14:c3:63:44:cc:89:ba:91:3c:de:da:27:38:c0:37:7a:
         d7:6b:34:3c:0c:a4:71:38:d0:68:46:03:cc:dd:70:3f:c2:4b:
         7a:ee:66:a9:f8:25:7b:c1:75:d9:bd:c5:bb:a0:36:97:1d:57:
         42:5d:77:14:55:d6:c0:a9:d9:80:47:65:72:fa:9c:55:d8:36:
         37:4d:f3:58:9d:3d:29:3d:5c:6f:0e:1e:47:8e:b7:34:bc:6d:
         2d:a4:d5:eb:e4:5e:2c:9a:93:60:18:5f:bb:97:47:63:78:83:
         2a:16:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:16:16 2025 by rpki-client