Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
File:                     65037DC0F72B11EE94855861C4F9AE02.roa (raw, json)
Hash identifier:          K0wdfReRfbDzEfApgzLkMcvB6QS8n53WdiCIO+FGuns=
Subject key identifier:   82:E8:72:43:FB:16:F9:FE:EF:2E:64:2B:CD:3F:C8:F3:C4:16:3C:3D
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36CB
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:56 +0000
ROA not before:           Wed 08 Oct 2025 14:40:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7018
IP address blocks:        175.29.4.0/22 maxlen: 24
                          175.29.128.0/21 maxlen: 24
                          203.76.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14027 (0x36cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677f8-f0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:33:c5:29:2d:52:5a:91:d5:64:00:55:f7:
                    a6:13:03:4e:af:d1:54:00:09:53:a7:52:c4:6a:9f:
                    dc:75:59:36:b3:80:d1:94:a3:66:56:87:3c:bc:d3:
                    3d:a5:ae:b4:e0:48:51:eb:97:69:43:eb:9c:aa:09:
                    7b:3d:f3:87:82:b5:3e:f6:88:4e:2d:bd:40:76:2b:
                    f6:7e:30:52:60:7e:88:06:55:14:d1:c6:e1:50:24:
                    a0:f3:ee:22:58:60:44:d9:d7:6b:7e:c9:04:73:8d:
                    fa:ac:c6:4c:85:59:49:4f:be:f3:b6:3f:30:76:00:
                    22:56:6c:fa:4d:b2:02:72:0d:60:44:5e:ca:f7:3e:
                    b4:90:6d:56:da:0e:97:e9:c3:7a:5c:6f:02:56:33:
                    b6:8f:83:ae:e9:c4:b1:7e:8f:a2:8d:ad:c5:e9:f7:
                    c1:45:1b:2d:c4:4c:02:72:36:f7:89:99:00:ee:fe:
                    85:25:96:8c:29:6c:ae:79:fb:79:ef:8c:bc:57:30:
                    28:2e:a6:8e:1a:11:f0:07:1b:32:3a:a3:da:35:6a:
                    04:66:1c:b2:89:3c:b1:6c:0a:75:2e:a6:40:b2:c9:
                    97:61:41:16:2c:a1:0f:53:45:7f:78:3a:45:f6:6d:
                    38:62:fa:f9:3b:79:de:b9:dd:0e:80:7d:0b:f9:0c:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:72:43:FB:16:F9:FE:EF:2E:64:2B:CD:3F:C8:F3:C4:16:3C:3D
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.4.0/22
                  175.29.128.0/21
                  203.76.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:57:a2:2f:32:0f:d0:f9:66:ff:62:11:ce:1f:6e:08:02:
         ec:13:39:27:b2:23:4a:f3:a9:68:7c:c5:37:20:d0:40:3d:54:
         36:7b:a6:e5:15:4e:df:b4:3e:b9:4f:19:27:17:43:32:83:9c:
         a2:52:82:b3:1e:bf:b0:fd:7b:ba:bb:1a:c4:d7:24:e7:9d:31:
         13:81:39:42:40:d5:3d:ab:7a:b2:15:e1:af:81:8a:38:8c:8b:
         b9:a8:26:eb:dc:cc:90:29:ee:d9:80:19:fd:96:d5:ec:0c:52:
         0d:60:99:20:3d:47:20:d2:5c:0b:e2:5c:09:05:e6:9a:ac:24:
         a1:7f:8b:7b:03:d8:0b:be:26:39:8d:05:b0:42:09:08:d9:54:
         c6:08:c2:03:f3:52:40:29:3e:d2:15:34:39:05:26:56:47:ce:
         92:5a:1d:9d:a8:27:27:9b:44:3f:fc:d3:52:9f:2e:fa:ce:04:
         b8:5b:bc:5b:52:98:25:f1:aa:f5:89:29:6c:aa:45:09:f1:a6:
         82:82:d2:c6:65:2c:d0:63:83:cd:cd:0b:2e:8c:bb:0b:27:6c:
         0c:5e:a8:d4:b4:36:b6:d3:f8:d4:d0:39:3a:3e:19:ec:38:15:
         3d:f1:1e:1f:62:76:10:88:a5:22:c0:c3:d3:23:66:5b:a4:35:
         72:7c:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:55 2025 by rpki-client