Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6559F04828C511F09C2CD74EC4F9AE02.roa
File:                     6559F04828C511F09C2CD74EC4F9AE02.roa (raw, json)
Hash identifier:          Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=
Subject key identifier:   36:6C:5D:66:4C:83:B9:A4:2C:0F:9D:65:FE:7A:E1:C6:22:D2:7E:33
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       362F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6559F04828C511F09C2CD74EC4F9AE02.roa
Signing time:             Sun 04 May 2025 08:54:32 +0000
ROA not before:           Sun 04 May 2025 08:54:32 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     10753
IP address blocks:        175.29.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 14:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13871 (0x362f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: May  4 08:54:32 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68172b48-5bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:20:9a:03:ad:bc:b6:1f:f2:05:f0:90:50:
                    fb:9b:7e:1f:ca:d7:ba:58:ca:f3:9f:08:c4:89:79:
                    f4:86:e5:fe:4d:6e:10:dd:4a:cf:62:da:17:74:36:
                    e0:3d:42:f2:d5:f2:9a:1d:0b:02:81:05:0a:da:17:
                    bb:5b:ff:b8:21:58:a9:d1:34:93:79:a8:15:62:8e:
                    ca:5e:92:66:be:ea:81:59:a2:08:46:57:5e:05:4c:
                    4b:fc:7f:24:27:ba:8a:6d:bd:c1:87:af:16:75:80:
                    db:64:27:15:7f:82:cf:cd:df:16:58:4c:e0:cc:bb:
                    f0:e1:12:53:3c:e0:93:9c:24:75:68:a9:0c:54:c1:
                    97:9d:a6:a9:f5:30:73:c5:ea:89:2b:59:82:a6:3c:
                    39:c8:8a:15:60:db:c8:a7:be:ce:15:ff:5a:ed:e5:
                    c7:1e:a2:5c:f0:ea:94:70:3b:3d:b9:72:f3:89:dc:
                    7b:b1:2a:ec:fc:df:50:66:dc:e6:7d:f1:dc:27:db:
                    1c:01:cf:60:ef:1d:ef:fd:74:ed:3b:0c:8c:00:0f:
                    cc:c5:5a:97:62:05:91:2d:47:e7:54:bd:c1:0f:c1:
                    7d:4e:11:57:b4:5b:e8:db:8c:7f:5e:5a:f2:80:27:
                    d5:64:b0:62:a7:72:66:78:db:bb:00:db:66:15:c0:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6C:5D:66:4C:83:B9:A4:2C:0F:9D:65:FE:7A:E1:C6:22:D2:7E:33
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6559F04828C511F09C2CD74EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:d9:6c:77:6d:f5:7e:9c:43:ad:20:bd:48:1f:88:fc:ba:
         7a:a4:f4:4e:e0:5e:a1:c4:e1:eb:e4:0c:5b:4a:58:b9:7e:ac:
         8f:47:5f:d3:57:b2:9e:b9:32:b8:ea:c4:67:46:98:0e:40:22:
         7f:a4:1a:91:d2:8e:00:9d:4b:38:97:6d:d3:50:d8:66:4c:c6:
         94:8a:15:fa:8a:44:57:d0:35:77:40:0e:a4:0d:be:45:7d:af:
         44:5c:ef:85:87:20:5c:cb:27:50:f3:bf:0d:03:49:8b:7f:b4:
         b0:07:b1:50:6d:c1:20:de:37:18:24:91:c6:d2:f4:50:c9:33:
         02:5f:c4:9a:73:3e:9e:7d:ce:bc:25:28:84:06:4f:ac:7a:09:
         28:49:de:e2:92:a0:35:cf:ad:58:68:eb:5d:3d:97:10:56:08:
         66:ee:58:50:8f:52:d7:83:16:6a:40:e6:1f:2e:2c:da:6c:2d:
         15:e5:f1:c2:65:66:3e:d3:cd:b8:db:05:39:d2:fe:6c:23:59:
         10:bd:ab:b9:48:d6:41:72:cf:bc:48:bc:8a:15:0d:af:29:90:
         ba:10:c5:01:39:b3:e4:07:63:23:ae:8b:54:19:23:6e:27:1b:
         1a:25:c2:9a:7e:02:8f:9a:be:97:25:d4:10:97:ff:ce:37:d6:
         68:83:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:45:54 2025 by rpki-client