Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
File:                     6DE12084243F11EDB6C9D62AC4F9AE02.roa (raw, json)
Hash identifier:          RawtTjP62j8EtKE5yXKwiOEYhBIxk/X8SeZOTC9d/EM=
Subject key identifier:   2D:35:58:DB:F7:FF:C6:21:31:41:2F:62:C3:C7:1B:4F:DA:E0:8C:97
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36BA
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:43 +0000
ROA not before:           Wed 08 Oct 2025 14:40:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        175.29.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14010 (0x36ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:43 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677eb-f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:c3:1c:d6:65:c8:99:7d:52:aa:ab:5b:8b:
                    46:03:29:de:53:ec:9b:56:bd:96:81:0b:66:39:0b:
                    90:61:7a:b9:06:82:82:8e:06:75:9f:f3:38:d8:03:
                    8c:59:01:95:fe:8f:d2:0b:2b:97:78:11:42:78:a8:
                    57:f3:88:1f:64:98:8e:14:e1:27:ca:5c:92:94:30:
                    cc:d0:84:bc:6d:53:72:01:4d:dd:4b:65:eb:a5:7a:
                    89:d4:cf:0f:58:ae:0b:5b:32:cc:b0:19:e4:cd:22:
                    11:19:91:c9:af:f0:5f:bf:62:bd:e9:8d:d4:5f:dd:
                    f6:02:a9:40:8c:36:dc:dd:f8:cc:d4:cf:97:8a:68:
                    ce:02:4a:30:78:2e:c5:44:b5:b1:3c:38:ed:f8:02:
                    c6:47:29:ba:12:43:6d:5a:a9:63:1a:bf:1c:64:57:
                    8b:02:46:77:e7:5d:4e:0b:99:37:f6:a4:d2:96:13:
                    65:6a:54:ce:8f:c0:17:97:8f:5d:fe:f5:37:bf:83:
                    5d:ee:0b:6c:bc:ad:46:2b:fc:2a:f9:ef:e3:48:47:
                    c8:c1:63:c6:ea:44:84:a7:75:fb:9f:94:a5:a7:f8:
                    c2:1f:7f:4e:de:1f:bd:b9:6f:4a:33:51:93:36:39:
                    25:2e:5c:98:9f:66:42:b4:b4:4d:76:2e:02:72:ea:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:58:DB:F7:FF:C6:21:31:41:2F:62:C3:C7:1B:4F:DA:E0:8C:97
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:af:58:37:13:fb:93:d6:63:38:00:e0:de:9b:31:bc:b0:
         2b:6c:ee:d4:71:8d:9c:4f:32:e9:9a:10:f9:4d:61:d0:9e:57:
         43:cb:57:a5:de:0a:32:2e:c5:7f:fb:b3:46:a5:30:da:f1:ff:
         37:7b:67:ed:9d:5c:1a:48:44:2d:5a:1e:0f:e4:15:ab:56:eb:
         e7:2c:da:64:db:1f:0b:f9:8a:0e:58:b4:0a:ae:ea:cb:5b:34:
         40:57:5d:aa:e2:52:13:74:0b:c5:57:f9:e9:8c:03:04:86:a5:
         61:71:d7:c0:43:b7:1f:9a:0d:df:24:73:8d:ef:cb:1e:92:d3:
         bc:7d:69:f0:19:93:00:05:a9:fd:9e:22:b8:40:b5:17:b9:42:
         c3:90:af:43:5a:26:00:95:42:db:14:82:d8:c1:0b:c7:fa:f8:
         1e:90:2f:5c:c8:6e:d9:6b:02:cb:86:cb:c9:90:b2:44:9d:4a:
         2a:64:da:79:23:6c:41:78:b9:8f:4b:2d:65:ad:f4:cf:40:aa:
         d4:c2:03:78:71:0b:bd:83:04:79:0a:92:2c:ab:11:69:90:66:
         c3:43:4e:b5:d5:27:68:4c:9d:79:08:c2:7d:85:a6:58:90:a9:
         ea:36:8e:c3:4d:c9:95:6c:a8:05:a5:d3:9b:22:2d:3c:ba:0d:
         d9:ba:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:24 2025 by rpki-client