Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa
File:                     84B94D56F83011EE8B26391DC4F9AE02.roa (raw, json)
Hash identifier:          Ei+Gp0al7o4gn1QR4dzbPd0wTQ09klRScDeeyzmE2MQ=
Subject key identifier:   8F:20:17:30:D2:69:5D:B9:AC:06:4A:3B:73:30:F1:63:CB:00:D9:65
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36CC
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:57 +0000
ROA not before:           Wed 08 Oct 2025 14:40:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7029
IP address blocks:        175.29.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14028 (0x36cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:57 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677f8-8032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:28:b8:da:28:9e:28:53:56:60:da:69:6c:
                    a3:ff:5b:be:9e:8b:cb:ca:fe:38:cd:22:28:3b:97:
                    bf:fb:e6:48:05:e1:76:be:ce:33:da:bc:c2:7d:05:
                    77:28:1d:8e:2a:67:d6:dd:ad:75:00:61:6d:71:d7:
                    23:1c:3e:9f:ae:53:3d:fe:b3:d8:1b:74:f6:68:92:
                    79:30:cc:67:90:f4:5b:2a:46:f3:25:fd:e4:b8:44:
                    89:f9:92:44:9b:d6:38:be:36:8e:58:f4:47:25:72:
                    76:6c:66:d7:dd:d4:a3:e1:cc:4f:db:f3:ac:88:8e:
                    8e:9d:92:0d:b2:9f:32:d8:89:82:4a:a9:04:c8:b2:
                    6b:75:f6:61:8c:0a:96:94:f4:ba:11:09:3b:be:d0:
                    ca:9b:e4:56:20:86:fe:d9:50:90:28:4c:13:e4:d1:
                    ca:6e:14:cf:3b:21:f0:65:b4:fe:47:0e:2d:b1:96:
                    bb:45:a3:ea:40:cb:1e:d7:e4:5b:72:ee:e9:d4:d1:
                    99:4c:4a:5e:2c:4e:2c:35:f6:ca:5d:9d:2a:6a:23:
                    5d:86:9b:24:80:f1:a7:10:67:c3:4d:cb:d6:55:fd:
                    bc:55:3b:6d:f6:2f:9f:e2:cd:9f:2a:85:b8:17:16:
                    47:7f:00:ab:2c:fa:6c:a1:07:2a:6a:ba:cc:9b:22:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:20:17:30:D2:69:5D:B9:AC:06:4A:3B:73:30:F1:63:CB:00:D9:65
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:56:4a:06:6b:d5:0b:8e:3f:3c:17:f6:5d:57:6a:fd:2e:13:
         89:7c:53:e8:62:d5:cf:17:cf:52:6c:bd:c2:ec:72:b9:df:e2:
         89:81:a5:90:6f:0c:b6:56:57:95:ce:91:cc:cf:cd:ba:9f:80:
         f1:30:bc:1f:57:67:56:63:3d:5d:32:0d:ac:3e:e2:39:aa:25:
         0c:01:2d:ad:1b:df:ff:d4:25:ee:8e:4f:8e:c0:91:bd:70:db:
         6f:e6:0f:c1:6a:13:08:2f:73:a5:6f:f2:65:5d:1f:f0:31:69:
         4c:a8:36:cb:9a:41:6f:af:1d:ca:b2:07:cb:6b:8c:df:26:cf:
         8a:07:36:d1:12:db:86:6a:c3:36:81:e5:a4:f4:aa:b3:65:82:
         a0:ed:15:a6:81:0c:eb:13:19:44:47:b7:4d:b5:5b:00:b1:68:
         36:76:1b:2b:d8:74:22:06:dc:3c:76:a6:c5:1a:80:5a:9d:ce:
         3e:34:27:0f:50:0b:ca:16:64:49:0b:59:5b:b1:16:86:78:a2:
         cb:80:a8:88:25:41:6d:11:15:2a:70:61:51:fa:c3:80:81:92:
         98:5d:3d:b1:37:60:14:55:d9:b5:c6:62:d9:b3:f0:94:8e:cb:
         d2:2d:97:ee:1e:2e:00:70:b6:03:dd:5a:88:71:51:b2:d8:fb:
         64:b5:d9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:50 2025 by rpki-client