Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CAC7F396915A11F0869D352DC4F9AE02.roa
File:                     CAC7F396915A11F0869D352DC4F9AE02.roa (raw, json)
Hash identifier:          oOp/O1zf1SGgmJ/6m/eHEjZZW1RN6YyMNxxmp4RF/TY=
Subject key identifier:   43:AE:B8:BB:98:5B:FD:68:F9:02:FE:DB:90:1A:7F:F9:17:5E:51:3A
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36C0
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CAC7F396915A11F0869D352DC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:47 +0000
ROA not before:           Wed 08 Oct 2025 14:40:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        175.29.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14016 (0x36c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:47 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677ef-c399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:e0:62:4e:f1:88:fc:b5:0c:fe:79:d2:cf:
                    42:e1:31:52:bb:8a:e1:40:ab:c7:ac:d1:b3:5f:88:
                    da:74:88:d4:60:ee:0d:05:3f:c0:2a:fc:bc:67:ed:
                    04:05:1d:5c:e3:b4:4c:d0:87:d3:af:0e:85:14:15:
                    ff:de:63:c8:14:35:e6:2f:00:4c:a0:f4:63:a2:90:
                    0a:40:8f:e6:ac:72:38:54:da:69:9e:e0:02:7f:20:
                    dd:99:e4:f5:83:b6:46:e4:b5:0f:c5:e6:7b:c4:58:
                    13:52:2d:de:58:11:0d:67:01:2a:62:c9:56:07:93:
                    ec:7b:c2:5a:12:18:c5:ad:d0:7e:d1:16:46:a4:71:
                    20:4f:93:38:4e:96:b0:7d:9a:82:bd:db:a3:1f:39:
                    72:8f:76:e1:66:c7:0f:c1:0b:0e:fd:99:49:42:9f:
                    8a:d8:fe:e8:81:67:5f:ba:65:18:9d:56:50:ca:14:
                    c2:cd:7c:5d:d5:b8:31:3f:54:e2:03:b7:93:e6:dd:
                    38:a2:0d:2b:33:4a:f8:62:47:41:13:84:02:07:8f:
                    74:2d:f1:3a:f7:7b:49:d6:f4:2f:20:a2:e2:60:47:
                    7c:6a:05:f5:8e:5b:f8:66:9f:9c:0a:0f:c8:ae:3f:
                    9a:db:18:1f:8b:82:74:77:06:67:7e:c4:79:0c:0e:
                    e8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:B8:BB:98:5B:FD:68:F9:02:FE:DB:90:1A:7F:F9:17:5E:51:3A
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CAC7F396915A11F0869D352DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:d7:19:58:f7:07:7a:28:c2:45:fa:f1:95:5d:b9:c0:ca:
         7a:fb:52:56:5a:0b:3b:7c:e6:4e:85:4e:0d:ef:f0:98:1e:fb:
         21:30:cb:80:4a:f9:03:23:79:1d:be:5b:47:bc:43:cc:e1:7b:
         0e:6c:b4:5c:50:e9:4b:e4:dc:02:85:5c:c5:14:06:84:0a:8c:
         9e:85:d6:75:b0:13:55:7d:7f:cc:d7:67:f2:77:f9:89:b4:88:
         fb:5a:60:c0:b5:0a:cb:4a:11:37:d1:da:53:49:29:07:b3:84:
         92:0f:cf:7a:9a:38:28:82:a2:82:c6:63:14:74:96:d0:06:e5:
         a8:d4:ca:30:da:83:bb:ce:56:17:18:f8:58:03:da:8d:20:0a:
         c9:12:e1:e2:be:36:e7:b4:b2:48:a0:91:7a:11:23:90:31:7f:
         60:d3:7e:94:2d:d7:6b:f0:f1:0c:6c:7a:04:1c:6c:10:44:de:
         48:86:ab:d8:41:b5:e7:a2:fd:25:a9:2a:7a:42:f4:65:68:68:
         da:08:54:44:21:36:c8:09:00:fa:0d:ca:08:c9:38:68:65:f1:
         c2:8d:c7:2c:a5:0d:21:71:38:36:96:6c:3e:68:9e:e4:34:08:
         db:4d:8a:87:d3:be:ed:a1:e3:77:ad:56:f8:af:58:63:c9:3d:
         82:9d:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:58 2025 by rpki-client