Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DBBD442E3A2C11F09C99C60FC4F9AE02.roa
File:                     DBBD442E3A2C11F09C99C60FC4F9AE02.roa (raw, json)
Hash identifier:          NgZL1NlteqTh7r70TDDZEGImeUoyjn3bVRTfVzmm/WE=
Subject key identifier:   79:F3:27:86:C2:2D:28:A9:AF:FA:EB:B1:B3:72:3A:5E:77:AB:FE:29
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36B3
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DBBD442E3A2C11F09C99C60FC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:38 +0000
ROA not before:           Wed 08 Oct 2025 14:40:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136897
IP address blocks:        175.29.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14003 (0x36b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677e5-ed65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:45:5b:ea:d7:31:4b:88:b0:91:7f:85:e0:
                    99:48:d2:8f:7a:3e:e9:63:fe:40:2f:61:42:13:3d:
                    67:36:54:6d:0f:cf:d7:a1:98:90:ce:c5:d9:d7:bd:
                    8b:56:39:4d:24:5c:52:00:7f:80:69:7b:f2:2b:9a:
                    66:4c:bf:95:11:d2:03:42:52:97:17:fb:f2:13:22:
                    d9:04:be:0d:fd:55:29:ae:bf:cc:29:9b:68:02:7b:
                    7d:f1:6d:c9:d4:f3:b6:4a:79:17:44:66:a8:2a:bf:
                    55:79:81:23:14:3f:9c:e6:bd:63:b6:12:09:fa:5d:
                    e3:83:a2:33:64:fa:a9:0c:55:65:e5:23:89:ea:f1:
                    10:2d:c1:83:5d:b4:65:e8:78:db:9f:09:6b:26:4c:
                    56:8c:f8:20:db:87:d3:2c:83:43:c8:7f:2a:cb:a0:
                    b5:7e:6c:c5:c4:a9:22:b6:bc:d1:b0:b6:03:5c:0f:
                    82:df:bb:b7:d3:af:e9:82:ef:e4:9f:8e:a6:67:39:
                    63:fd:31:99:25:6a:f7:9c:fe:c7:f9:d8:ba:fd:cb:
                    cf:f8:c9:54:24:83:53:b1:df:e9:42:a7:93:d3:38:
                    4e:3e:85:bb:76:8a:7a:01:f5:8b:94:76:4a:42:e2:
                    41:fa:25:13:f4:3f:0b:bb:30:d4:51:87:f9:28:9c:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:27:86:C2:2D:28:A9:AF:FA:EB:B1:B3:72:3A:5E:77:AB:FE:29
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DBBD442E3A2C11F09C99C60FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:c1:fc:ab:1c:e0:b3:b4:5a:ba:82:3e:86:5f:19:58:a6:
         f2:68:35:84:24:ab:3d:96:82:46:a2:9b:0c:4d:a2:92:0f:e0:
         63:0d:eb:6f:86:81:fa:1e:39:24:dc:95:39:11:b0:b3:9e:b1:
         81:b0:17:80:e6:4f:13:24:ca:18:42:bf:d5:74:b4:9e:70:7b:
         52:3e:0e:b6:19:7e:c5:42:36:b5:f3:f3:0e:19:6c:0e:1c:d1:
         d1:c6:75:39:14:78:c1:3e:53:0b:64:0b:65:4f:94:b9:86:ea:
         08:81:43:98:89:64:2a:e7:78:ca:89:30:d4:b3:c7:8c:1a:24:
         48:e2:24:92:83:43:9a:20:d4:15:8a:db:0f:4d:04:1f:8e:cf:
         6e:9a:a2:85:40:11:ea:ab:bc:19:a6:70:58:cc:fb:ab:a6:a8:
         34:f2:c6:0f:78:a8:6b:a7:54:6f:0c:e4:03:9a:65:43:e0:77:
         b9:b4:b0:c7:51:e3:fa:d8:cb:c2:50:44:80:8f:bd:6a:a1:d0:
         c3:00:94:51:67:92:72:53:14:5b:f5:2c:07:62:c4:35:0c:9a:
         ee:7e:e2:5a:0c:c6:56:fc:aa:e3:e2:5b:63:c1:e7:22:43:ea:
         db:f3:7a:73:92:5b:2a:d1:ae:dd:32:b0:db:f1:11:c5:13:b5:
         d0:a9:c9:e3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUxMDA4MTQ0MDM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU2NzdlNS1lZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnNFW+rXMUuIsJF/heCZSNKPej7pY/5AL2FCEz1nNlRtD8/XoZiQzsXZ172L
VjlNJFxSAH+AaXvyK5pmTL+VEdIDQlKXF/vyEyLZBL4N/VUprr/MKZtoAnt98W3J
1PO2SnkXRGaoKr9VeYEjFD+c5r1jthIJ+l3jg6IzZPqpDFVl5SOJ6vEQLcGDXbRl
6HjbnwlrJkxWjPgg24fTLINDyH8qy6C1fmzFxKkitrzRsLYDXA+C37u306/pgu/k
n46mZzlj/TGZJWr3nP7H+di6/cvP+MlUJINTsd/pQqeT0zhOPoW7dop6AfWLlHZK
QuJB+iUT9D8LuzDUUYf5KJzDSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHnzJ4bC
LSipr/rrsbNyOl53q/4pMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvREJCRDQ0MkUz
QTJDMTFGMDlDOTlDNjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKvHXgwDQYJKoZIhvcNAQELBQADggEBAFsnwfyrHOCztFq6
gj6GXxlYpvJoNYQkqz2WgkaimwxNopIP4GMN62+GgfoeOSTclTkRsLOesYGwF4Dm
TxMkyhhCv9V0tJ5we1I+DrYZfsVCNrXz8w4ZbA4c0dHGdTkUeME+UwtkC2VPlLmG
6giBQ5iJZCrneMqJMNSzx4waJEjiJJKDQ5og1BWK2w9NBB+Oz26aooVAEeqrvBmm
cFjM+6umqDTyxg94qGunVG8M5AOaZUPgd7m0sMdR4/rYy8JQRICPvWqh0MMAlFFn
knJTFFv1LAdixDUMmu5+4loMxlb8quPiW2PB5yJD6tvzenOSWyrRrt0ysNvxEcUT
tdCpyeM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:01 2025 by rpki-client