Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa
File:                     F5CB8F0A459D11EDB62F422FC4F9AE02.roa (raw, json)
Hash identifier:          i3BSuxqfLZmON9s2+6E15QN7kS8ESBxl0vFWezyOW6U=
Subject key identifier:   E7:80:34:94:14:5C:A6:B5:9C:AC:1F:86:B7:E9:43:19:45:19:54:E3
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36B5
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:39 +0000
ROA not before:           Wed 08 Oct 2025 14:40:39 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139065
IP address blocks:        175.29.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14005 (0x36b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:39 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677e7-7442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:4c:44:dc:59:6c:cb:82:03:51:29:24:6e:
                    d4:bc:30:53:70:d0:19:a5:22:47:08:be:38:da:32:
                    bc:4a:82:75:5d:1c:2f:88:2f:20:ed:71:9f:48:00:
                    ce:d8:ad:d4:05:ac:b2:16:e4:2c:66:82:1d:e7:48:
                    b0:d3:29:3f:2c:75:bb:b3:6a:14:45:b8:8f:a9:62:
                    78:9c:ba:c8:d5:6d:71:5b:02:f3:61:0c:3a:cb:95:
                    dd:d2:73:64:6f:fa:52:6b:fa:42:87:07:8f:11:b0:
                    3c:dc:e8:8f:82:80:01:82:b0:e6:bc:b9:32:a0:5e:
                    ee:fd:a7:ac:71:ab:80:b0:b0:4a:02:ab:b5:08:b1:
                    11:91:cb:14:89:9a:c7:bf:70:ba:70:e7:79:01:f7:
                    87:25:a1:65:58:13:a9:90:5e:b8:94:65:95:9b:f3:
                    74:55:8e:ea:5c:41:c6:e1:37:c6:fb:fc:81:dc:b2:
                    15:ba:10:b0:f1:52:a1:b7:d4:c4:18:5b:2c:b6:01:
                    27:3a:73:ac:bd:49:f4:e4:5e:90:ad:72:ae:8d:15:
                    de:c3:ba:36:10:c7:3a:e4:9e:15:b8:eb:58:ca:55:
                    e2:54:c9:9e:c4:85:dc:37:1e:c3:52:b3:ef:c3:40:
                    ae:ca:c5:2f:27:f0:67:af:d1:4f:0f:fe:ca:31:e1:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:80:34:94:14:5C:A6:B5:9C:AC:1F:86:B7:E9:43:19:45:19:54:E3
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:8b:a5:93:e6:32:a3:8e:95:e7:4e:39:a7:28:54:58:e5:
         13:09:01:20:01:4e:ca:79:7d:41:7d:21:ef:c9:d7:77:fc:20:
         82:f5:d0:a7:9a:95:b1:43:41:3f:b6:e2:bd:30:ec:04:bf:cb:
         13:ca:47:94:a6:d6:5f:9e:92:0e:5c:62:55:1e:70:fe:71:42:
         8d:17:2c:68:d7:ce:f7:6d:ab:fd:c0:71:f6:99:0d:82:fd:98:
         21:57:24:e5:e8:ad:26:8e:da:49:49:3f:26:72:84:06:77:cc:
         db:a5:eb:22:74:fa:5c:91:b4:46:7f:2d:a1:57:42:90:4c:cf:
         5a:51:06:b9:4f:37:96:1d:74:8f:80:98:88:05:60:55:0b:a2:
         ec:94:6e:73:90:fb:45:4c:5c:f2:b0:da:09:10:19:01:e7:3b:
         c4:81:41:c8:9a:27:8d:5a:b4:e7:a3:7d:1e:d4:de:66:f9:80:
         cf:29:9f:97:a7:07:20:a0:14:fc:4b:46:69:84:3c:65:62:da:
         d7:04:46:76:43:40:39:31:b5:50:53:80:2c:57:83:3d:c9:a5:
         83:0e:4b:bb:05:56:b0:d6:51:cc:9d:7e:1e:d4:3c:b4:ae:a0:
         c8:75:c0:6f:98:7a:5f:ea:a1:0c:c0:0c:86:af:40:c4:aa:e4:
         ca:8c:a6:58
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUxMDA4MTQ0MDM5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU2NzdlNy03NDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoXtMRNxZbMuCA1EpJG7UvDBTcNAZpSJHCL442jK8SoJ1XRwviC8g7XGfSADO
2K3UBayyFuQsZoId50iw0yk/LHW7s2oURbiPqWJ4nLrI1W1xWwLzYQw6y5Xd0nNk
b/pSa/pChwePEbA83OiPgoABgrDmvLkyoF7u/aescauAsLBKAqu1CLERkcsUiZrH
v3C6cOd5AfeHJaFlWBOpkF64lGWVm/N0VY7qXEHG4TfG+/yB3LIVuhCw8VKht9TE
GFsstgEnOnOsvUn05F6QrXKujRXew7o2EMc65J4VuOtYylXiVMmexIXcNx7DUrPv
w0CuysUvJ/Bnr9FPD/7KMeHTlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOeANJQU
XKa1nKwfhrfpQxlFGVTjMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvRjVDQjhGMEE0
NTlEMTFFREI2MkY0MjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKvHWgwDQYJKoZIhvcNAQELBQADggEBAGuci6WT5jKjjpXn
TjmnKFRY5RMJASABTsp5fUF9Ie/J13f8IIL10KealbFDQT+24r0w7AS/yxPKR5Sm
1l+ekg5cYlUecP5xQo0XLGjXzvdtq/3AcfaZDYL9mCFXJOXorSaO2klJPyZyhAZ3
zNul6yJ0+lyRtEZ/LaFXQpBMz1pRBrlPN5YddI+AmIgFYFULouyUbnOQ+0VMXPKw
2gkQGQHnO8SBQciaJ41atOejfR7U3mb5gM8pn5enByCgFPxLRmmEPGVi2tcERnZD
QDkxtVBTgCxXgz3JpYMOS7sFVrDWUcydfh7UPLSuoMh1wG+Yel/qoQzADIavQMSq
5MqMplg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:16 2025 by rpki-client