Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
File:                     1076FF5EC69011EF9334B50FC4F9AE02.roa (raw, json)
Hash identifier:          hZbOLkgo752UBjYId3HOkrJjNIgkKlERcS46kGGB1fw=
Subject key identifier:   76:DC:E3:8E:B4:5C:4B:76:10:B5:BC:C6:1D:29:0D:77:4F:30:D2:2F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DC2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:56:04 +0000
ROA not before:           Thu 28 Aug 2025 14:56:04 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152969
IP address blocks:        2001:df4:24c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19906 (0x4dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:04 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e04-081d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:e2:83:ae:ef:6e:66:0b:56:f6:f9:55:18:
                    56:05:88:91:6f:1d:ce:0b:a7:ec:69:16:e7:b3:6c:
                    e4:00:62:9b:33:62:25:c6:ae:28:ee:94:d2:50:7a:
                    28:d0:8c:40:59:ad:83:ca:75:9c:73:af:93:d3:85:
                    a3:61:55:56:9e:bb:bc:34:d8:91:7c:ef:77:76:68:
                    7f:3f:4b:34:74:bb:49:44:b6:d9:4f:58:9f:97:3a:
                    54:e1:bf:c1:ed:6e:a9:93:23:90:66:7e:fd:4e:07:
                    3b:86:59:a4:73:75:18:08:3a:96:b4:7c:8e:ea:ad:
                    9c:ca:aa:a8:02:1c:69:ea:de:a2:9e:be:03:8b:79:
                    58:a0:cf:d4:5a:85:2d:33:a4:82:85:bc:0c:8a:57:
                    c6:d0:06:9e:6f:a1:92:d6:0e:83:49:38:ce:2b:e3:
                    77:8c:c7:07:56:88:f2:4d:f4:b1:e3:2a:56:23:89:
                    8f:02:f2:16:99:df:fe:ee:46:bd:1d:98:6a:b0:fa:
                    92:8b:d7:e1:5d:57:1e:c6:bb:07:01:67:96:ed:c7:
                    c5:ec:a4:57:41:be:5c:20:6f:8e:80:98:aa:56:30:
                    f6:97:5d:2f:da:65:a6:1b:bd:6b:32:65:50:45:8a:
                    a2:94:68:d2:01:76:a6:e3:a3:29:51:82:c0:f0:c6:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:E3:8E:B4:5C:4B:76:10:B5:BC:C6:1D:29:0D:77:4F:30:D2:2F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:24c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:7b:7a:ac:23:8a:52:3b:dc:94:e1:c8:43:75:c8:cc:50:
         6b:e3:af:65:80:55:f8:84:4c:8c:d3:23:82:d9:1d:aa:77:94:
         b5:d3:a3:c5:6f:ee:40:41:ef:63:ef:7c:b1:8b:7d:a1:3f:c2:
         f7:42:ee:51:f4:47:af:cf:3b:3c:7f:bf:30:8f:e8:bc:a2:65:
         90:83:96:c1:3a:f1:60:5f:41:c1:3e:1d:e3:93:94:9a:64:f6:
         5d:c2:ad:cd:2c:86:d3:cd:08:d4:ff:9d:90:12:56:bb:b8:73:
         4c:21:0a:5f:e2:5b:57:a0:09:50:2d:94:f6:83:90:ae:8a:d2:
         e1:ec:da:8c:cd:ff:f3:e6:8c:38:2f:f3:81:33:6d:7e:59:b1:
         6e:01:2f:3e:7c:51:3c:d0:4c:a2:7d:49:c8:d0:fc:a8:46:bd:
         27:96:bc:7e:13:e8:52:66:5b:76:fb:81:79:e6:da:fd:69:ae:
         bc:97:84:cf:c6:84:58:e7:e0:0f:97:00:fe:8d:ab:c1:ce:cc:
         24:9d:dc:32:e8:d5:66:ee:60:d3:18:53:57:90:3d:1a:6a:e4:
         2c:07:5b:e4:97:b6:84:45:5e:fd:be:21:bb:1b:e3:c9:97:20:
         aa:bf:84:52:c6:24:40:ad:b9:e1:06:bf:ef:fa:5f:35:34:1e:
         64:61:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:07 2025 by rpki-client