Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C51B0D3644EB11F088B1CD7BC4F9AE02.roa
File:                     C51B0D3644EB11F088B1CD7BC4F9AE02.roa (raw, json)
Hash identifier:          y1mHx4gayqinszDSz2WfuNp2RZs8EzfjUkjxM3YAAZM=
Subject key identifier:   0E:CD:CA:0B:4D:0E:5C:B5:F8:0C:21:50:C7:4F:94:06:88:E3:36:13
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4B7A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C51B0D3644EB11F088B1CD7BC4F9AE02.roa
Signing time:             Mon 09 Jun 2025 04:39:46 +0000
ROA not before:           Mon 09 Jun 2025 04:39:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152934
IP address blocks:        2001:df3:f040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19322 (0x4b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jun  9 04:39:46 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68466592-8e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:40:dc:d7:9a:5c:bd:f7:59:00:34:82:3f:
                    08:bd:87:ad:46:b9:a1:6c:03:3d:c2:11:5a:f2:88:
                    6e:90:39:fc:af:70:e6:68:df:e8:fa:40:88:96:43:
                    61:29:04:2e:bd:46:64:ca:cd:80:50:0e:67:9b:d8:
                    8e:e4:15:ee:2d:e8:95:10:27:6b:71:c8:c0:0c:f2:
                    94:a6:b7:51:2b:61:00:f4:19:84:0c:25:48:b2:93:
                    be:f6:0f:73:a7:c3:e5:f5:94:71:05:b4:0d:4b:b3:
                    15:d7:74:ad:a7:58:59:d4:93:db:6d:9a:2e:51:fd:
                    52:0a:22:2a:e8:fb:48:de:33:1d:d5:18:de:05:0e:
                    cf:94:8f:46:b5:11:6f:98:58:3b:20:86:c9:e8:e4:
                    e8:d3:ec:49:32:a5:82:ba:3c:7a:18:2d:ec:80:a5:
                    7e:42:f1:df:04:ce:58:64:dc:1f:e4:a3:d2:0f:34:
                    69:cc:69:8b:ee:01:94:61:f9:7b:3f:2c:ba:98:54:
                    6d:65:f7:ca:56:60:81:18:f1:ac:bb:e4:04:8f:2d:
                    83:14:52:c1:70:5e:93:67:1c:d1:c7:89:ad:3c:8d:
                    0b:28:10:4f:a1:cc:f6:26:70:f2:22:ca:58:44:6e:
                    7c:e9:cf:d9:79:90:32:6e:9d:0c:b4:63:56:f3:be:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:CA:0B:4D:0E:5C:B5:F8:0C:21:50:C7:4F:94:06:88:E3:36:13
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C51B0D3644EB11F088B1CD7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f040::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:86:27:ae:45:02:b9:e8:fe:17:19:ed:de:0a:bc:11:54:2a:
         2f:89:b1:ef:0e:be:21:83:49:48:df:5c:a5:be:dd:d6:54:7d:
         fb:b3:44:dc:15:84:94:da:7d:97:12:2f:b5:5e:b6:05:6a:b5:
         50:c8:cc:f2:b2:a2:e9:5a:98:d7:a9:28:cd:f8:30:9c:a8:d5:
         44:ee:8b:98:e3:93:b7:e0:9c:4e:91:cf:a9:73:d0:f4:15:f4:
         61:18:a3:46:26:f3:b8:81:51:aa:e6:f5:1c:cb:e8:0e:4d:ab:
         d8:ee:d6:15:db:b6:75:c2:a1:3c:58:21:e8:59:1d:a3:5c:00:
         4d:a8:13:6f:3a:40:03:97:a0:5d:99:bf:b5:a3:30:09:b9:1e:
         97:f2:f5:98:75:5f:9c:53:76:32:46:1a:69:65:22:c3:16:1a:
         53:12:79:a6:0d:78:fc:38:ac:9f:b6:fd:d6:b2:01:dd:4d:e0:
         45:3e:96:cc:8f:91:82:b9:16:22:d3:6d:51:0e:ae:1c:fe:98:
         97:68:20:ca:8a:d8:20:f4:4a:e2:6e:02:6d:e6:8f:aa:74:ab:
         34:00:c1:fd:ea:9b:41:01:ae:2c:8e:fd:92:68:72:a2:ae:ba:
         f4:3a:b3:a6:64:d3:bc:60:42:30:b7:18:8b:dd:c9:08:89:ce:
         d9:c8:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:32:49 2025 by rpki-client