Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/A210E7309CAB11EBAB87D43AC4F9AE02.roa
File:                     A210E7309CAB11EBAB87D43AC4F9AE02.roa (raw, json)
Hash identifier:          Up4WhD3Nf9WRZOsGh/RIfu2ds6rWcEA9ea8zVjDFpwI=
Subject key identifier:   79:89:E6:10:1E:53:32:30:0F:29:70:F7:4A:A5:45:C4:83:5C:B7:5C
Certificate issuer:       /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Certificate serial:       0651
Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/A210E7309CAB11EBAB87D43AC4F9AE02.roa
Signing time:             Wed 20 Aug 2025 23:04:07 +0000
ROA not before:           Wed 20 Aug 2025 23:04:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45937
IP address blocks:        202.4.175.0/24 maxlen: 24
                          2001:df6:5d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6CD6, serialNumber=CC56157C72DCC69733636743DB500875932DA41F
        Validity
            Not Before: Aug 20 23:04:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a65467-3637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:fc:77:37:1e:06:03:01:1b:b7:c9:80:24:
                    a8:f7:d0:4c:63:9a:bb:b0:df:88:07:f8:2d:92:cb:
                    f6:41:8f:3b:e8:ce:af:09:e1:27:c0:8f:01:98:9c:
                    0b:73:88:a5:09:6a:11:17:11:ad:51:5c:ee:e6:14:
                    c6:e6:e7:3d:21:d6:e9:8c:08:c9:ba:c4:13:e3:6e:
                    29:88:43:e8:87:90:85:b4:a7:ee:44:30:29:ac:59:
                    f9:7b:c5:ce:fe:1f:3b:80:dc:57:1e:ab:0c:6f:c9:
                    a3:a1:04:15:59:e6:67:c8:57:41:95:7f:73:84:d6:
                    80:8f:df:eb:f7:d6:6a:6d:f7:a0:a4:89:6e:a7:a1:
                    38:0a:d4:08:2c:ab:1a:21:89:90:44:c0:ee:b8:7c:
                    48:24:82:2d:c8:68:68:1c:3f:7e:42:5a:90:c9:6c:
                    de:d0:40:a3:8f:4b:21:22:dc:71:ba:0d:7e:49:16:
                    95:e9:8e:42:13:c4:9f:57:40:f6:6d:b2:f1:13:c3:
                    7f:a8:a4:5b:4e:9c:88:bb:f5:17:51:3e:a1:d0:61:
                    ba:2e:3a:1d:f0:73:fe:ff:8b:62:5c:7e:f4:34:5e:
                    d2:42:6e:c6:6a:51:74:25:60:8b:c3:db:c6:2f:e0:
                    83:e1:1a:48:b5:12:6e:7c:14:7c:af:f6:1b:ad:26:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:E6:10:1E:53:32:30:0F:29:70:F7:4A:A5:45:C4:83:5C:B7:5C
            X509v3 Authority Key Identifier:
                keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/A210E7309CAB11EBAB87D43AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.4.175.0/24
                IPv6:
                  2001:df6:5d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:68:7c:71:9e:54:b9:db:df:09:86:e7:cd:4c:a6:79:5b:
         cc:88:4f:d6:22:22:ae:dd:c3:f3:59:b7:59:9c:83:b7:10:25:
         17:38:9a:b0:18:8f:70:98:74:2d:94:0b:76:2a:3b:c5:7e:3f:
         72:7b:b7:d3:a7:1f:d1:f2:30:d6:01:92:a6:23:e8:9a:a7:6a:
         fb:16:b9:5e:e8:80:7c:da:06:22:e9:b4:6f:98:0d:9f:32:6d:
         14:fc:3d:3d:64:6a:d0:6b:39:1f:b6:38:af:42:fc:a1:e0:b8:
         68:f4:4a:66:e4:22:ab:c0:82:c5:8e:ce:61:00:89:7e:3e:54:
         ae:f0:93:7b:a2:f1:52:4e:75:58:71:48:0f:3d:7d:03:57:c0:
         cd:ec:47:2d:43:83:01:6f:32:95:82:03:3a:63:89:91:05:bd:
         c3:17:96:af:eb:95:ba:f5:f5:d0:71:6a:cd:d7:fe:b5:36:6a:
         5d:db:73:36:b1:7d:6d:d8:db:25:0e:f1:d5:c0:2a:e4:57:5c:
         57:4b:60:10:ff:4f:d3:71:bc:f9:46:23:3d:8b:1c:03:78:93:
         6e:e1:b0:1f:1d:e5:c7:6e:37:69:94:68:b8:ce:00:3a:89:25:
         c7:b7:93:d2:3d:2d:f5:e7:3e:e9:35:a5:ae:83:6c:44:df:b9:
         63:97:47:ec
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZDRDYxMTAvBgNVBAUTKENDNTYxNTdDNzJEQ0M2OTczMzYzNjc0M0RCNTAwODc1
OTMyREE0MUYwHhcNMjUwODIwMjMwNDA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE2NTQ2Ny0zNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBv8dzceBgMBG7fJgCSo99BMY5q7sN+IB/gtksv2QY876M6vCeEnwI8BmJwL
c4ilCWoRFxGtUVzu5hTG5uc9IdbpjAjJusQT424piEPoh5CFtKfuRDAprFn5e8XO
/h87gNxXHqsMb8mjoQQVWeZnyFdBlX9zhNaAj9/r99ZqbfegpIlup6E4CtQILKsa
IYmQRMDuuHxIJIItyGhoHD9+QlqQyWze0ECjj0shItxxug1+SRaV6Y5CE8SfV0D2
bbLxE8N/qKRbTpyIu/UXUT6h0GG6Ljod8HP+/4tiXH70NF7SQm7GalF0JWCLw9vG
L+CD4RpItRJufBR8r/YbrSb53wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHmJ5hAe
UzIwDylw90qlRcSDXLdcMB8GA1UdIwQYMBaAFMxWFXxy3MaXM2NnQ9tQCHWTLaQf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkNENi82NUU2REJENjlD
QTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hwY3pZMmREMjFBSWRaTXRw
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGWVZmSExjeHBjelkyZEQyMUFJZFpNdHBCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTZDRDYvNjVFNkRCRDY5Q0E5MTFFQjhBRkYwRjM3QzRGOUFFMDIvQTIxMEU3MzA5
Q0FCMTFFQkFCODdENDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADKBK8wDwQCAAIwCQMHACABDfZdgDANBgkqhkiG9w0BAQsF
AAOCAQEAie5ofHGeVLnb3wmG581MpnlbzIhP1iIirt3D81m3WZyDtxAlFziasBiP
cJh0LZQLdio7xX4/cnu306cf0fIw1gGSpiPomqdq+xa5XuiAfNoGIum0b5gNnzJt
FPw9PWRq0Gs5H7Y4r0L8oeC4aPRKZuQiq8CCxY7OYQCJfj5UrvCTe6LxUk51WHFI
Dz19A1fAzexHLUODAW8ylYIDOmOJkQW9wxeWr+uVuvX10HFqzdf+tTZqXdtzNrF9
bdjbJQ7x1cAq5FdcV0tgEP9P03G8+UYjPYscA3iTbuGwHx3lx243aZRouM4AOokl
x7eT0j0t9ec+6TWlroNsRN+5Y5dH7A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:46 2025 by rpki-client