Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6C8EAC7A195F11F08408FA45C4F9AE02.roa
File:                     6C8EAC7A195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier:          MiCHEEQJ2f3wRqKaenNbVNwcE/3dX2pDAlgvDrmpfeE=
Subject key identifier:   9C:3D:E8:46:C6:32:93:CD:A5:B9:76:3C:D4:05:4C:57:FB:C3:30:CB
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       015E
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6C8EAC7A195F11F08408FA45C4F9AE02.roa
Signing time:             Thu 14 Aug 2025 23:43:33 +0000
ROA not before:           Thu 14 Aug 2025 23:43:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        2400:7aa0:2701::/48 maxlen: 48
                          2400:7aa0:2702::/48 maxlen: 48
                          2400:7aa0:2703::/48 maxlen: 48
                          2400:7aa0:2704::/48 maxlen: 48
                          2400:7aa0:2705::/48 maxlen: 48
                          2400:7aa0:2706::/48 maxlen: 48
                          2400:7aa0:2707::/48 maxlen: 48
                          2400:7aa0:2708::/48 maxlen: 48
                          2400:7aa0:2709::/48 maxlen: 48
                          2400:7aa0:270a::/48 maxlen: 48
                          2400:7aa0:270b::/48 maxlen: 48
                          2400:7aa0:270c::/48 maxlen: 48
                          2400:7aa0:270d::/48 maxlen: 48
                          2400:7aa0:270e::/48 maxlen: 48
                          2400:7aa0:270f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Aug 14 23:43:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=689e74a5-9afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:4b:de:4c:45:c1:b3:41:95:ee:10:e5:21:
                    7a:29:df:2a:f6:63:53:a8:9a:a9:25:79:2d:5b:cc:
                    5a:f8:d2:ab:79:68:42:f4:eb:d9:77:35:1e:05:d0:
                    26:7c:f1:66:3f:35:87:6f:80:f8:6b:d0:c5:c2:b9:
                    14:50:bc:1d:59:1e:d8:9f:8b:0b:e7:4b:86:b0:6c:
                    62:8d:02:7d:43:1e:cc:cf:7a:de:67:54:45:9b:e6:
                    14:6e:45:4a:7b:9a:47:12:1b:bf:a7:92:c8:5b:d4:
                    35:6a:6c:d5:dc:9f:21:91:00:68:b2:82:51:d5:f4:
                    18:b7:00:a6:e9:ac:65:b4:5a:6f:7c:29:73:91:bc:
                    3f:c7:40:a8:68:bc:31:40:78:f4:bf:f8:51:9d:f8:
                    a9:44:07:c7:8e:5a:ca:5b:be:50:0e:15:af:b6:78:
                    d8:47:bd:f3:d0:dd:8a:c7:50:5e:73:c8:5a:04:d9:
                    cf:12:86:af:46:5b:10:2b:91:54:6f:3e:77:09:8f:
                    62:80:3d:04:ac:4d:fd:7e:c2:34:85:1b:30:02:96:
                    e5:fa:57:27:e8:a5:85:eb:88:ee:78:d5:a5:25:82:
                    d9:e5:64:79:d5:b8:96:55:9f:cc:32:a4:44:bc:02:
                    d4:2b:5b:68:ac:ba:f1:82:3c:97:79:fe:ba:04:7a:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:E8:46:C6:32:93:CD:A5:B9:76:3C:D4:05:4C:57:FB:C3:30:CB
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6C8EAC7A195F11F08408FA45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:0d:27:ee:17:ce:1e:5d:72:8e:00:d8:4f:60:5d:67:0c:
         56:1e:a9:80:2e:cc:93:fd:f6:33:ed:19:b0:64:44:e9:b1:39:
         ed:1a:a5:af:13:ea:37:dc:44:e7:57:e3:94:46:48:aa:0f:56:
         4a:cf:f6:f7:61:dd:05:0e:63:8d:61:12:f6:f2:82:71:ab:7e:
         65:05:aa:a7:ae:e6:ff:93:4e:b8:b0:79:e8:fc:0b:51:67:fd:
         04:4c:9f:e5:6f:ab:7c:b2:49:7a:b7:71:00:37:65:b2:cb:e8:
         2d:71:c0:46:d0:a6:fe:ba:65:0d:dc:f1:ae:2f:00:25:d2:ea:
         5d:b3:84:8e:88:44:d7:34:fd:06:6f:e1:3a:a9:a9:1b:0a:7a:
         1b:64:9b:e1:f9:27:f3:d7:ec:a9:3f:49:31:7c:90:76:cc:d0:
         41:c5:ef:e5:fb:4a:84:a8:bf:ba:09:e7:f2:19:5d:61:17:53:
         ee:35:8f:a1:44:7a:92:25:d0:d6:0e:18:3d:ea:69:f0:f3:ad:
         c8:0a:f2:72:d0:29:9b:29:7b:db:54:f0:bf:4f:a8:ba:3e:ff:
         8f:44:29:18:63:17:ad:68:f1:6c:e8:07:ec:6c:dd:c2:23:2c:
         06:7c:c0:48:88:c6:21:18:90:df:3d:95:fd:a7:8c:29:d6:cb:
         19:62:56:1e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1
M0NDMDgxMkUwHhcNMjUwODE0MjM0MzMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODllNzRhNS05YWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxpL3kxFwbNBle4Q5SF6Kd8q9mNTqJqpJXktW8xa+NKreWhC9OvZdzUeBdAm
fPFmPzWHb4D4a9DFwrkUULwdWR7Yn4sL50uGsGxijQJ9Qx7Mz3reZ1RFm+YUbkVK
e5pHEhu/p5LIW9Q1amzV3J8hkQBosoJR1fQYtwCm6axltFpvfClzkbw/x0CoaLwx
QHj0v/hRnfipRAfHjlrKW75QDhWvtnjYR73z0N2Kx1Bec8haBNnPEoavRlsQK5FU
bz53CY9igD0ErE39fsI0hRswApbl+lcn6KWF64jueNWlJYLZ5WR51biWVZ/MMqRE
vALUK1torLrxgjyXef66BHqfUwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFJw96EbG
MpPNpbl2PNQFTFf7wzDLMB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTcxNjkvNkI3Rjk5M0NFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvNkM4RUFDN0Ex
OTVGMTFGMDg0MDhGQTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgACMBQwEgMHACQAeqAnAQMHBCQAeqAnADANBgkqhkiG9w0BAQsFAAOC
AQEAC4gNJ+4Xzh5dco4A2E9gXWcMVh6pgC7Mk/32M+0ZsGRE6bE57RqlrxPqN9xE
51fjlEZIqg9WSs/292HdBQ5jjWES9vKCcat+ZQWqp67m/5NOuLB56PwLUWf9BEyf
5W+rfLJJerdxADdlssvoLXHARtCm/rplDdzxri8AJdLqXbOEjohE1zT9Bm/hOqmp
Gwp6G2Sb4fkn89fsqT9JMXyQdszQQcXv5ftKhKi/ugnn8hldYRdT7jWPoUR6kiXQ
1g4YPepp8POtyAryctApmyl721Twv0+ouj7/j0QpGGMXrWjxbOgH7GzdwiMsBnzA
SIjGIRiQ3z2V/aeMKdbLGWJWHg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:10:29 2025 by rpki-client