Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
File:                     6D3C9D30195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier:          FZ/NGu+pR0tkuSwwrhipfnsWVH/uq5q1NIY0pCw+nnw=
Subject key identifier:   BA:75:DD:E4:7A:23:32:06:5E:C8:A3:4A:67:64:29:F4:F5:BC:53:74
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       015C
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
Signing time:             Thu 14 Aug 2025 23:43:08 +0000
ROA not before:           Thu 14 Aug 2025 23:43:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2400:7aa0:2701::/48 maxlen: 48
                          2400:7aa0:2702::/48 maxlen: 48
                          2400:7aa0:2703::/48 maxlen: 48
                          2400:7aa0:2704::/48 maxlen: 48
                          2400:7aa0:2705::/48 maxlen: 48
                          2400:7aa0:2706::/48 maxlen: 48
                          2400:7aa0:2707::/48 maxlen: 48
                          2400:7aa0:2708::/48 maxlen: 48
                          2400:7aa0:2709::/48 maxlen: 48
                          2400:7aa0:270a::/48 maxlen: 48
                          2400:7aa0:270b::/48 maxlen: 48
                          2400:7aa0:270c::/48 maxlen: 48
                          2400:7aa0:270d::/48 maxlen: 48
                          2400:7aa0:270e::/48 maxlen: 48
                          2400:7aa0:270f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Aug 14 23:43:08 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=689e748c-874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:90:16:41:d2:43:31:dc:5d:3b:be:f4:ef:
                    35:e7:ac:38:56:02:f9:41:8e:38:bf:0e:8e:2b:57:
                    91:0c:0a:e8:2d:6a:f3:43:d6:be:fc:89:8a:85:43:
                    ef:14:df:61:91:a2:d7:81:f4:da:c5:9d:02:dd:28:
                    2c:60:2b:6d:7c:67:02:a1:f5:ab:f0:c5:2a:88:d1:
                    c7:5d:4a:ef:6a:3a:40:4c:50:b4:b9:d0:78:4d:a7:
                    1d:78:de:2f:72:2b:ef:37:50:0a:fc:94:67:92:31:
                    44:cb:b6:14:bf:6e:a8:70:da:db:68:d4:aa:f7:76:
                    b0:70:23:6c:d4:c6:5a:5d:be:57:4b:d9:1b:06:e5:
                    93:0c:00:03:35:22:da:0a:91:51:bc:56:0a:90:03:
                    41:37:89:7a:4c:4e:0c:a6:b6:4b:ea:ec:41:d1:47:
                    74:de:ec:cd:e7:bc:b6:44:1c:f4:53:59:05:a9:23:
                    dd:82:47:8c:53:f7:e2:80:8a:fe:5c:43:2f:49:18:
                    fc:55:f2:fd:c9:b5:51:8c:e3:42:69:f5:7a:c1:76:
                    b8:cc:3d:28:67:a1:9a:c9:02:ef:ff:95:38:86:db:
                    d7:bf:ba:6c:23:c2:9a:9b:35:7b:8d:d1:a9:4d:68:
                    fc:e4:eb:54:ba:42:c8:9e:93:9b:83:e8:07:76:d7:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:DD:E4:7A:23:32:06:5E:C8:A3:4A:67:64:29:F4:F5:BC:53:74
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:b4:38:b8:38:88:86:52:ba:97:4c:03:77:e4:77:a5:0f:
         48:53:ca:61:ba:cd:1d:b4:0c:b6:4e:90:38:a9:27:14:0d:3a:
         c0:f8:ba:50:57:8e:b6:59:50:6f:9c:ca:4b:ac:74:f0:1a:c8:
         68:7f:48:65:c4:25:c2:49:a4:f2:46:d0:a0:f2:49:b9:a3:45:
         81:d7:e1:26:06:3d:78:9e:3a:b7:e5:88:e6:97:6c:30:7c:59:
         50:d2:2e:e9:cc:9f:05:81:c5:bb:e8:0a:2c:41:c5:b3:e4:4f:
         e4:65:2f:32:12:07:b7:fe:96:ce:2c:16:fb:96:38:73:4d:c1:
         20:40:74:5a:d1:67:c9:91:f7:84:a4:6c:a2:c6:b7:67:e2:ac:
         a7:88:d8:73:30:a0:f8:38:3b:5d:0c:7c:a0:8c:ea:d3:02:8b:
         17:a7:18:da:a2:97:60:cb:3e:eb:6e:5e:b9:a6:4e:c5:9a:c4:
         63:55:bb:9c:97:80:fe:23:8f:6f:cb:34:52:c9:2f:95:64:3a:
         0e:64:3c:ce:7d:e1:7a:bc:49:50:f7:ee:b0:c0:c3:8d:b8:60:
         f0:10:59:83:b7:e5:88:95:5e:0a:01:dd:98:94:3d:a3:11:c4:
         e1:98:12:7c:64:88:a4:ed:e0:35:67:38:3f:ca:4e:a2:cf:2c:
         59:0c:74:1c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1
M0NDMDgxMkUwHhcNMjUwODE0MjM0MzA4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODllNzQ4Yy04NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuueQFkHSQzHcXTu+9O8156w4VgL5QY44vw6OK1eRDAroLWrzQ9a+/ImKhUPv
FN9hkaLXgfTaxZ0C3SgsYCttfGcCofWr8MUqiNHHXUrvajpATFC0udB4TacdeN4v
civvN1AK/JRnkjFEy7YUv26ocNrbaNSq93awcCNs1MZaXb5XS9kbBuWTDAADNSLa
CpFRvFYKkANBN4l6TE4MprZL6uxB0Ud03uzN57y2RBz0U1kFqSPdgkeMU/figIr+
XEMvSRj8VfL9ybVRjONCafV6wXa4zD0oZ6GayQLv/5U4htvXv7psI8KamzV7jdGp
TWj85OtUukLInpObg+gHdteU/QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFLp13eR6
IzIGXsijSmdkKfT1vFN0MB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTcxNjkvNkI3Rjk5M0NFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvNkQzQzlEMzAx
OTVGMTFGMDg0MDhGQTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgACMBQwEgMHACQAeqAnAQMHBCQAeqAnADANBgkqhkiG9w0BAQsFAAOC
AQEAjqG0OLg4iIZSupdMA3fkd6UPSFPKYbrNHbQMtk6QOKknFA06wPi6UFeOtllQ
b5zKS6x08BrIaH9IZcQlwkmk8kbQoPJJuaNFgdfhJgY9eJ46t+WI5pdsMHxZUNIu
6cyfBYHFu+gKLEHFs+RP5GUvMhIHt/6WziwW+5Y4c03BIEB0WtFnyZH3hKRsosa3
Z+Ksp4jYczCg+Dg7XQx8oIzq0wKLF6cY2qKXYMs+625euaZOxZrEY1W7nJeA/iOP
b8s0UskvlWQ6DmQ8zn3herxJUPfusMDDjbhg8BBZg7fliJVeCgHdmJQ9oxHE4ZgS
fGSIpO3gNWc4P8pOos8sWQx0HA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:11:27 2025 by rpki-client