Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
File:                     C27C0758916B11EF81BBB521C4F9AE02.roa (raw, json)
Hash identifier:          qo13gcRt8b6k3eRhQ7EnkeeOd2FZ3ZVd7mOuIi+0V40=
Subject key identifier:   68:17:3D:D2:CF:0D:C5:5D:9C:2C:E7:4C:17:08:67:11:31:32:F2:77
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       0100
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
Signing time:             Fri 27 Jun 2025 05:04:28 +0000
ROA not before:           Fri 27 Jun 2025 05:04:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     53813
IP address blocks:        175.107.190.0/24 maxlen: 24
                          2400:7aa0:1d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jun 27 05:04:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685e265c-9c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:f2:82:b1:21:ac:d8:90:02:64:3e:ea:52:
                    85:70:02:ed:60:f3:5a:ae:f7:cf:2a:48:f0:ee:e9:
                    a0:f7:94:35:eb:d7:57:22:64:e8:89:76:73:d5:ad:
                    63:34:e2:e5:bb:66:a9:65:50:2c:09:3f:b4:d9:c1:
                    ba:5e:6b:74:84:48:76:41:20:02:ce:de:4c:f2:b1:
                    07:b3:85:74:c0:5b:e4:c5:5d:64:51:e2:16:3c:da:
                    48:8d:6b:60:e5:71:90:aa:a4:56:17:b7:61:74:8d:
                    dd:86:fc:7d:19:61:d2:42:af:3e:0b:8d:05:7e:a9:
                    e8:53:fc:fc:57:de:0c:e7:4d:e5:fb:84:58:a8:a8:
                    11:a0:08:b7:1e:9a:ae:57:41:f0:70:07:24:77:e8:
                    d9:0c:c4:eb:58:80:5e:23:ae:3d:7a:b9:86:dd:78:
                    03:88:e3:f3:dc:e1:96:c4:93:c5:18:e9:a9:39:ed:
                    d4:75:10:8b:f2:9c:eb:06:84:7d:58:a7:76:b3:ac:
                    0f:0d:2d:43:e0:f4:5e:14:11:78:e7:c4:7a:0b:1d:
                    d6:33:cb:23:31:7e:07:1c:5f:92:f9:e4:8d:e6:d4:
                    4f:1e:d2:72:ce:01:83:ab:99:61:65:5a:a0:09:10:
                    33:16:6c:4b:1e:90:36:fc:36:76:a5:39:7e:ab:d2:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:17:3D:D2:CF:0D:C5:5D:9C:2C:E7:4C:17:08:67:11:31:32:F2:77
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.107.190.0/24
                IPv6:
                  2400:7aa0:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:56:89:84:46:34:54:b4:4a:22:7b:ca:df:0f:8e:ab:34:87:
         1a:1b:41:f1:f2:45:0c:c5:86:9a:ab:f3:34:f3:54:5e:bc:b8:
         3e:1a:e7:49:d6:ef:6d:32:e0:ab:89:55:c7:f7:54:b5:49:c7:
         5c:6f:90:b9:d5:d4:29:25:08:10:02:75:c5:13:c7:83:54:ac:
         d6:00:8e:23:ae:0d:f5:83:f3:72:f4:c5:e4:a6:71:d6:66:5b:
         38:ce:05:42:73:bb:e6:97:6d:ec:31:94:9f:48:f2:86:b0:fd:
         57:7e:82:ce:ba:71:5d:04:c8:2b:af:b2:bf:26:85:3b:fe:18:
         37:05:6e:33:d9:60:04:d7:e9:80:59:7f:9e:6d:91:a3:47:32:
         12:d5:64:eb:58:6e:21:f7:d5:62:57:65:80:97:02:c3:1c:b7:
         04:9d:0f:c2:68:23:fe:ef:a1:78:92:14:f2:33:d7:6c:d5:1d:
         51:2b:ea:cd:61:14:89:33:41:57:ed:ff:de:15:aa:c1:6f:3a:
         fe:de:45:57:00:8e:b1:b5:57:45:c2:cb:5a:28:23:02:66:4b:
         e1:17:68:17:03:3c:27:5c:e5:1a:38:bf:d2:86:19:21:5b:41:
         58:75:e4:a0:22:21:54:36:ea:17:9e:60:94:f9:21:53:03:5f:
         be:ce:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:09:40 2025 by rpki-client