Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/E5E533CA7EB111F0AD0B186BC4F9AE02.roa
File:                     E5E533CA7EB111F0AD0B186BC4F9AE02.roa (raw, json)
Hash identifier:          ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=
Subject key identifier:   D2:13:7C:E6:A4:57:A6:A0:C1:EB:99:4A:7D:4A:58:BE:99:9F:17:76
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       036F
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/E5E533CA7EB111F0AD0B186BC4F9AE02.roa
Signing time:             Thu 21 Aug 2025 17:11:38 +0000
ROA not before:           Thu 21 Aug 2025 17:11:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     40676
IP address blocks:        2402:2f80:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: Aug 21 17:11:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68a7534a-624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:98:08:5a:30:44:44:20:a9:80:e5:00:a7:
                    df:80:f4:64:04:05:99:ab:5d:be:a3:96:8c:59:7a:
                    c0:23:d2:f5:27:ee:22:f5:2c:91:40:4d:f4:27:6b:
                    90:73:78:b4:74:41:63:e9:83:51:f2:c3:55:db:44:
                    be:a5:47:b4:25:2c:79:4e:a5:71:26:aa:f2:d3:2b:
                    c9:b8:8c:a7:69:ec:76:67:c5:16:d8:9a:b6:fa:6a:
                    d8:86:91:45:43:4b:14:0f:94:3e:bd:88:57:bf:f9:
                    78:6f:4d:2e:30:98:e6:21:2d:77:aa:31:dd:a9:9d:
                    46:6c:df:a6:23:f7:d2:6e:ea:25:5a:2e:b4:72:2b:
                    5d:93:d5:e7:08:c4:c2:32:6f:ce:79:43:e5:ba:22:
                    ea:66:01:63:60:11:2e:a1:2f:8d:ba:fd:d1:0d:23:
                    87:a3:18:52:cf:52:2b:c1:e3:2c:b3:f9:96:a1:1e:
                    c6:f8:3b:43:44:d3:6b:f1:6b:7a:43:78:d4:58:be:
                    e1:88:41:de:13:fa:93:60:d3:b7:a6:38:bc:80:ed:
                    a3:7f:b4:6d:d1:c7:34:f2:05:9e:5e:c1:fd:e9:5a:
                    90:3e:36:38:ff:e3:36:bd:da:f0:d8:29:a9:ac:56:
                    7a:f3:9e:e0:fc:c9:91:5f:1d:67:bd:cf:c4:de:74:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:7C:E6:A4:57:A6:A0:C1:EB:99:4A:7D:4A:58:BE:99:9F:17:76
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/E5E533CA7EB111F0AD0B186BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2f80:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:42:a4:22:98:54:6c:87:2c:2b:d5:07:95:cf:f5:2d:3b:bf:
         8f:eb:ae:85:00:2a:2f:6d:30:07:b9:f3:9b:14:67:e4:60:2c:
         82:25:4e:e0:07:d7:0e:80:43:f4:34:ad:3b:cd:a8:a6:0f:40:
         85:15:b3:b8:ff:61:13:26:63:3a:ad:ce:92:c6:bb:4e:58:b4:
         dd:b1:29:57:4e:6d:a3:34:76:3f:4b:b6:23:0d:bb:d2:10:23:
         45:21:fc:da:a7:2c:2c:9b:6c:01:e5:9f:7b:fb:e1:16:0c:81:
         19:12:1f:6c:44:96:5c:93:81:c8:5a:f0:1f:18:78:1e:8a:d5:
         47:7c:16:76:54:24:d7:57:95:94:7d:af:69:58:39:2b:b8:e5:
         4e:d5:7f:ed:89:11:e6:80:79:e0:67:7e:e5:dc:44:ac:71:57:
         bd:d3:84:8f:5e:1c:c0:2c:ef:77:43:bf:1e:5b:9c:8a:72:4b:
         8c:63:41:24:96:e8:00:ff:74:da:f6:d6:62:97:f6:5f:5a:99:
         a3:e8:0f:4c:f4:f7:02:83:5b:8c:e0:d5:3f:53:0f:2d:d0:4d:
         00:aa:3d:fe:2d:c3:23:07:48:8c:ee:5e:de:5c:86:86:a9:e2:
         dc:b6:6d:9f:0d:c7:b2:77:16:c9:a0:d6:45:c7:13:82:ff:50:
         8b:55:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:23:20 2025 by rpki-client