Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
File:                     BB5954CE241111F094390A32C4F9AE02.roa (raw, json)
Hash identifier:          6qd8Idl86oSAnUE2UErM8ktGLeOpsspXAgidR5hkRlE=
Subject key identifier:   38:C3:65:95:09:E4:3C:9D:4C:A0:BD:34:41:7C:85:B5:D3:1B:5C:29
Certificate issuer:       /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Certificate serial:       74
Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
Signing time:             Thu 03 Jul 2025 07:11:43 +0000
ROA not before:           Thu 03 Jul 2025 07:11:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140704
IP address blocks:        2001:df4:18c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
        Validity
            Not Before: Jul  3 07:11:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68662d2f-6dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:44:bf:f5:ba:30:0e:0c:6a:38:5e:c6:5b:
                    a6:43:8c:07:83:cd:04:55:5b:3b:0d:fb:99:a8:9a:
                    60:1d:8d:5f:3b:1d:cc:fe:09:c8:9e:1c:d6:75:85:
                    47:b0:a9:91:93:1d:c3:0c:06:9c:96:47:b1:0c:34:
                    1d:2f:98:ae:42:95:99:b9:f5:10:1e:4f:4f:21:b6:
                    d4:18:c1:b2:b8:73:61:0d:94:cf:d6:99:a8:c5:e2:
                    f1:38:a8:fb:fa:76:33:32:cb:22:8d:c8:31:4c:5e:
                    10:0f:1f:1b:93:5b:d8:2f:c9:19:62:90:01:84:e4:
                    e5:b4:37:d8:45:7b:89:e3:ba:99:06:dc:4d:e8:b6:
                    e9:52:9b:e9:a6:cc:b6:c0:9d:c9:18:0d:50:a4:44:
                    ba:15:72:58:c9:6e:71:64:7c:01:57:04:af:ed:c4:
                    5e:b2:4a:f9:93:f4:cf:90:29:20:9e:ac:39:d4:ef:
                    aa:f9:08:b9:a8:fc:d4:44:f9:e4:c2:5b:01:e3:a6:
                    35:f5:a4:8d:88:0d:59:63:cb:42:3f:4a:10:dc:68:
                    71:92:7b:f3:7d:7c:68:7e:d2:1e:06:88:7f:62:60:
                    71:cb:0b:43:cf:c0:1d:15:ca:02:21:68:e9:1b:20:
                    99:9d:73:be:c6:bd:f3:0b:f0:4f:32:eb:b2:ca:ee:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C3:65:95:09:E4:3C:9D:4C:A0:BD:34:41:7C:85:B5:D3:1B:5C:29
            X509v3 Authority Key Identifier:
                keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:18c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:67:70:76:d4:84:e1:9f:05:14:74:44:b9:0b:22:b3:cf:
         1a:8e:3a:e7:2a:e5:47:1b:92:50:0d:3b:f0:f4:eb:62:bd:fc:
         6a:fd:44:2f:e1:1e:68:c8:1d:51:bf:1f:b7:78:df:3c:e3:72:
         5a:48:70:d6:34:c0:f9:80:f6:ec:d3:7e:7c:40:34:39:e5:8a:
         7d:01:6c:9f:9e:64:3b:d9:8f:04:dc:5f:91:d2:bd:42:86:f9:
         de:53:0e:b8:f5:7d:4d:84:58:50:43:f0:a9:94:bd:9f:20:1e:
         57:79:2d:95:11:f0:e7:ca:ea:f1:6c:b1:5f:ea:42:63:7b:1b:
         bf:11:e8:66:83:2b:b3:ea:ef:40:09:2a:49:8c:bd:97:3e:fb:
         0c:01:40:d3:50:7e:2c:ab:b9:a3:e9:e6:ee:79:46:de:bd:1b:
         dc:d9:0e:1d:f3:e4:50:d3:97:56:bb:69:bf:e2:12:68:93:c5:
         c4:7d:40:a6:dd:58:ee:02:cf:d2:37:12:86:2f:68:ab:a6:0c:
         04:66:9f:8b:40:4d:d4:81:60:da:c2:1e:86:7d:0e:90:e7:14:
         e4:c7:8e:1c:d7:81:43:28:c7:cc:c9:ec:50:9e:73:b6:d0:d4:
         f3:9e:f3:f8:a3:72:6c:a6:a6:12:01:0d:e2:e7:a0:9c:8d:da:
         6f:63:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:07:15 2025 by rpki-client