Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa
File:                     75906378FC1F11ECAD09AF21C4F9AE02.roa (raw, json)
Hash identifier:          jD/7/ehRzXn+r7A8PWs0CNNR/EbOe0oKdg7xk/UAFqU=
Subject key identifier:   AB:CF:2D:4A:B1:C5:1B:9C:DC:28:9A:01:F2:3F:76:28:AB:5C:30:30
Certificate issuer:       /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial:       34E1
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa
Signing time:             Fri 08 Aug 2025 15:21:03 +0000
ROA not before:           Fri 08 Aug 2025 15:21:03 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     7468
IP address blocks:        116.214.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13537 (0x34e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
        Validity
            Not Before: Aug  8 15:21:03 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689615df-4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:f4:f7:e9:bd:e9:a1:45:64:5a:dd:61:9a:
                    9f:2e:4d:7e:83:3c:19:d8:00:98:f7:2a:46:55:4d:
                    bf:01:51:90:c2:7e:78:e4:91:0b:3b:3b:20:85:87:
                    c5:83:aa:9e:16:3a:a6:0b:48:b4:70:e1:45:89:24:
                    e0:bc:9a:91:c4:53:48:cc:b1:97:f2:8c:53:e5:e8:
                    47:53:f6:e3:3a:20:1a:f6:60:fa:6a:7f:48:1d:9a:
                    39:28:80:e4:2d:f4:5c:2d:79:50:af:7f:df:ea:ea:
                    6c:7d:a3:9b:04:c1:53:66:eb:94:bf:12:28:77:bf:
                    a5:21:db:82:9f:07:50:ce:2d:8b:9c:6e:ce:24:93:
                    68:02:95:4e:80:bf:a6:50:25:fc:62:63:96:f2:e5:
                    47:d6:db:64:74:80:67:94:49:be:f3:56:c3:b8:10:
                    fd:f2:6f:40:a4:a5:20:55:1f:12:62:05:38:5f:88:
                    74:18:c6:34:7d:3c:62:f5:83:cc:3a:ff:94:79:60:
                    36:b5:dd:e1:d8:ec:95:a3:f4:af:ea:8c:72:8e:f3:
                    51:a1:e6:a8:10:d1:3c:6c:dd:97:9f:da:b7:6b:51:
                    91:39:63:19:57:3c:33:6c:eb:65:f7:97:b6:d0:bf:
                    2e:a5:49:cc:0f:38:a5:b6:14:0c:81:b2:42:fc:f7:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:2D:4A:B1:C5:1B:9C:DC:28:9A:01:F2:3F:76:28:AB:5C:30:30
            X509v3 Authority Key Identifier:
                keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:ac:69:a6:c8:3e:14:6c:46:4a:66:f4:87:24:c4:2e:75:fa:
         e9:dc:00:bc:58:dc:0e:1a:70:74:16:f7:d6:9d:7d:a1:ed:d5:
         6d:3e:c9:ce:88:d2:0a:2d:a4:9a:f5:f6:66:4c:f9:5a:da:02:
         b6:2e:82:bb:fa:c3:53:91:31:06:d3:34:07:b9:b7:2a:8e:0e:
         e1:54:77:fb:e2:6d:7b:35:93:55:1a:24:c0:99:eb:04:25:64:
         27:0d:12:e7:88:82:ca:11:17:b5:cc:9b:b3:a9:8f:c6:a5:d3:
         24:20:ce:7a:e0:44:6b:c8:85:f7:b0:ad:68:a4:a0:74:0e:cd:
         f9:c7:bc:c0:da:95:b3:d3:5a:90:a6:15:4d:e0:c1:54:c2:fc:
         ff:1c:b5:f4:e0:93:c4:79:ee:48:3c:9a:9f:ae:ec:6f:37:3a:
         2e:68:e5:b2:da:7c:7a:10:93:67:b9:ae:21:7e:1c:4a:21:8c:
         a5:82:54:bc:2b:e8:78:9a:7e:1b:57:68:c1:63:a0:00:3b:67:
         f4:03:2e:ff:84:0d:ff:0b:34:6f:93:33:8b:32:81:f8:86:b1:
         4a:5c:0a:e2:e8:0e:99:1a:84:45:21:0c:86:67:e0:0c:1f:77:
         ae:d0:c2:58:d1:83:ff:76:3a:c8:4a:08:9b:97:04:73:a4:2e:
         4e:23:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:17 2025 by rpki-client