Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
File:                     FCBF1666677C11EBB2A3F00CC4F9AE02.roa (raw, json)
Hash identifier:          mbhuy04A8zuqh2VQYoyVQz/nubKm5uM/LXn3ihnguHc=
Subject key identifier:   7C:49:6E:75:ED:6B:23:4B:70:7C:49:8D:3D:A3:9F:4B:60:D7:7A:56
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3665
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
Signing time:             Tue 30 Sep 2025 14:40:14 +0000
ROA not before:           Tue 30 Sep 2025 14:40:14 +0000
ROA not after:            Fri 30 Jan 2026 00:00:00 +0000
asID:                     135540
IP address blocks:        61.45.255.0/24 maxlen: 24
                          2401:4601:255::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13925 (0x3665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Sep 30 14:40:14 2025 GMT
            Not After : Jan 30 00:00:00 2026 GMT
        Subject: CN=68dbebce-7c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ea:af:87:9d:4c:1c:42:f8:40:1c:16:89:71:
                    74:ec:7d:4d:44:10:f1:32:c0:f9:89:99:a4:cd:1e:
                    59:87:0b:65:27:0b:5e:80:ea:00:d8:1c:88:42:72:
                    58:f0:e3:90:37:02:d4:48:69:03:5b:26:f3:45:9d:
                    c1:90:eb:08:06:4c:a2:1d:de:8e:77:6d:fc:33:71:
                    e7:d5:b7:21:13:ba:2e:e3:9d:64:b9:04:e3:13:cc:
                    b7:17:c6:f2:5d:d8:75:e9:d9:cc:ea:ff:92:59:ed:
                    4e:bf:9d:05:50:14:af:58:3a:e0:25:10:6f:6a:f7:
                    3e:98:ab:0e:d3:00:f9:64:e5:1c:77:d0:55:97:71:
                    f4:c8:0d:fb:3a:f1:fc:9e:45:b4:33:b0:1d:60:92:
                    9d:fc:8d:33:14:14:ea:6a:e4:1f:ba:c3:26:0f:4a:
                    c1:06:d6:ea:3c:99:ba:f0:d5:d8:50:03:80:bf:3c:
                    49:7c:0c:e6:61:f6:be:64:e1:b8:09:da:70:a2:7b:
                    4c:65:21:cb:bc:a4:d9:9c:33:e7:93:75:84:79:3c:
                    8e:73:ed:90:eb:e3:9f:2e:06:cd:8c:94:43:90:4e:
                    64:50:b0:bf:32:1d:8d:dc:51:56:ce:df:54:b3:d9:
                    b3:a9:88:13:97:c6:87:ca:f2:15:da:f0:a7:c1:b1:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:6E:75:ED:6B:23:4B:70:7C:49:8D:3D:A3:9F:4B:60:D7:7A:56
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.255.0/24
                IPv6:
                  2401:4601:255::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:85:da:aa:b8:05:d7:73:20:1b:59:73:60:aa:8f:6a:5c:e6:
         b2:ae:2c:e8:11:bb:c6:2b:d6:4f:f1:19:d9:95:54:dc:94:eb:
         20:2b:56:8f:18:3f:43:37:43:d4:c6:2a:6a:a0:25:05:78:01:
         45:7f:67:dc:f8:88:40:16:c0:49:4d:0a:0e:f7:17:81:fc:9f:
         c3:2a:af:c2:4b:ab:1f:1e:c1:ee:ea:57:f6:6b:26:64:ce:de:
         72:74:a1:5a:18:44:81:55:eb:c7:42:ce:a1:97:7c:a1:e3:4e:
         18:a4:ad:09:68:5b:84:df:59:eb:b6:60:63:2f:8f:c3:da:80:
         17:44:87:7c:b0:75:1b:5e:e0:62:0c:be:ec:d9:e4:62:0c:34:
         04:ab:6a:37:4a:d1:af:3e:c5:40:be:15:68:e1:4d:2e:c2:f8:
         c2:51:74:c1:44:0c:a3:40:5b:0b:93:c7:e8:e2:15:d3:62:2e:
         72:8c:6f:09:06:25:71:f8:db:93:86:b9:75:8b:51:76:0d:be:
         f4:d9:f8:21:b6:ba:4a:b7:82:0a:79:a9:bc:55:6d:10:ff:41:
         c7:b8:56:db:54:fc:e6:57:c8:a0:f3:5d:b2:b9:aa:14:82:bd:
         cc:85:51:c5:c5:a3:51:66:4a:84:45:7c:43:68:ee:a2:bc:4c:
         19:3a:fa:f6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICNmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2
OTYwQkUyNjgwHhcNMjUwOTMwMTQ0MDE0WhcNMjYwMTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRiZWJjZS03Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+qvh51MHEL4QBwWiXF07H1NRBDxMsD5iZmkzR5ZhwtlJwtegOoA2ByIQnJY
8OOQNwLUSGkDWybzRZ3BkOsIBkyiHd6Od238M3Hn1bchE7ou451kuQTjE8y3F8by
Xdh16dnM6v+SWe1Ov50FUBSvWDrgJRBvavc+mKsO0wD5ZOUcd9BVl3H0yA37OvH8
nkW0M7AdYJKd/I0zFBTqauQfusMmD0rBBtbqPJm68NXYUAOAvzxJfAzmYfa+ZOG4
CdpwontMZSHLvKTZnDPnk3WEeTyOc+2Q6+OfLgbNjJRDkE5kULC/Mh2N3FFWzt9U
s9mzqYgTl8aHyvIV2vCnwbGz4wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHxJbnXt
ayNLcHxJjT2jn0tg13pWMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE
NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvRkNCRjE2NjY2
NzdDMTFFQkIyQTNGMDBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAA9Lf8wDwQCAAIwCQMHACQBRgECVTANBgkqhkiG9w0BAQsF
AAOCAQEACYXaqrgF13MgG1lzYKqPalzmsq4s6BG7xivWT/EZ2ZVU3JTrICtWjxg/
QzdD1MYqaqAlBXgBRX9n3PiIQBbASU0KDvcXgfyfwyqvwkurHx7B7upX9msmZM7e
cnShWhhEgVXrx0LOoZd8oeNOGKStCWhbhN9Z67ZgYy+Pw9qAF0SHfLB1G17gYgy+
7NnkYgw0BKtqN0rRrz7FQL4VaOFNLsL4wlF0wUQMo0BbC5PH6OIV02IucoxvCQYl
cfjbk4a5dYtRdg2+9Nn4Iba6SreCCnmpvFVtEP9Bx7hW21T85lfIoPNdsrmqFIK9
zIVRxcWjUWZKhEV8Q2juorxMGTr69g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:50 2025 by rpki-client