Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa
File:                     91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (raw, json)
Hash identifier:          rkbHYDL4xMD/8dSkmSRkDGyoT+DaGTrMwqprB8nP7g8=
Subject key identifier:   6E:DF:85:28:80:DC:3D:DB:C7:69:7F:21:7E:CB:C9:96:01:FC:34:36
Certificate issuer:       /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial:       B9
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa
Signing time:             Tue 19 Aug 2025 05:44:28 +0000
ROA not before:           Tue 19 Aug 2025 05:44:28 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139820
IP address blocks:        2401:be60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
        Validity
            Not Before: Aug 19 05:44:28 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68a40f3c-2297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:6d:ee:c5:31:1e:d8:6f:76:f1:c9:28:a9:
                    7f:19:ea:e5:60:a7:fa:cc:2b:c2:e1:97:1a:c7:98:
                    3f:1f:aa:e1:8f:ae:10:e8:67:d5:77:32:c3:30:16:
                    15:47:49:15:f3:33:be:4a:64:d2:5d:cf:d9:25:6e:
                    c0:43:4d:77:d4:80:57:7a:5d:2e:16:12:d1:3e:67:
                    a9:07:30:9b:a0:b9:de:fd:e4:ed:16:df:ed:11:50:
                    e7:37:fd:79:0a:48:b3:6c:34:76:9e:a5:29:73:21:
                    f7:db:c8:4e:c4:5e:e5:ab:09:54:b8:b6:05:a5:c6:
                    3b:4b:f1:2a:95:62:46:03:85:5f:ac:60:ec:34:7e:
                    55:18:7e:ad:cd:e3:e2:eb:45:af:d0:40:f9:18:61:
                    eb:f1:d3:9e:da:dd:c6:28:63:4d:ed:b8:c9:a8:81:
                    58:01:1d:db:84:14:96:a7:fb:0d:8b:1d:db:08:4a:
                    c6:05:b7:46:f2:b7:4a:fb:eb:11:8e:de:6f:5b:45:
                    ac:a0:55:54:17:1a:cc:20:cb:fe:7b:27:3d:44:ab:
                    8a:3f:b9:19:44:e1:c3:99:60:f2:2d:03:28:33:bd:
                    e7:0b:13:14:d1:95:d0:be:a4:12:f7:05:c9:88:d3:
                    86:a9:97:b5:24:29:b4:71:9f:0e:43:87:fc:a2:01:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:85:28:80:DC:3D:DB:C7:69:7F:21:7E:CB:C9:96:01:FC:34:36
            X509v3 Authority Key Identifier:
                keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:be60::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:62:fd:51:80:f0:cc:de:38:66:f4:7c:0d:16:c8:f3:ff:6a:
         49:0e:c6:06:b5:e0:8b:1d:50:15:04:e6:41:0f:15:6c:bc:69:
         d9:d8:61:c3:2b:55:da:73:9a:22:88:f8:23:5e:bb:23:91:1d:
         11:b2:23:a9:2d:80:9b:32:95:4a:3f:c9:f3:a4:b8:61:1b:a5:
         28:a9:74:e8:3a:cf:ed:05:6a:97:7b:01:6a:9b:b7:3e:97:39:
         09:2d:37:79:a6:b1:ee:3c:66:fe:bd:e5:42:bf:3c:22:b9:44:
         e4:b4:61:bf:0a:80:3d:4a:a2:10:23:8a:68:07:46:b4:f5:93:
         1b:e9:11:b4:93:8b:6d:18:4f:ce:ee:04:bc:4e:75:ba:1d:a7:
         86:17:27:33:57:b5:56:28:76:fc:f0:2f:8e:b9:9c:c5:53:ec:
         f6:5b:07:b1:af:e7:ae:25:56:89:9a:b1:1a:78:1d:ff:e8:9a:
         58:a3:7f:85:1a:ec:6f:2a:c6:16:67:3e:fb:c7:cc:c8:e4:11:
         86:74:01:28:7f:3f:99:e5:10:d6:15:31:eb:d6:58:c6:25:9c:
         4e:b4:43:0d:1c:b6:97:0b:36:25:83:64:d6:17:73:e0:92:04:
         a3:3f:3f:ed:df:42:66:10:74:29:3b:b7:89:98:48:06:09:9f:
         33:ab:2b:5b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx
QjAxMUQ5NjYwHhcNMjUwODE5MDU0NDI4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE0MGYzYy0yMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4xt7sUxHthvdvHJKKl/GerlYKf6zCvC4Zcax5g/H6rhj64Q6GfVdzLDMBYV
R0kV8zO+SmTSXc/ZJW7AQ0131IBXel0uFhLRPmepBzCboLne/eTtFt/tEVDnN/15
CkizbDR2nqUpcyH328hOxF7lqwlUuLYFpcY7S/EqlWJGA4VfrGDsNH5VGH6tzePi
60Wv0ED5GGHr8dOe2t3GKGNN7bjJqIFYAR3bhBSWp/sNix3bCErGBbdG8rdK++sR
jt5vW0WsoFVUFxrMIMv+eyc9RKuKP7kZROHDmWDyLQMoM73nCxMU0ZXQvqQS9wXJ
iNOGqZe1JCm0cZ8OQ4f8ogHS3wIDAQABo4ICljCCApIwHQYDVR0OBBYEFG7fhSiA
3D3bx2l/IX7LyZYB/DQ2MB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx
NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZCOUEvMUExMDZDRDA2MTUwMTFFRkFFN0E4QzczQzRGOUFFMDIvOTFFREZGRjI3
Q0JGMTFGMEJDQThBNzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAb5gMA0GCSqGSIb3DQEBCwUAA4IBAQATYv1RgPDM3jhm
9HwNFsjz/2pJDsYGteCLHVAVBOZBDxVsvGnZ2GHDK1Xac5oiiPgjXrsjkR0RsiOp
LYCbMpVKP8nzpLhhG6UoqXToOs/tBWqXewFqm7c+lzkJLTd5prHuPGb+veVCvzwi
uUTktGG/CoA9SqIQI4poB0a09ZMb6RG0k4ttGE/O7gS8TnW6HaeGFyczV7VWKHb8
8C+OuZzFU+z2Wwexr+euJVaJmrEaeB3/6JpYo3+FGuxvKsYWZz77x8zI5BGGdAEo
fz+Z5RDWFTHr1ljGJZxOtEMNHLaXCzYlg2TWF3PgkgSjPz/t30JmEHQpO7eJmEgG
CZ8zqytb
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:11:46 2025 by rpki-client