Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
File:                     F9424C6C80FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          FEAq+U9IY/vjb8fj+kVPH0Boa2FLCn9hMhhxSh+Ch10=
Subject key identifier:   5D:A2:9B:45:7F:2C:95:0C:E0:43:04:00:9E:1B:24:77:AE:11:AB:73
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       026D
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
Signing time:             Sat 27 Sep 2025 02:30:35 +0000
ROA not before:           Sat 27 Sep 2025 02:30:35 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7575
IP address blocks:        138.80.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Sep 27 02:30:35 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d74c4b-45d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:00:97:2a:33:92:eb:ef:35:ad:db:e1:5c:
                    af:27:16:6a:df:b8:0a:92:fb:22:3e:42:8b:38:7b:
                    2c:4a:d8:5b:8a:75:aa:5f:a9:54:8e:38:15:bf:0a:
                    49:c2:aa:f7:39:94:52:ee:3b:11:16:2b:02:48:60:
                    b8:39:c8:09:cb:3d:6c:50:08:82:67:9c:98:c5:09:
                    fd:da:09:5a:29:d3:4d:da:64:04:5d:7f:cd:d6:96:
                    8d:db:5d:6f:1b:e7:2f:4c:f9:38:3b:02:e2:0c:9f:
                    d1:70:ae:d7:5e:1e:43:92:8a:0f:cd:f4:c5:af:7c:
                    f7:7b:a0:1c:5b:a4:fe:2b:f5:63:8e:f5:10:7b:8f:
                    e1:2f:93:e5:0e:b1:e6:e3:be:59:53:0c:ac:5a:cd:
                    c9:4e:dd:56:df:fa:54:d1:a2:22:54:dc:f7:37:43:
                    44:be:08:f0:57:b2:3b:2c:6b:59:69:96:16:55:bb:
                    3b:89:85:33:b9:95:dd:ea:a3:ce:15:45:09:79:01:
                    14:4e:cb:f5:2d:a7:57:0d:8c:41:bc:9e:bc:d7:85:
                    d2:0e:67:ef:ca:7a:1b:1b:82:e5:cc:75:43:52:23:
                    97:7c:f7:3e:13:1a:a3:ad:ad:bf:b5:0d:3f:60:9e:
                    ab:a6:35:56:c0:dc:10:f2:4f:d3:b5:16:7c:48:51:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A2:9B:45:7F:2C:95:0C:E0:43:04:00:9E:1B:24:77:AE:11:AB:73
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:94:8a:85:6d:24:1b:f6:2e:3b:b2:8e:64:8f:d9:f5:89:e1:
         21:95:f2:86:20:0f:11:36:36:26:8c:2b:64:94:45:16:1c:42:
         8c:78:c7:dd:b0:f4:1b:8d:ca:85:ab:93:b0:9f:0c:76:17:d6:
         45:8f:99:c4:58:75:f7:03:49:76:e7:cd:e0:da:f6:c5:68:60:
         9f:98:6d:78:b1:3f:16:10:03:8c:d8:17:43:33:70:88:53:88:
         bb:e7:75:b1:4d:01:02:39:ef:1d:87:c5:61:36:54:d0:e0:2d:
         0e:8b:bd:84:51:f3:57:b9:91:1b:1a:bf:1e:a8:1c:25:0c:9f:
         ec:5d:d2:88:bc:4f:49:92:a2:18:4a:6a:32:fe:c9:5b:e2:1d:
         70:df:c6:a6:c9:c0:87:bc:aa:3a:70:9e:e3:e7:61:33:92:93:
         dd:70:83:21:4e:01:da:50:ce:ce:e0:b4:de:ba:d8:cf:d8:33:
         41:00:8b:98:0e:bb:f0:b9:a8:12:34:a5:82:51:df:51:a2:f8:
         5f:50:e5:ae:97:75:92:45:f1:8e:dd:30:5f:4d:62:c5:07:c4:
         b1:bc:0e:3c:ec:c3:98:cb:69:3d:7e:b7:fb:ef:68:4e:9e:48:
         f9:81:d8:2e:62:b9:27:34:a3:7a:f0:cf:12:5f:da:c3:cf:4a:
         b1:f1:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:46 2025 by rpki-client