Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/24AB7D08271F11EF81086430C4F9AE02.roa
File:                     24AB7D08271F11EF81086430C4F9AE02.roa (raw, json)
Hash identifier:          2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=
Subject key identifier:   B0:CE:DA:D5:71:A4:F1:20:87:35:28:0F:9B:4F:41:EA:23:96:F3:2B
Certificate issuer:       /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564
Certificate serial:       C8
Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/24AB7D08271F11EF81086430C4F9AE02.roa
Signing time:             Wed 25 Jun 2025 05:39:29 +0000
ROA not before:           Wed 25 Jun 2025 05:39:29 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152906
IP address blocks:        2401:a5a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564
        Validity
            Not Before: Jun 25 05:39:29 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685b8b91-317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:00:29:ae:b9:c4:c4:b4:a1:a9:50:89:5e:
                    54:5b:20:26:76:72:16:e6:5a:3f:11:75:13:a1:fe:
                    8f:dc:ee:51:d1:be:9e:25:2d:b0:86:a6:08:24:b5:
                    86:b1:07:50:f8:9d:e5:75:49:c8:d1:30:4a:a3:3e:
                    5d:e1:bc:b6:fd:7d:88:95:1a:5c:cb:83:9f:c2:a4:
                    06:d3:25:8c:bf:c8:be:84:f3:a1:e8:3b:60:64:82:
                    63:78:77:f0:e7:dc:46:b0:ef:0d:44:f7:c8:fb:52:
                    68:91:3d:27:0f:b4:71:c8:28:69:84:5b:fb:d9:3f:
                    53:c3:a3:db:f2:53:cc:9a:e6:a6:62:18:e2:21:ae:
                    c3:7d:2d:c6:af:b6:66:e1:50:92:59:68:91:44:c3:
                    36:25:4c:dd:cf:5e:13:c9:f8:cc:cd:22:c3:71:c6:
                    06:af:8f:2a:0f:c8:6c:93:4d:4c:d7:0a:72:b6:82:
                    81:9d:1c:f2:91:d3:c2:36:ab:0c:24:61:0b:7e:6a:
                    c7:85:7e:d6:16:55:60:87:b6:98:a3:43:e6:6a:1d:
                    37:34:53:7c:b5:69:22:9b:16:d4:f1:a1:6d:3b:67:
                    54:a5:5f:c0:a5:98:4b:03:1f:18:a9:41:9d:2c:e3:
                    de:23:74:cf:51:44:30:d5:3f:3b:b2:2b:62:47:bc:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CE:DA:D5:71:A4:F1:20:87:35:28:0F:9B:4F:41:EA:23:96:F3:2B
            X509v3 Authority Key Identifier:
                keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/24AB7D08271F11EF81086430C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:77:e7:c4:f9:82:50:ec:e2:08:f0:0a:9b:07:07:3f:8d:23:
         3b:e5:8b:d0:3f:d7:38:f6:f8:ff:59:8e:c9:7a:35:96:f0:59:
         fa:f0:d2:a5:d7:d8:8f:7f:b0:cc:b7:9c:37:25:28:59:9b:42:
         62:ab:37:b2:1e:c2:e5:4a:a3:6c:88:06:e6:90:74:2a:d3:cc:
         d2:a1:5e:fd:16:8e:e0:36:c8:9a:59:7e:c0:55:f6:88:6e:3d:
         d1:17:19:64:3d:a4:1b:89:85:0f:c4:2d:d5:67:15:88:01:69:
         8e:a4:fe:53:7e:1f:90:6c:c1:dd:36:25:ef:79:c1:00:5a:c2:
         4c:a9:19:02:76:e6:cd:b7:96:51:c2:8d:f1:b3:f4:2d:1c:60:
         a8:11:20:c4:6a:6b:b4:e1:3a:4b:a0:c3:ce:2e:ab:9c:e4:08:
         dd:a5:9a:18:62:91:7c:c3:61:d7:ba:98:26:75:d4:92:d5:b9:
         82:b0:22:f9:08:3f:3a:ed:0c:d2:ec:07:f0:a6:56:50:5c:7f:
         b7:bd:40:73:d4:d4:28:5d:59:80:01:a4:3e:61:98:5c:19:df:
         ca:0b:95:fa:4a:e4:c9:35:91:30:ea:ad:e0:6f:b9:88:88:0e:
         f2:c4:ea:1a:a0:3d:1f:ab:47:9c:da:1f:8a:0a:d5:b7:5b:12:
         a2:76:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:37:07 2025 by rpki-client