Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/16D5BB20688311F08E397438C4F9AE02.roa
File:                     16D5BB20688311F08E397438C4F9AE02.roa (raw, json)
Hash identifier:          espLUCKYtajfvWKEbjhzWr6LNbQUTeD/lsYfwISn4Sg=
Subject key identifier:   B1:2B:4D:D7:4F:65:03:E9:C8:30:19:04:66:DC:10:69:89:D1:5B:F4
Certificate issuer:       /CN=A911F753/serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Certificate serial:       0D
Authority key identifier: 47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/16D5BB20688311F08E397438C4F9AE02.roa
Signing time:             Thu 24 Jul 2025 11:41:08 +0000
ROA not before:           Thu 24 Jul 2025 11:41:08 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     214571
IP address blocks:        2001:df5:d440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
                          rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 07:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F753, serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
        Validity
            Not Before: Jul 24 11:41:08 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68821bd4-8a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:6d:f3:f8:1a:ed:8d:f8:e4:ab:eb:13:15:
                    6e:45:4a:82:da:4c:f5:4d:1d:1f:56:d1:31:9a:e2:
                    74:84:e6:5e:82:46:ad:51:5b:7a:d0:ad:10:07:53:
                    6d:71:a2:61:dc:67:a5:aa:72:b8:d1:d5:33:2a:95:
                    4a:39:01:cb:d6:d9:8c:d6:1d:47:b5:de:98:13:8b:
                    dd:13:1a:06:e2:04:77:df:fb:47:74:9e:5e:55:b8:
                    1b:00:92:18:bf:ef:0d:63:1d:bc:16:73:67:3e:c4:
                    d2:03:d9:90:65:7f:df:86:06:2f:f9:dd:1f:c1:4f:
                    de:53:9a:a2:50:91:ac:fe:81:f1:a2:11:6d:80:88:
                    c5:8b:b8:c1:59:23:b4:17:e7:bd:e8:3e:4c:0c:f6:
                    c9:5c:62:f0:33:0a:2e:61:a3:39:cc:e4:0c:38:19:
                    a4:7e:fb:e2:c7:ad:0d:2b:cd:ca:02:82:43:5f:46:
                    a7:a2:86:63:68:23:a0:30:17:54:93:ab:fd:71:aa:
                    fc:2d:99:fb:46:6a:69:62:76:19:74:43:3f:11:15:
                    04:d0:7a:68:01:70:e8:e9:7e:4a:fc:24:18:46:78:
                    10:38:d1:da:a8:53:72:c2:87:79:59:e3:b6:51:00:
                    e0:90:69:f0:df:0e:66:7c:1d:0a:b7:26:15:b7:85:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:4D:D7:4F:65:03:E9:C8:30:19:04:66:DC:10:69:89:D1:5B:F4
            X509v3 Authority Key Identifier:
                keyid:47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/16D5BB20688311F08E397438C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d440::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:c3:3f:28:12:fb:e6:48:05:4d:88:8e:ba:6d:e1:03:62:
         ad:47:e2:bd:d6:0b:74:8e:2a:58:8e:5d:26:15:18:cf:1e:84:
         d7:76:75:01:33:32:48:a3:4a:0d:9d:e7:b9:61:aa:8f:6c:3b:
         55:c7:99:9e:68:55:a3:b2:eb:4f:f7:d8:29:ec:3a:56:87:a7:
         5b:b5:bf:f4:1a:92:58:7f:aa:9c:5e:c1:63:20:72:13:7a:83:
         4a:1f:b0:e2:06:51:0f:2b:97:46:b8:7b:83:ba:10:1d:30:9d:
         e0:c7:e4:b6:5b:2c:d4:a8:7c:07:65:75:93:6f:24:8b:c7:15:
         0e:d2:1a:c1:1e:94:67:a5:03:c7:94:56:85:49:dd:81:4b:78:
         8c:c6:96:d6:e0:b2:c0:de:d0:cd:33:1e:a8:0c:38:47:6a:9b:
         a8:f3:aa:a0:a3:63:09:8d:72:1d:bc:ce:60:4c:85:11:3c:ea:
         a8:04:a7:5a:ac:27:66:6a:57:85:d3:c6:89:ce:f3:76:51:79:
         7c:ab:4d:dd:65:a1:e8:c9:37:ab:2b:93:14:32:df:3a:27:86:
         18:b2:0d:f5:11:e0:c5:87:0d:61:dc:a4:47:2b:93:9f:85:f2:
         20:09:1e:5b:29:ea:2c:a7:19:3a:58:43:df:df:11:49:78:57:
         36:1a:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 04:03:23 2025 by rpki-client