Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
File:                     F0A5F90452C311EAA49BC03BC4F9AE02.roa (raw, json)
Hash identifier:          UKMxw+/eoFfXEuKcPQVV2BxsP2xIhWde2CeGygG5Soo=
Subject key identifier:   D2:2E:C5:4E:B3:B5:01:20:0D:0D:B9:61:2C:E3:D3:13:79:52:23:76
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39E1
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:51 +0000
ROA not before:           Mon 14 Jul 2025 14:50:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     19047
IP address blocks:        2001:fb0:109f:10::/64 maxlen: 64
                          2001:fb0:109f:8006::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14817 (0x39e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6875194b-5049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:78:05:b1:1f:5b:00:d6:be:78:e6:79:39:
                    56:ac:9d:86:e2:37:a8:d4:71:0d:29:d5:47:ad:22:
                    e0:93:dc:e3:fc:6b:7a:77:f3:49:67:34:e7:30:fa:
                    b2:74:6d:36:2e:de:5a:2d:c2:e3:ed:78:76:41:19:
                    d8:ae:97:c2:92:d3:d6:b3:21:cc:50:d4:76:59:8c:
                    e7:10:f4:7e:b5:35:c8:11:e1:b7:38:b1:13:4d:aa:
                    71:d3:09:46:d4:4d:18:a9:f2:18:1f:f4:ae:43:30:
                    ca:86:4f:32:da:3c:aa:93:79:23:c2:90:8b:55:a0:
                    c2:6f:55:20:13:cc:de:4b:12:3b:d5:4e:06:e3:77:
                    d6:1d:75:17:b7:03:58:bc:6e:c7:8d:66:51:c1:60:
                    f8:d4:8b:94:36:b0:6b:ce:f1:3a:8c:04:6d:19:5d:
                    6c:0e:1b:7d:c6:0a:21:c9:01:27:bc:1a:63:16:ea:
                    03:41:8a:7f:dd:51:2b:e1:c9:4c:f4:3e:6b:b9:33:
                    9f:34:fa:43:70:ec:af:8a:98:50:7a:24:ec:05:33:
                    93:77:07:8e:a0:bf:c2:d0:89:7b:4b:1b:01:3e:1e:
                    c8:fd:87:33:40:09:75:69:58:8e:d8:4c:68:2c:40:
                    47:20:5c:7f:87:97:8b:d3:6d:03:2f:92:af:aa:de:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:C5:4E:B3:B5:01:20:0D:0D:B9:61:2C:E3:D3:13:79:52:23:76
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fb0:109f:10::/64
                  2001:fb0:109f:8006::/64

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:64:03:68:87:e3:14:47:29:54:62:69:1d:9c:17:c5:85:
         a3:09:b0:01:53:8c:ff:6c:94:f7:96:f6:13:c2:5a:9d:c4:15:
         4b:74:8d:7b:29:b8:b9:ed:0b:fe:c2:e2:f8:d2:0e:6f:73:53:
         8c:9b:7a:17:02:a8:92:a1:00:7a:aa:f3:a4:3a:16:73:1f:ba:
         37:77:a8:de:ef:ec:fa:7e:36:95:3b:ac:76:7d:af:1d:10:42:
         6d:91:0e:d9:2d:7d:05:33:4e:5f:01:c9:b5:17:92:e1:f7:05:
         16:60:d2:a5:f9:7a:9b:90:bf:6d:f9:7f:87:f9:f2:98:cb:e0:
         7d:68:55:a2:e1:0a:3e:24:dd:31:c4:7f:c3:f8:12:a4:8e:1a:
         8c:7d:07:74:8a:d7:94:7d:b1:bc:c0:ee:a1:82:d4:20:93:b6:
         38:78:53:a1:e6:33:df:89:1a:1f:a2:d0:a6:56:e1:99:dd:42:
         95:f0:f3:63:a4:85:2e:20:90:d3:3e:cb:64:9e:80:ca:1c:00:
         86:58:6f:79:c0:10:a8:56:7c:af:2c:73:c7:6e:ba:17:a2:12:
         e6:f8:03:2e:90:18:1c:61:0c:d3:27:b3:85:b2:5a:9b:da:e5:
         46:63:70:fc:34:cc:ec:cb:c6:7c:22:4c:fc:1a:88:e0:dc:4e:
         af:a5:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:47:52 2025 by rpki-client