Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
File:                     6211D40A941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier:          rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=
Subject key identifier:   10:DE:6A:95:74:12:86:58:24:01:C1:86:80:16:0D:F8:C7:27:A2:AE
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       08E1
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
Signing time:             Sat 12 Jul 2025 21:00:54 +0000
ROA not before:           Sat 12 Jul 2025 21:00:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     26496
IP address blocks:        2406:f380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 20:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Jul 12 21:00:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6872cd06-e013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:34:ae:5a:ab:98:50:7d:68:ab:58:63:bc:
                    5f:dd:bc:b6:98:0c:cb:11:cf:3d:a9:94:eb:d4:5e:
                    e4:93:12:e2:ad:ed:fa:5e:a9:91:0f:a0:24:1c:c0:
                    40:7b:0e:54:4e:80:3c:2a:68:0f:2d:e0:7a:70:0d:
                    a7:f6:83:88:cd:b4:34:56:fe:da:a9:fd:af:7e:b0:
                    2f:0f:68:a4:1a:70:92:39:ee:73:ec:0e:45:ca:d0:
                    4b:8c:c5:33:51:8f:32:19:e2:b4:20:f4:63:e3:93:
                    f4:14:06:ab:a1:d1:ec:f8:ce:74:ae:fa:4e:f8:c9:
                    11:7c:30:d6:f9:74:8e:fb:50:70:20:e5:c3:e6:b9:
                    73:87:e8:95:47:e0:c6:b5:7f:ba:e8:ae:80:23:d0:
                    52:f4:32:ff:9b:62:86:1a:23:5b:89:b7:57:e3:54:
                    4f:9a:06:fc:46:1e:28:ef:c1:77:29:6a:1c:3a:68:
                    fd:b3:dc:4e:b7:fc:89:22:76:81:f1:a1:b3:2e:1b:
                    34:65:e6:e7:4d:47:69:14:6d:f0:cc:f0:d5:65:e3:
                    54:69:59:aa:19:18:80:3d:3b:e6:30:96:a4:3e:7e:
                    16:1f:f2:b6:b3:cb:ae:86:b3:29:64:65:27:d1:8e:
                    ad:01:77:fb:44:87:b1:2d:c0:af:6d:40:2d:de:e3:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:6A:95:74:12:86:58:24:01:C1:86:80:16:0D:F8:C7:27:A2:AE
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f380::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:70:bd:15:6e:97:a9:06:9b:3f:f4:08:c4:f4:59:e0:1d:
         c2:c2:8c:e5:ee:b1:ec:06:6f:56:c6:b1:f7:dd:26:8f:c4:97:
         39:cb:41:7e:0d:48:d4:40:7c:f2:47:d6:86:5d:15:d0:3e:c3:
         21:cf:43:20:31:68:69:ce:59:3e:49:39:73:bc:31:94:8f:c0:
         53:fc:7d:33:c8:5b:76:1d:46:27:da:a3:19:cf:fa:8c:13:b1:
         31:24:fd:da:f1:a5:b9:10:06:87:dd:70:c2:b4:fc:bf:04:ba:
         91:33:42:3d:65:d8:ee:9b:27:e3:dc:fb:95:7f:82:5d:ff:ed:
         e2:51:81:9b:39:11:ae:1b:94:21:26:c6:8c:94:51:3a:07:a3:
         80:b9:5e:43:78:30:35:f6:4e:6e:21:1a:84:14:fc:37:2d:63:
         b7:a9:0d:c7:a7:c4:a2:cf:3c:84:44:20:7b:c5:12:c1:c7:1a:
         3e:d9:42:be:38:8e:6e:05:76:a7:87:f9:c1:7d:c8:d5:af:46:
         a4:0f:42:d6:26:41:7a:70:20:7b:8a:78:16:9a:44:36:ac:90:
         5e:38:6d:3f:df:64:c9:b1:81:81:89:d7:fb:ed:01:91:cf:32:
         b6:e2:4f:bd:e3:3d:df:f3:8a:5f:43:60:84:35:8e:8f:ff:db:
         fd:6c:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:10:24 2025 by rpki-client