Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
File:                     62CDEE42941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier:          xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=
Subject key identifier:   45:D2:ED:BA:8F:25:5E:CA:3B:3F:BC:0E:84:94:D3:40:23:AE:9F:89
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       08E3
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
Signing time:             Sat 12 Jul 2025 21:00:56 +0000
ROA not before:           Sat 12 Jul 2025 21:00:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     398109
IP address blocks:        2406:f380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 20:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Jul 12 21:00:56 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6872cd07-c700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:5a:31:97:e1:37:f2:b5:95:85:f4:9c:7c:
                    6e:f3:c7:95:aa:de:64:5a:f2:d8:cb:41:6c:83:09:
                    f9:3b:b1:8b:35:72:3e:a3:d3:8e:03:e3:9f:95:f1:
                    76:2e:e7:f6:fd:eb:1f:2b:f2:f7:2b:fc:4c:2c:fe:
                    31:38:c4:02:9b:45:61:32:3d:b7:98:3d:d6:81:47:
                    aa:84:be:b6:fd:da:fa:cf:84:5d:67:8a:d3:b1:b3:
                    05:bd:22:b5:f4:5c:e4:8a:dd:b1:e7:84:28:ff:3a:
                    dd:83:86:a9:47:42:11:f0:53:29:13:e1:77:3a:84:
                    c7:21:e9:01:28:83:79:69:a1:09:1d:45:fd:12:4f:
                    9f:87:79:d4:de:e0:14:3d:da:e6:7a:d8:70:e0:72:
                    74:c8:0d:ee:45:82:f9:0a:31:0f:19:cf:3f:b9:1d:
                    e3:3d:df:be:42:fd:cb:42:7f:e9:6f:ee:16:de:35:
                    a7:57:41:a6:b4:40:9c:88:2e:8d:3c:cd:f2:67:7f:
                    3d:af:4d:9f:94:80:e2:16:be:37:44:fa:5a:10:5e:
                    4f:7d:3b:8c:21:30:7f:9e:75:8f:2b:e9:f7:6f:45:
                    ce:97:a0:a3:32:a1:1e:31:25:98:b7:42:c5:14:02:
                    5f:61:63:d9:ab:43:1b:a0:f4:ad:b9:6b:7d:ca:ef:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:ED:BA:8F:25:5E:CA:3B:3F:BC:0E:84:94:D3:40:23:AE:9F:89
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f380::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:56:cb:2d:cc:49:e3:b3:8e:07:45:c8:be:f1:28:64:aa:
         f4:f7:cc:24:50:a3:fc:ba:92:ec:a8:a1:06:12:d1:40:28:30:
         5a:ff:43:cf:b6:8e:5b:b5:63:2e:73:0b:43:1e:bc:19:35:f4:
         61:d7:1d:3c:15:4c:ea:21:49:8b:c7:1b:f5:95:8f:99:7d:33:
         b1:7d:a7:3b:b5:67:95:07:ae:e5:75:85:12:d8:de:ac:c9:c7:
         4c:92:fd:4e:04:8c:50:c8:ab:7a:c0:7a:85:31:4e:19:0a:a8:
         33:d9:b4:45:83:42:a3:cf:6a:49:62:65:4c:14:5a:4d:44:40:
         5b:04:00:0f:ad:65:4d:4c:70:30:6e:28:2f:12:64:3f:26:94:
         14:85:8b:77:30:2a:e9:95:2e:c2:4d:f3:f1:49:7e:86:56:35:
         69:b7:60:5d:cb:be:04:79:97:12:28:55:ad:6e:09:8a:00:36:
         a9:97:a8:e1:d7:87:5a:bb:e2:3c:7c:58:06:8d:67:00:81:cc:
         f7:cc:42:aa:7f:01:a7:2c:0a:23:63:61:5e:e2:b5:06:9b:d7:
         5a:c6:c9:d1:e7:5d:2f:44:c3:ee:81:3c:de:a1:0f:63:9a:2b:
         18:56:90:01:bf:fe:3b:85:61:de:a3:c7:35:dd:8d:ad:31:92:
         b5:cf:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:20:55 2025 by rpki-client