Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
File:                     F4A77A06CED911ED9BC69385C4F9AE02.roa (raw, json)
Hash identifier:          OUewL85nRVoETpSnxouJtXZ3L1bDXbwRe3ztxVw9Gdo=
Subject key identifier:   A7:E0:FA:F6:1F:90:E3:1A:1B:53:BE:83:02:B6:B7:DE:2F:0E:36:6E
Certificate issuer:       /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial:       0D24
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
Signing time:             Tue 08 Jul 2025 17:26:06 +0000
ROA not before:           Tue 08 Jul 2025 17:26:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55990
IP address blocks:        94.45.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 16:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Validity
            Not Before: Jul  8 17:26:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686d54ae-b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:2e:5a:0b:f9:74:57:59:41:25:95:10:2c:
                    ee:28:df:44:96:41:0f:99:f9:33:6d:53:a3:26:3c:
                    5a:50:7a:55:8e:70:f5:3a:57:dc:47:d2:c0:b0:ef:
                    f3:3f:33:2f:6c:fd:af:3a:12:4e:3b:7a:df:75:5a:
                    fc:6e:81:22:a4:5c:aa:58:b6:76:72:eb:9e:20:28:
                    a8:71:40:cc:cd:44:9b:c9:41:8e:c0:7e:be:18:b4:
                    75:94:53:b5:fc:5d:28:1d:70:21:ca:92:ff:2a:00:
                    20:59:4e:25:72:58:0b:4d:4a:28:56:61:81:27:b9:
                    b2:5a:fe:cd:61:9a:8a:be:a9:c9:e5:3c:0e:a6:9c:
                    a4:9f:32:66:de:7b:57:7b:81:96:fa:4d:63:eb:9d:
                    84:e5:d7:12:38:a9:06:8f:77:bd:1d:08:92:9a:48:
                    34:cc:f0:b0:83:6f:41:27:12:9f:84:33:19:cd:69:
                    dd:93:f9:b8:42:17:dd:49:27:68:e8:01:67:51:dd:
                    8b:89:b9:9a:f2:f3:86:df:1a:46:a6:79:c7:76:c2:
                    85:08:8d:60:c6:2b:b8:b4:3a:81:de:fc:c7:29:80:
                    1e:26:4a:eb:b7:45:4b:16:60:6b:42:6f:2d:cc:d0:
                    da:9d:a2:bb:21:8d:be:b2:29:b8:af:ad:42:8c:65:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:FA:F6:1F:90:E3:1A:1B:53:BE:83:02:B6:B7:DE:2F:0E:36:6E
            X509v3 Authority Key Identifier:
                keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:0a:cd:57:f9:b0:08:f3:c7:3c:3c:61:ad:2e:5a:63:c8:
         ea:59:a9:c4:d9:4d:4d:e2:9c:d9:07:3c:32:6b:0a:81:9c:79:
         cc:d2:76:17:72:09:30:02:e5:3c:53:ae:49:eb:45:6c:9d:26:
         17:f6:ad:f3:a3:b4:7e:a2:63:1e:4f:c0:e8:26:e5:32:b6:0a:
         0f:41:ca:01:b1:48:9a:da:be:51:80:10:23:6a:9a:ab:51:03:
         df:95:e0:35:51:31:b8:6b:40:ac:81:f2:04:f7:b3:a7:ef:54:
         2d:98:ba:d9:54:74:54:60:21:3b:04:0b:f5:6c:ff:ff:66:19:
         ff:24:68:25:22:ab:c1:f7:54:69:9b:56:60:cf:c2:7a:49:ae:
         76:73:54:b5:71:c7:a0:d2:29:56:e0:b2:cc:6b:3d:88:6f:b1:
         76:7d:eb:40:61:fe:43:d6:c1:ab:d3:00:f4:7f:ab:31:c9:60:
         39:b8:f5:44:9f:4c:34:fe:a7:26:4e:31:52:fc:d7:57:e7:61:
         b9:0e:50:ef:3b:91:5b:68:ea:79:cc:07:14:a4:36:03:db:21:
         95:2c:3b:36:e1:6a:e6:1c:af:48:72:36:a8:09:15:62:63:87:
         61:d2:6c:04:30:8e:77:64:8f:bb:03:00:e6:a7:c7:6d:fb:2e:
         7a:b5:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:10:28 2025 by rpki-client