Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
File:                     E1ADA4BC062B11F08449516EC4F9AE02.roa (raw, json)
Hash identifier:          irCyzZt8lLVT2O/nBYFOPs0nEEY6FDn9ohpC+rSN6lg=
Subject key identifier:   C2:FD:5E:2E:ED:8D:AB:6E:B7:59:1B:C2:28:8D:2C:59:45:73:DE:36
Certificate issuer:       /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial:       164B
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
Signing time:             Fri 21 Mar 2025 08:45:37 +0000
ROA not before:           Fri 21 Mar 2025 08:45:37 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     134963
IP address blocks:        2401:8680:4000::/40 maxlen: 48
                          2401:8680:4100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
                          rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5707 (0x164b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187465
        Validity
            Not Before: Mar 21 08:45:37 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67dd2731-72ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:56:3c:0c:b3:73:71:f8:10:20:10:72:9e:
                    80:28:14:9b:c1:79:71:59:2d:82:fe:c6:c4:16:56:
                    1e:7d:03:84:4d:54:f7:c4:af:21:19:6a:eb:15:ad:
                    8b:b7:36:5a:f0:12:4e:d9:6f:65:70:31:6b:d6:f3:
                    13:84:f6:cc:f0:82:15:f3:7a:53:65:97:d7:3d:9f:
                    d3:c5:a7:cc:89:9e:cc:6d:6c:58:6a:41:b4:db:ef:
                    be:1c:11:d3:6e:d6:04:5c:e9:c1:34:45:a3:6d:c3:
                    5d:36:d9:e3:25:e1:5a:05:09:79:a9:df:a1:92:99:
                    06:c4:e8:cc:37:f8:63:ea:37:5b:93:f9:bc:bc:2e:
                    ae:bc:e1:a4:9c:38:02:cb:61:e9:62:9f:3d:36:4b:
                    22:6e:00:f0:9c:5c:21:ec:09:90:4f:30:7f:65:a7:
                    52:16:0e:50:ed:4d:89:0a:7a:50:bf:39:53:cd:b2:
                    11:99:ec:9b:3e:67:f2:ab:c5:23:c7:65:96:36:09:
                    0e:72:d0:cc:b3:d8:a3:03:86:be:55:4c:ee:ab:0a:
                    50:72:72:ca:9c:16:d5:e7:29:a1:da:36:19:ce:e1:
                    c7:c8:d7:ad:c6:1f:66:bb:de:f6:b3:93:5c:5e:fc:
                    97:f4:6a:eb:ef:fd:0b:9b:a9:e8:23:a6:66:ca:73:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:5E:2E:ED:8D:AB:6E:B7:59:1B:C2:28:8D:2C:59:45:73:DE:36
            X509v3 Authority Key Identifier:
                keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8680:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         6e:cf:dd:33:70:92:76:89:26:31:83:50:6d:a8:6d:44:fd:65:
         00:e8:39:81:b3:0b:90:b2:d4:7a:d7:e9:ef:bb:e7:7c:65:69:
         d2:30:68:a1:be:d9:51:48:1d:a8:12:ff:92:3c:12:4b:b7:ae:
         00:19:44:3d:20:74:4b:f9:02:3f:1f:89:31:0b:76:18:80:4c:
         63:2c:d5:70:0f:0f:bc:ad:64:04:48:ff:26:15:ab:b5:c8:9b:
         2d:17:58:cd:f4:b5:46:16:48:9a:84:32:84:49:f8:12:0c:47:
         9e:24:f9:53:1e:67:d3:7a:1f:ec:bd:7e:d7:8a:bb:33:f2:a2:
         21:be:ec:93:6b:2e:c3:78:f3:bd:2c:9a:81:92:2b:09:7d:f7:
         1d:1d:0d:9a:05:d2:64:ae:e6:4b:6e:44:30:a3:b9:16:0d:47:
         c5:ff:15:b9:5f:cb:cc:83:cc:8d:fa:b1:5e:8c:25:61:1b:6b:
         e1:04:cc:65:63:e4:36:2d:73:ee:a2:46:66:6b:6c:6f:4a:2f:
         27:8b:92:e5:a6:b2:de:e2:80:e1:d4:34:9b:a0:eb:27:77:d1:
         74:be:b5:0a:95:12:f5:d0:d0:04:e0:5c:8c:3c:fb:9c:2b:fb:
         9e:e2:04:8d:20:89:bf:7f:d6:e7:ff:a7:d1:d2:dd:22:89:db:
         94:87:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:58 2025 by rpki-client