Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/739DBB62607411F096A17648C4F9AE02.roa
File:                     739DBB62607411F096A17648C4F9AE02.roa (raw, json)
Hash identifier:          9SlJee6ZtpQfuAi2Z98/1pSBpt9+YLT93Ok18eIAwww=
Subject key identifier:   4D:59:34:6F:05:41:27:C0:A4:E6:5B:8D:E7:D3:55:24:70:98:23:8E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C023
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/739DBB62607411F096A17648C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 05:36:12 +0000
ROA not before:           Mon 14 Jul 2025 05:36:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154015
IP address blocks:        2402:1420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 10:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49187 (0xc023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 14 05:36:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6874974c-9a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:3d:57:a1:b1:3c:c7:24:a7:ca:02:a4:80:
                    fc:44:c0:76:66:56:87:8b:92:59:00:80:58:d3:8f:
                    4e:d2:0b:ac:a2:05:14:fb:7b:50:21:d1:34:62:e0:
                    65:d4:06:57:28:e1:ad:11:2d:06:91:4a:3c:f1:b5:
                    4c:ce:43:31:20:fa:c8:ba:29:44:23:14:e8:52:0d:
                    59:28:7c:49:0d:d2:0c:fb:33:77:9d:d0:bb:ac:e4:
                    38:9c:a2:0c:da:63:3c:8c:25:a9:bb:22:aa:79:f5:
                    d4:fe:4e:f9:93:26:53:7b:75:b0:dd:ac:3c:eb:43:
                    35:c9:73:3e:a9:03:1d:ae:84:53:ba:36:ce:e2:9f:
                    69:c1:54:69:d4:a3:c5:55:fb:33:f2:66:01:6e:8b:
                    a9:d3:ea:c4:45:f2:7c:c0:91:54:44:53:3a:af:7e:
                    e4:c4:cc:9c:5d:e4:1a:03:fb:2d:5d:f7:aa:5a:73:
                    67:67:8c:ca:01:51:fe:e1:81:32:4b:45:a2:98:ee:
                    8c:cd:f1:73:c5:2d:34:5b:ec:36:d9:20:80:ae:95:
                    ee:09:e6:74:fe:c4:76:d8:b5:6b:7a:48:7f:4b:40:
                    28:21:b2:18:5d:9c:44:df:4a:fb:b9:97:88:81:61:
                    b7:e2:f3:ba:ff:04:b6:8e:56:69:99:b6:e6:6a:48:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:34:6F:05:41:27:C0:A4:E6:5B:8D:E7:D3:55:24:70:98:23:8E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/739DBB62607411F096A17648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1420::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:f7:0f:c1:44:aa:e4:18:03:8e:fe:0c:6d:76:94:23:fe:
         a2:87:1b:15:81:73:59:3e:8c:6c:34:81:52:1b:6c:cf:35:88:
         fd:8d:2c:e2:d6:dd:34:fe:2b:22:e7:6d:71:f7:e0:66:83:c8:
         45:7f:37:d3:a9:f6:11:35:0d:bd:70:58:88:5e:2d:19:e1:7a:
         25:b6:5b:e0:3a:56:b9:c9:09:14:a9:a8:6c:4b:79:67:59:b7:
         2f:7a:b4:de:d5:be:ed:51:93:3b:fe:f5:75:74:1e:51:e3:4b:
         ef:dd:47:0c:e9:df:43:da:49:21:d6:79:1b:cd:fe:11:00:1f:
         40:e3:76:13:80:c5:1e:92:0a:0f:9c:f7:4a:7d:41:bd:d9:dd:
         26:54:7d:1c:a3:c8:eb:5b:57:b6:79:05:91:08:83:f8:91:fd:
         b1:bd:30:51:13:e9:e6:09:71:0e:59:c3:02:55:ad:6d:24:f9:
         95:8d:14:40:92:34:3b:ab:e5:d1:08:94:3b:a5:07:8b:88:c6:
         53:34:4b:03:15:b3:32:fe:fd:cd:0d:05:65:da:6f:dc:e6:11:
         e6:ee:e7:6e:59:35:67:51:72:45:44:3a:1b:23:c6:35:79:45:
         86:17:7d:41:dd:b3:b6:23:f6:aa:8f:63:68:4a:ec:96:07:8e:
         c3:51:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:49:58 2025 by rpki-client