Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/6E68E3C8A05811F0B1978E4CC4F9AE02.roa
File:                     6E68E3C8A05811F0B1978E4CC4F9AE02.roa (raw, json)
Hash identifier:          K72GRxN+2ab3JpFVQDE8rFQueI0JJ5aBZHWdLQsQchI=
Subject key identifier:   C2:88:7B:DB:10:08:24:0E:2C:4C:4A:47:9F:AE:65:8D:F3:E7:00:58
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       8B
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/6E68E3C8A05811F0B1978E4CC4F9AE02.roa
Signing time:             Fri 03 Oct 2025 12:56:52 +0000
ROA not before:           Fri 03 Oct 2025 12:56:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     400342
IP address blocks:        2402:1da0:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Oct 2025 10:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Oct  3 12:56:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68dfc814-3606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:d4:c0:f8:d6:44:59:ce:b7:9f:bf:1f:72:
                    d2:15:71:78:e4:83:15:3e:4b:f6:12:07:90:95:e5:
                    3b:89:c6:b8:4e:fa:fb:d7:13:16:23:64:5b:f2:a1:
                    cb:f4:8c:42:3d:72:38:49:46:e1:ec:6d:87:7b:7d:
                    63:1d:55:30:8e:e9:10:0f:d1:13:12:84:24:aa:07:
                    ae:45:67:8b:38:70:06:2f:61:17:17:15:d5:e6:7c:
                    bb:7b:43:e9:c1:2f:fb:40:d2:29:31:45:31:e7:24:
                    1b:b4:6d:a9:14:8d:0d:82:f5:34:20:79:9f:52:40:
                    37:52:48:1f:26:d5:46:83:bc:6b:12:58:2d:5a:e7:
                    49:3d:b3:71:82:5e:5d:1d:b6:5c:2f:69:45:72:7c:
                    36:6e:2b:90:cf:96:4b:16:90:09:a3:30:d0:5c:0f:
                    5c:1e:4c:a9:a9:79:1c:bc:b5:2e:a9:45:75:a6:4a:
                    7c:48:ee:5f:93:9f:61:f8:7a:56:e7:cd:b8:5a:39:
                    9d:ae:3d:49:7a:b6:e0:78:5a:4a:cb:1d:06:64:38:
                    11:3b:95:8f:63:6f:9f:99:3d:30:f3:3c:b5:5e:b4:
                    22:81:e9:53:6b:ac:66:39:a0:ff:fd:29:ef:d4:50:
                    f9:be:04:a5:ff:a3:c7:34:6c:c4:bc:2b:ff:b4:b2:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:88:7B:DB:10:08:24:0E:2C:4C:4A:47:9F:AE:65:8D:F3:E7:00:58
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/6E68E3C8A05811F0B1978E4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1da0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:6c:13:00:6e:e7:aa:dc:45:72:57:ea:7e:b2:b9:ab:c8:07:
         ab:49:6a:df:f5:6f:ea:8d:e0:81:ac:04:36:2c:e6:1e:de:27:
         d4:eb:79:62:f8:05:d7:1f:00:6a:03:1c:58:e4:08:a6:47:07:
         44:e4:65:eb:f7:30:f9:a9:1a:ce:f6:5d:c1:5a:a6:d3:fd:f8:
         35:9a:ab:6c:f9:69:76:4d:61:5c:6b:69:8e:0b:6f:77:4b:35:
         91:24:6e:58:76:60:68:69:cb:e6:27:f9:9f:5a:70:0a:8d:fb:
         7a:36:c9:f0:1b:d0:96:03:98:71:93:19:da:4c:6d:b2:6d:3a:
         8b:53:89:13:3f:f2:a6:53:52:9f:4c:02:63:74:36:c2:b4:4a:
         b5:d1:24:21:a8:3d:99:60:51:6d:58:32:4c:c7:99:b1:0c:0e:
         45:7b:c5:a3:d8:44:e5:0a:c0:45:f5:a2:8f:34:da:a8:9d:86:
         58:3d:98:81:19:b4:72:8f:8e:0c:b9:58:99:b2:67:d3:e0:15:
         cd:fe:78:ed:18:2a:85:c1:f7:db:46:0d:2b:18:db:bc:8d:2c:
         d7:61:7d:22:46:e0:0f:06:6b:9a:fa:21:8b:9f:da:2b:d1:87:
         68:e3:d3:1b:b4:33:74:eb:d1:e8:f3:fc:eb:61:a1:e2:10:8c:
         d3:5d:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 22:47:45 2025 by rpki-client