Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/16A3B47EED7A11EAB00FA463C4F9AE02.roa
File:                     16A3B47EED7A11EAB00FA463C4F9AE02.roa (raw, json)
Hash identifier:          p7tQRESvOucR4loUarfHpuL5VMHiMFu4353xIOkSzpw=
Subject key identifier:   68:DC:AF:81:AA:E5:F9:0E:20:77:4B:20:15:3E:F1:2F:A6:73:55:02
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1A81
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/16A3B47EED7A11EAB00FA463C4F9AE02.roa
Signing time:             Fri 04 Apr 2025 16:45:06 +0000
ROA not before:           Fri 04 Apr 2025 16:45:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132824
IP address blocks:        2401:3740:374::/48 maxlen: 48
                          2401:3740:375::/48 maxlen: 48
                          2401:3740:376::/48 maxlen: 48
                          2401:3740:377::/48 maxlen: 48
                          2401:3740:378::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6785 (0x1a81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8
        Validity
            Not Before: Apr  4 16:45:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f00c92-d691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:53:d7:f5:04:0c:b9:ce:74:f1:49:e3:4b:
                    b7:a5:08:6a:b8:c1:cc:ef:c0:ed:51:23:7e:af:d3:
                    35:e8:f7:93:07:33:06:1f:f8:c2:9c:75:94:1f:8a:
                    d7:83:fe:1c:3c:38:4f:7d:1f:d1:7e:0e:30:4f:19:
                    cf:ff:74:48:a4:e4:0d:98:33:52:8a:eb:cc:c9:12:
                    2c:87:99:ee:a1:a1:c1:f5:3b:07:ce:33:11:ac:9a:
                    fd:6c:fc:10:43:8e:ce:b7:ee:b7:2c:2c:dd:94:68:
                    a3:92:1e:8a:f3:ba:03:9c:be:26:12:ff:e6:6a:36:
                    90:47:fd:f3:97:8f:8d:da:57:9e:2c:d3:2b:61:26:
                    1b:2b:8d:c8:e4:be:80:a9:fb:37:77:96:d2:2d:e0:
                    f9:af:5e:00:32:dd:70:74:91:3c:03:a6:62:c1:b6:
                    81:12:28:21:fb:77:15:a9:50:37:0c:fc:67:02:19:
                    6a:6a:2e:23:4a:82:4d:b8:8d:99:a1:21:a3:4a:52:
                    e6:2c:7b:8c:d1:13:4c:4d:34:6e:0e:59:50:b9:df:
                    a9:e1:7b:12:df:3d:06:f2:d3:18:19:81:4b:50:b9:
                    a9:88:a0:88:b7:4a:3f:97:da:20:1f:75:84:42:08:
                    12:78:f4:ae:2b:26:ea:c6:a9:0b:56:77:39:fe:9b:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DC:AF:81:AA:E5:F9:0E:20:77:4B:20:15:3E:F1:2F:A6:73:55:02
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/16A3B47EED7A11EAB00FA463C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3740:374::-2401:3740:378:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:a2:1a:53:59:8e:4f:2c:83:12:70:42:2b:ec:52:35:4d:
         72:ec:19:ab:fd:26:cb:aa:da:80:7b:1a:bb:7c:d8:84:44:5a:
         10:53:37:a9:6c:67:75:96:3d:43:07:c3:ec:dd:9c:79:42:72:
         0b:6b:ba:f5:92:56:4e:ac:30:49:9a:64:e4:6d:65:d3:85:7e:
         e8:af:3b:82:72:e9:71:0a:1b:75:45:03:f6:10:5e:8e:69:dd:
         63:83:f4:bf:ad:3e:28:b9:df:11:d2:e7:14:8e:c9:58:d3:42:
         03:a0:34:96:89:fd:f1:98:65:f9:63:eb:be:37:6e:48:fc:b2:
         21:9b:08:d9:e7:e4:14:54:f7:1f:78:7c:99:29:1b:ce:21:fc:
         cb:10:f3:9f:0f:d2:11:28:8b:a3:33:10:8c:2d:7a:78:72:d0:
         09:94:1e:b9:d3:b6:24:55:53:a1:c7:23:cb:58:8a:0d:fa:5d:
         ae:c3:9e:ae:1b:0e:08:b9:68:3a:67:ce:8a:9f:33:49:d8:32:
         f0:06:28:b1:5a:10:f8:b9:ba:b2:77:22:06:c4:d2:46:7a:74:
         be:4c:6b:90:2f:51:93:0d:16:b5:fd:1a:31:45:a4:85:a9:7b:
         41:c0:39:d8:d7:9c:f3:d7:57:8a:92:5b:40:a3:6f:85:b9:c7:
         b2:b3:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:40 2025 by rpki-client