Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
File:                     616435103F3E11EE81024074C4F9AE02.roa (raw, json)
Hash identifier:          BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=
Subject key identifier:   39:68:3C:30:24:43:F2:8C:EC:C9:2E:B1:1C:06:D1:EA:B8:6F:8B:EF
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       03FB
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
Signing time:             Thu 13 Feb 2025 02:13:44 +0000
ROA not before:           Thu 13 Feb 2025 02:13:44 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     9312
IP address blocks:        2400:8d60:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4
        Validity
            Not Before: Feb 13 02:13:44 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67ad5558-fe75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:e3:d4:64:20:f7:08:81:56:7c:a2:f5:ea:
                    7c:4c:81:16:89:c4:14:fa:eb:35:c5:b7:90:23:6d:
                    70:6b:51:be:b0:cc:9c:4b:89:76:97:4e:b2:d9:d8:
                    fb:4b:31:b2:96:3d:18:6e:df:51:aa:cd:39:93:3e:
                    10:41:5d:cc:cf:ea:b9:62:33:9c:e4:d9:f4:0f:e7:
                    04:a1:87:57:82:ad:26:43:55:ad:8e:fc:b3:41:05:
                    23:a9:5d:c3:3c:9e:4a:2a:ef:56:0f:0c:72:f0:6f:
                    89:50:03:0f:4e:e6:74:85:b1:98:eb:1f:04:ca:4d:
                    c0:09:e2:3a:eb:f2:01:95:84:23:84:e0:5d:1f:f1:
                    5e:28:59:fd:74:e2:51:66:5b:d6:d9:47:48:5f:49:
                    c1:c4:60:96:9e:55:fc:3b:a3:51:93:0a:2a:13:97:
                    40:e1:73:e4:e4:38:57:31:c1:d4:f8:65:f1:2f:a3:
                    91:5c:23:c1:7d:4a:f4:db:86:11:36:54:bb:34:0b:
                    5f:31:ae:b2:7b:97:25:48:d6:7c:90:95:8b:64:e5:
                    7a:e1:ab:55:fd:11:8b:08:7c:92:9c:0a:b0:5b:df:
                    04:4f:a7:b0:b3:03:2f:9d:f1:d3:ea:92:60:6a:fc:
                    a4:e7:3c:8a:3b:68:25:ef:eb:a2:a1:88:c8:16:1e:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:3C:30:24:43:F2:8C:EC:C9:2E:B1:1C:06:D1:EA:B8:6F:8B:EF
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8d60:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:94:c3:82:f5:dc:4b:8f:5e:99:68:17:20:8c:ae:6a:d3:
         6c:98:f3:01:e3:b6:17:26:86:e3:12:17:97:a4:8b:54:35:6b:
         6e:88:98:20:1a:21:70:99:17:eb:b9:1c:3c:5c:d0:ec:df:6f:
         7d:bc:57:25:87:21:ad:be:38:9f:8a:74:8a:cc:b0:70:a6:77:
         2c:97:7f:ae:04:93:35:28:2a:f2:8b:6f:b1:5c:ce:1c:c2:1b:
         50:3e:08:b4:19:ca:e1:3c:08:e9:f8:aa:9a:70:5b:2a:a0:ef:
         58:d3:0c:70:a1:4c:59:66:8b:f3:de:73:4d:19:a8:c7:2a:9f:
         69:e3:0e:e3:8a:f2:a0:3d:6a:d5:fe:e1:22:f9:88:43:e7:32:
         3a:18:9e:36:06:a8:be:7e:63:10:63:d4:ad:88:67:11:13:43:
         44:14:d6:be:ff:ec:18:47:04:44:68:9b:ae:31:ed:59:94:90:
         4e:78:32:50:a6:bb:f7:05:a6:b0:52:7b:84:74:7f:a9:03:3b:
         ca:f3:8a:6c:e3:23:91:55:6d:6e:c5:f7:34:a7:9f:1f:ec:17:
         66:d0:b3:76:c1:08:ab:d7:e4:38:01:04:b6:12:ec:08:86:f2:
         f7:9f:87:37:df:ce:bb:e2:f9:5d:ec:86:fe:6c:9f:52:02:aa:
         a2:f5:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:12 2025 by rpki-client