Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
File:                     E0FF171A440411EF85685B0DC4F9AE02.roa (raw, json)
Hash identifier:          KrnQqDXD/GjL/9lZ4fC1ZX3TT1+IBpldk3tM8hf1uJU=
Subject key identifier:   9C:1E:7D:0E:00:06:B4:0E:41:13:B3:92:FE:0C:03:09:59:DA:F4:6A
Certificate issuer:       /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial:       01AC
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
Signing time:             Thu 23 Oct 2025 05:18:48 +0000
ROA not before:           Thu 23 Oct 2025 05:18:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     152111
IP address blocks:        2401:3620:2200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
        Validity
            Not Before: Oct 23 05:18:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f9bab7-d4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:b1:93:45:c3:df:89:e2:7b:49:16:1d:c3:
                    48:4c:fc:db:de:c4:cd:79:4d:08:af:86:4a:10:7b:
                    8c:a1:2b:e0:62:ba:25:d1:81:94:45:ee:00:87:f8:
                    e4:ef:8b:56:bf:7e:3f:33:ae:46:26:cc:60:df:1f:
                    23:c2:af:6a:52:bf:af:56:00:3b:55:d9:d2:70:e4:
                    79:b9:c8:69:b1:f2:5c:03:f3:26:d9:69:b3:05:a8:
                    a4:8a:af:ee:e9:f4:f2:13:b8:43:6b:35:65:ae:7a:
                    e9:5f:08:42:78:f5:eb:2e:b8:d4:19:1c:db:e3:e5:
                    bf:43:37:8b:24:87:c7:27:a8:02:48:f7:2b:d9:f7:
                    aa:80:d7:4d:5c:3f:d5:d1:f2:a1:2a:be:0e:1b:78:
                    80:77:ce:e2:9e:a4:e0:9a:ac:be:e6:0e:7a:6d:68:
                    5d:18:33:b7:45:b3:b7:60:fd:56:c0:fc:ee:41:9c:
                    99:15:71:8e:ed:5d:5a:28:db:45:e8:72:88:6b:cc:
                    6f:cb:60:13:de:c4:31:ee:cd:3c:c5:0b:f8:95:08:
                    97:88:76:3a:2c:37:99:ce:26:4a:ec:17:b3:62:91:
                    ce:71:03:cf:85:8c:04:d7:ab:94:27:a6:53:44:80:
                    56:e4:9c:b7:a6:70:09:98:10:bd:ed:6b:37:00:99:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:7D:0E:00:06:B4:0E:41:13:B3:92:FE:0C:03:09:59:DA:F4:6A
            X509v3 Authority Key Identifier:
                keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3620:2200::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:2a:65:cd:40:55:9a:09:12:44:bd:3b:df:3c:a6:8d:83:
         8b:cf:cb:83:23:73:b6:e2:01:2b:d3:45:82:24:da:73:dc:93:
         89:25:7d:5b:7d:1c:e7:b2:1a:e1:65:f2:d8:6a:08:09:0b:ce:
         6f:d5:a4:35:2a:28:4e:a4:30:ba:54:c0:e1:5c:1f:e3:af:7b:
         fd:15:6f:7e:af:9d:d0:e5:bc:07:e4:c0:5b:08:24:e3:77:66:
         07:1d:8e:4f:96:40:42:df:55:68:ee:1e:a5:17:db:05:29:44:
         4b:92:64:e0:8a:5e:ba:cb:05:c9:17:fc:6e:fe:fa:85:73:d5:
         2f:c1:a0:4f:ea:02:20:68:c5:d0:cf:c3:e4:0e:c7:2b:0f:38:
         58:9c:b0:62:00:76:66:57:73:1a:e5:9e:28:c5:1c:d6:af:7c:
         53:b2:90:2e:f6:73:c0:15:80:09:4f:2d:bf:a4:ee:41:85:03:
         19:e6:42:48:73:f6:0e:9c:e2:cd:b1:03:ea:df:b1:74:4e:92:
         2c:b0:f5:ba:ed:ba:91:39:0a:ae:16:09:bc:1b:41:56:83:ad:
         75:dd:1c:e1:d8:aa:16:e0:3b:ad:77:25:47:4f:77:26:42:ff:
         6b:b4:01:5f:6d:45:8c:28:97:b4:85:ce:50:28:42:6d:48:8b:
         19:02:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:05:39 2025 by rpki-client