Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa
File:                     6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (raw, json)
Hash identifier:          st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=
Subject key identifier:   AF:35:F9:56:D7:8F:24:FF:88:B3:F4:A2:24:AA:BF:CD:CB:4A:DA:BD
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       34C7
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 14:51:17 +0000
ROA not before:           Fri 04 Jul 2025 14:51:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     10076
IP address blocks:        202.5.192.0/20 maxlen: 24
                          2404:ec80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 14:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13511 (0x34c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Jul  4 14:51:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6867ea65-065d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:12:99:d3:a8:a0:ff:4a:17:7b:4b:4e:99:
                    a5:97:13:ec:71:08:38:10:10:f9:88:27:cf:a0:03:
                    6c:84:79:af:e7:90:3c:a9:47:d2:bf:59:fb:8b:95:
                    a2:ac:21:ff:a8:b8:8a:19:50:bb:78:c8:b6:7e:dd:
                    63:ef:60:8d:55:44:66:8c:e6:d1:8e:08:33:95:f1:
                    f7:95:ca:e0:45:2a:f8:f0:1b:72:bd:70:7a:84:9c:
                    7f:40:b3:1b:10:e4:b1:bd:18:f2:78:a3:3e:fe:40:
                    da:36:67:36:14:93:82:a2:31:a7:a9:e6:8f:c1:e6:
                    32:4e:66:30:f6:fe:f0:1a:c4:2c:e2:1c:24:66:a9:
                    fb:9e:cc:13:31:8c:41:a7:c8:d0:73:41:45:a8:fc:
                    4f:f1:f5:94:96:2b:4e:3c:14:20:32:0d:61:7d:7c:
                    22:63:8b:c1:50:35:68:51:99:8b:ec:cf:5f:56:73:
                    87:73:aa:e8:ba:e7:fb:8a:cb:32:b2:e5:4c:e0:8b:
                    d5:44:34:46:2e:b2:b7:d3:80:41:12:df:e6:16:4c:
                    82:46:cf:d6:54:25:3a:fa:e8:ba:4b:26:5f:83:79:
                    cc:e8:ea:d5:54:19:81:ca:60:f1:e2:24:45:8e:44:
                    e6:0c:c9:6c:8e:44:70:88:0f:6b:3a:79:90:f4:96:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:F9:56:D7:8F:24:FF:88:B3:F4:A2:24:AA:BF:CD:CB:4A:DA:BD
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.192.0/20
                IPv6:
                  2404:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:57:0c:63:28:fc:4f:b1:22:5e:71:12:4f:5d:d4:72:2b:dd:
         1d:62:d6:04:8b:ef:b3:d3:e6:0c:9c:a0:b1:eb:b6:10:9e:58:
         b9:2f:64:91:ee:32:e5:b1:4e:72:60:49:37:47:2e:b0:c6:9f:
         e9:b6:ad:9e:ba:e8:00:96:72:92:b2:8d:16:54:d4:66:7c:84:
         6a:2e:57:eb:2b:ce:0f:3d:3b:fe:13:de:d4:f9:78:0f:75:62:
         ed:05:1c:2d:ae:bd:07:34:37:fe:a1:37:98:42:fb:47:a6:d6:
         79:c5:3f:6d:df:df:12:38:19:8a:ed:f1:51:85:0a:5e:87:3d:
         ee:dc:55:7b:43:74:f9:89:72:29:01:ad:8c:b1:0a:f6:07:7b:
         93:6e:b1:9c:f4:bb:f4:d8:a8:c2:64:0d:db:6b:05:e8:0c:ab:
         95:41:4f:0f:3f:9f:e2:31:e4:84:6d:14:38:d2:21:b1:21:d9:
         ec:03:66:f7:2a:18:1e:74:d4:a9:b7:cd:1e:67:d2:49:fb:81:
         46:bd:fe:11:09:99:e8:02:f9:0c:b7:1f:db:22:60:48:bc:bf:
         31:34:c4:ee:47:cf:96:84:33:c7:9e:cf:7a:cc:53:37:5c:d7:
         36:8b:69:76:77:c2:1a:14:51:3d:c7:55:f5:31:73:aa:8d:2a:
         e0:44:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:16:58 2025 by rpki-client