Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
File:                     8A0E66D647FC11EE838F6160C4F9AE02.roa (raw, json)
Hash identifier:          QybDkxZsIA9LhScKa+XNkLDfh3ltBF5Yhpro/oGoLB8=
Subject key identifier:   EF:B7:53:D2:23:E1:1B:E9:3F:8F:B4:7A:A0:F3:AC:83:05:AA:46:9E
Certificate issuer:       /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial:       06BB
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
Signing time:             Sat 06 Sep 2025 23:03:21 +0000
ROA not before:           Sat 06 Sep 2025 23:03:21 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150139
IP address blocks:        2403:6900:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
                          rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 23:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
        Validity
            Not Before: Sep  6 23:03:21 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68bcbdb9-b76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:c8:74:ec:ee:12:cb:dd:ba:82:06:7f:0b:
                    e4:f6:5b:7a:4b:52:2b:7c:59:88:30:5d:e3:2a:50:
                    8e:6d:b2:6e:f0:7d:b7:df:2c:3b:a6:47:3d:3b:ae:
                    cf:e2:6c:82:de:f2:ca:99:9c:63:ac:7e:f2:65:4b:
                    a7:c9:d5:06:17:0e:3e:4c:14:e3:6f:a4:a7:65:bc:
                    a1:91:7b:7c:f6:79:20:9a:2a:8a:62:0a:55:2a:3a:
                    8c:74:3e:37:2f:b6:aa:d5:b6:31:c9:ab:56:d0:d1:
                    b7:32:4e:3c:15:e0:95:9a:8f:17:7b:92:74:f8:c1:
                    07:d8:bf:28:7f:0a:f3:4f:27:ac:5d:be:f5:62:43:
                    bb:20:67:29:68:d8:52:02:17:5d:0e:97:1f:15:8a:
                    f1:1d:02:71:cc:b6:a1:93:2d:be:98:58:1c:6c:71:
                    6e:9e:72:52:d5:bf:41:a4:13:e6:13:c2:3c:3a:df:
                    b9:38:5f:a8:62:00:77:9c:a0:17:56:0a:9f:18:a5:
                    16:2f:f0:65:c8:a0:1b:28:1b:7c:50:de:8d:21:d8:
                    e2:27:84:4e:10:0b:71:b5:b1:e1:06:27:a0:5e:da:
                    e7:c4:07:f8:ad:13:2b:22:f5:94:75:35:3f:37:de:
                    8b:52:7b:71:16:79:23:70:87:e3:c9:77:5b:b2:8d:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:53:D2:23:E1:1B:E9:3F:8F:B4:7A:A0:F3:AC:83:05:AA:46:9E
            X509v3 Authority Key Identifier:
                keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:6900:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:08:5f:7b:56:d9:09:4b:e1:e2:c2:f9:63:90:e4:56:04:bd:
         aa:13:ca:a7:49:fd:7b:e1:6e:3e:90:1e:09:64:c2:d6:55:97:
         9b:01:f8:cf:28:e6:17:71:77:78:56:d9:7f:85:d1:23:84:4f:
         c9:31:b1:f9:d4:bd:6d:2e:2c:c6:d4:44:85:34:d5:52:f3:5b:
         61:8e:1a:fd:35:32:a6:54:f1:f7:31:af:2d:c4:3a:63:c2:03:
         30:63:f8:e0:cb:1b:1b:93:b5:c5:a9:4c:16:55:d0:b3:47:d9:
         c4:d0:8c:b3:3a:a4:04:6e:cb:34:b6:99:19:8e:eb:ef:0b:ef:
         db:53:59:6a:e9:2a:63:3c:db:25:35:6d:9b:7c:6e:8f:b1:79:
         3d:9a:a2:bf:a5:58:82:7f:90:c5:0f:8b:1a:37:d8:aa:7d:a8:
         ed:c4:ab:03:01:5a:6e:ee:35:cb:97:75:ff:18:3b:0c:df:c1:
         7e:9d:55:04:13:3e:2b:69:74:7e:26:24:02:34:27:56:f3:5e:
         8b:be:2f:96:52:ec:0e:6b:fc:7b:c7:ac:ba:0c:e3:34:c1:c2:
         28:b0:ac:bc:5c:62:f2:f7:28:32:38:9d:e9:45:09:fb:00:4e:
         26:a5:52:fd:cf:e6:05:24:d4:73:f8:2e:c1:17:a3:27:24:a3:
         aa:97:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 20:26:40 2025 by rpki-client