Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
File:                     11763FC8648D11F0950AB94BC4F9AE02.roa (raw, json)
Hash identifier:          86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=
Subject key identifier:   40:29:EB:C8:45:4B:B8:82:F3:6B:2E:23:F2:01:00:C9:66:E5:25:E4
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       C7
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
Signing time:             Mon 25 Aug 2025 06:13:47 +0000
ROA not before:           Mon 25 Aug 2025 06:13:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136461
IP address blocks:        2401:b6a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Aug 25 06:13:47 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68abff1a-95f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:96:69:3e:40:e6:ee:05:8f:a0:a1:b3:62:
                    b6:22:08:90:00:1a:99:f2:de:5e:e5:21:7d:44:06:
                    1c:7b:6a:be:76:fa:01:ce:98:05:c9:46:e7:49:6a:
                    d1:fb:ea:e5:d4:ab:a7:73:0f:24:ac:0c:29:c1:aa:
                    9f:4c:bf:86:47:ac:38:9c:07:eb:cc:e1:49:91:c5:
                    1c:cd:2e:8f:81:c4:cc:a0:48:9b:ec:51:d1:a7:97:
                    3a:ed:c5:f9:c9:8a:4b:06:1b:55:1d:ad:ea:46:13:
                    07:d8:67:d7:0b:f1:49:bd:c1:0c:1d:f7:ae:f9:ab:
                    93:96:40:d4:28:e5:21:e4:ad:99:a1:36:48:ee:5d:
                    a3:aa:75:e0:75:16:45:5f:76:98:6e:81:49:d8:f1:
                    33:ba:a5:e8:0f:aa:93:3b:9f:dc:ba:ff:ad:c1:8a:
                    a0:42:87:8b:a6:11:0f:14:9a:fd:23:3f:d1:fd:27:
                    39:da:57:43:d1:19:c7:27:2b:44:09:73:85:d6:80:
                    55:e8:ed:f4:b4:aa:f1:a3:4c:55:ad:1e:1f:25:93:
                    bb:49:a1:12:d2:5d:e7:41:56:5a:39:a7:8c:df:02:
                    32:77:13:22:4e:15:65:0f:38:d3:1c:49:84:67:fd:
                    d6:9b:c6:9e:0a:44:ba:b0:45:14:c5:dd:d4:6a:a4:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:EB:C8:45:4B:B8:82:F3:6B:2E:23:F2:01:00:C9:66:E5:25:E4
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:60:79:2b:e9:de:71:3f:70:73:37:23:11:4f:f7:e4:58:1d:
         d4:3b:f2:e9:fb:f4:35:a0:ff:1a:3e:01:c6:7e:2c:a3:d1:24:
         be:5f:ca:b4:21:f4:5f:24:18:bd:31:6e:e8:e6:d5:3b:1d:34:
         0b:4f:ce:64:ce:73:c9:47:99:db:31:72:e7:a0:dc:d8:91:da:
         5c:7f:4f:dd:d9:f3:a8:b1:5a:9f:52:1e:b0:67:d4:aa:88:82:
         3d:80:44:d4:e8:0f:4c:63:df:34:43:39:3d:b7:c1:4d:d3:40:
         b6:dd:dc:35:01:de:11:37:26:58:d6:00:5d:ac:39:b7:d5:f8:
         ce:ee:50:b9:9c:af:7f:fb:96:8a:a2:01:12:6b:87:31:36:3b:
         45:d9:91:19:c2:85:ca:55:02:64:a9:31:12:4a:20:04:25:7c:
         52:b0:d7:46:fe:3e:5b:3b:09:60:56:82:90:34:0c:39:9f:02:
         a9:14:75:f5:ab:ee:8c:43:89:94:f1:2b:47:19:41:bf:ac:ad:
         3a:86:e2:1e:84:91:36:45:5a:33:39:da:6e:e4:cb:a1:f8:59:
         fb:c8:85:71:14:ca:35:3a:22:bc:9a:44:e7:ee:db:12:59:9d:
         a6:d0:2b:2d:e0:5e:79:64:e9:77:b6:b3:75:bc:28:9f:26:33:
         aa:8a:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:05:21 2025 by rpki-client