Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/78754E2C2CC911F09800D04FC4F9AE02.roa
File:                     78754E2C2CC911F09800D04FC4F9AE02.roa (raw, json)
Hash identifier:          84Waoo3Nrve6WiZzaa3ShzBzBgFPHcrbeWx3yHsXOME=
Subject key identifier:   60:1D:28:A1:9C:19:7A:43:99:57:4E:93:33:7F:FF:FF:12:E2:84:F8
Certificate issuer:       /CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Certificate serial:       0CB0
Authority key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/78754E2C2CC911F09800D04FC4F9AE02.roa
Signing time:             Fri 09 May 2025 11:33:47 +0000
ROA not before:           Fri 09 May 2025 11:33:47 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     133429
IP address blocks:        2401:31c0:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl
                          rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 18:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3248 (0xcb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136AF7, serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
        Validity
            Not Before: May  9 11:33:47 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=681de81b-8647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:78:9f:2a:32:37:ca:c5:60:f2:40:71:76:
                    36:43:55:0b:16:16:70:0d:a7:5e:bf:b7:2d:21:ec:
                    6d:1e:75:d5:b7:05:25:78:7d:18:fe:44:30:53:01:
                    7e:c2:74:59:3a:4a:50:9c:db:b8:23:a3:a6:71:f3:
                    55:99:c8:23:1e:aa:5b:af:c9:51:f8:cd:61:2f:d7:
                    cf:67:3e:98:f1:85:71:62:c0:a3:37:5e:bb:1b:47:
                    99:e8:03:80:f2:2b:2f:05:92:6b:bd:d7:ce:b2:b7:
                    39:53:0b:83:1a:2d:b1:7c:2a:83:ef:50:1a:67:de:
                    79:13:bf:54:d0:bb:f6:07:e7:3c:15:57:58:c5:e7:
                    16:cf:b5:77:85:53:16:d3:61:9a:af:d9:40:8f:95:
                    e8:da:b0:1a:97:69:be:75:d1:a5:88:24:ee:75:27:
                    47:aa:d5:2e:bc:ef:b8:80:64:f3:7a:a4:3e:a5:6a:
                    e5:26:6e:83:8d:4e:79:6d:d0:34:89:52:b7:da:56:
                    5c:11:ee:53:a1:cd:ba:9d:e3:67:40:ac:17:9d:51:
                    37:b5:8f:10:62:e4:35:bd:2b:a7:51:4b:83:31:98:
                    0b:98:60:8b:d0:4d:5e:41:15:45:9d:28:37:64:dd:
                    43:5c:f7:d9:ac:c2:1f:d1:68:60:81:07:56:29:5c:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:28:A1:9C:19:7A:43:99:57:4E:93:33:7F:FF:FF:12:E2:84:F8
            X509v3 Authority Key Identifier:
                keyid:28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/78754E2C2CC911F09800D04FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:31c0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:10:dc:b9:33:c8:2c:3f:eb:1e:1a:8c:2f:ec:b4:58:69:e4:
         43:91:b1:99:91:de:8d:34:ef:b8:1b:14:51:10:d2:a3:0e:b7:
         59:e7:86:d6:d2:4c:63:c7:a3:87:2a:31:32:72:8f:55:44:21:
         6d:a9:a4:48:9b:9e:48:81:c5:94:d7:5e:c4:d7:db:3a:10:8c:
         f6:77:ee:f9:d6:96:f3:a5:73:bc:6c:38:a2:e0:a1:04:1e:d1:
         f7:cc:90:f8:98:be:95:56:f2:46:1f:47:ac:d3:00:87:b7:89:
         30:3c:af:26:55:1d:67:4b:a4:85:02:0b:ab:a7:28:f1:3b:1f:
         c7:43:64:f3:76:1e:eb:0f:c8:08:43:42:cb:5f:cd:05:67:d2:
         5c:77:48:4f:fe:93:ab:7c:30:7e:a8:6f:04:1c:4e:95:4e:86:
         4f:1d:60:46:d1:4b:c7:47:f8:85:c0:d4:01:29:c6:de:04:5e:
         9c:53:7f:4b:28:d9:d4:63:54:d3:93:fa:0a:dd:a2:3b:a4:51:
         8a:47:e2:94:2b:61:06:1c:96:82:9d:22:b1:ab:9c:57:98:2d:
         95:63:13:a0:aa:7b:45:70:3f:c7:81:40:63:45:ea:a1:84:be:
         54:8f:53:99:16:85:21:28:22:0f:47:c7:99:2c:82:d8:0f:3b:
         b2:8b:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:08:27 2025 by rpki-client