Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/C6047A6481A111F08CBC9741C4F9AE02.roa
File:                     C6047A6481A111F08CBC9741C4F9AE02.roa (raw, json)
Hash identifier:          bgbW7xHV4YTAXMUDumTfB3UuK2rCir4YSQMN24IIGfM=
Subject key identifier:   B6:62:84:FA:FA:43:6D:D8:2E:82:F6:FE:C7:36:3A:5D:83:1E:5D:F6
Certificate issuer:       /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
Certificate serial:       1F
Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/C6047A6481A111F08CBC9741C4F9AE02.roa
Signing time:             Mon 25 Aug 2025 10:53:46 +0000
ROA not before:           Mon 25 Aug 2025 10:53:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154020
IP address blocks:        2001:df6:2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl
                          rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 08:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
        Validity
            Not Before: Aug 25 10:53:46 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ac40ba-7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:6a:17:8f:bf:42:91:74:d7:76:65:f7:12:
                    46:69:82:f7:24:51:a7:e1:c9:36:07:a5:b3:dd:3e:
                    bf:78:f7:5c:57:b9:0c:2c:2c:b5:b5:1f:67:50:46:
                    3e:e1:41:bf:aa:68:a0:bd:ab:db:1b:2e:9c:05:ae:
                    b7:fa:de:1a:8d:38:ce:fa:af:90:61:38:3e:e5:1c:
                    43:99:54:12:02:e3:da:12:96:5d:00:1b:b8:29:8a:
                    e9:88:bd:52:59:94:86:8e:2c:b7:c0:b1:b6:59:3c:
                    8c:9b:6a:2b:d4:1a:6e:02:d9:9f:73:9c:5c:fb:34:
                    69:62:83:e6:3a:9a:32:68:5e:df:3c:8b:ae:4a:bd:
                    ff:99:24:cf:e3:1d:a4:e7:25:28:2c:c7:5f:ca:e2:
                    3f:1d:83:35:df:4e:f1:76:56:8a:3f:aa:d7:4b:d8:
                    a0:f8:e7:07:22:16:ff:c9:08:d3:c7:1d:57:07:62:
                    9e:0d:ca:4b:82:a0:d1:ca:c1:b5:6d:86:80:ff:8e:
                    3b:ec:d1:32:e0:76:7e:b1:8b:36:72:e0:2d:da:ce:
                    74:0f:22:3a:c4:b3:7d:e2:29:3e:c6:0d:bf:fd:b8:
                    6b:f3:7b:ba:ba:d7:e3:b2:a2:c6:9e:86:6a:6b:f0:
                    68:0b:e8:71:88:3d:7d:64:8a:bd:a8:3b:67:43:e1:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:84:FA:FA:43:6D:D8:2E:82:F6:FE:C7:36:3A:5D:83:1E:5D:F6
            X509v3 Authority Key Identifier:
                keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/C6047A6481A111F08CBC9741C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:45:a0:09:59:7a:55:4d:ec:5e:c3:c7:54:51:36:b5:d8:
         a9:12:0f:47:81:b6:67:fa:2d:ab:d1:4d:2c:c9:a2:16:1b:a3:
         35:ca:50:25:0f:a7:27:c7:7b:c0:e5:b8:9a:5d:b3:91:c3:56:
         2b:ed:1f:c0:cd:6c:27:36:6f:1d:16:04:47:18:de:19:ac:38:
         b4:7a:b3:cf:c3:26:50:6f:5d:e0:1e:99:be:75:48:1b:31:42:
         e7:fb:c7:b7:11:1b:4e:b1:45:9e:1a:af:11:fe:b9:25:17:f2:
         49:41:1d:a1:11:bd:4a:8d:0a:64:35:43:2f:fa:fe:be:93:e0:
         d2:76:59:24:fd:68:7b:7a:e9:8e:e2:e6:92:c5:07:a5:29:81:
         74:22:60:7f:9f:18:c7:29:28:b8:20:f3:73:93:c5:84:da:af:
         71:d2:8e:90:96:f2:20:43:81:36:0e:a6:21:14:4f:97:c6:77:
         07:ab:c7:86:fd:49:eb:c2:c3:3c:05:b8:a2:e8:ae:49:a2:e6:
         74:25:2c:d3:fb:d3:43:10:fa:ca:58:5f:6d:95:92:ed:2f:43:
         0e:c5:14:b1:93:81:fb:a6:68:6e:3b:38:10:1d:5d:bf:f5:d9:
         14:76:d4:46:2e:2c:38:08:8a:50:da:ea:93:90:ae:37:4d:27:
         5f:9b:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:51:32 2025 by rpki-client