Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
File:                     0722D856931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          S/V+FSIqi+kUgXCiZkiOqjGpUPU2a8XYGBOwtxaDH4w=
Subject key identifier:   AC:0B:0D:85:ED:0F:D3:DA:0E:03:4A:08:55:03:57:20:58:FA:E2:D1
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       25FE
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
Signing time:             Mon 26 May 2025 17:49:41 +0000
ROA not before:           Mon 26 May 2025 17:49:41 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     141384
IP address blocks:        2001:df0:5580::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9726 (0x25fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: May 26 17:49:41 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6834a9b5-9c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:39:c2:d8:4f:8d:ed:74:85:79:ca:0e:63:
                    20:b5:90:f2:e6:c5:15:78:6c:69:3f:3f:8a:47:a6:
                    ee:45:a3:15:99:bb:1e:97:25:48:d0:6f:8e:b7:f1:
                    15:c4:53:1f:db:30:18:a1:30:50:f0:c3:87:2e:b5:
                    f6:2a:60:3b:82:0c:6e:8d:34:0d:9f:96:9d:ec:00:
                    83:64:e5:6c:d8:a8:8f:25:5a:10:2d:de:c9:1c:cc:
                    7b:81:e1:c1:61:63:d9:bb:11:52:e3:c8:c5:e5:e4:
                    91:61:4e:1b:ab:de:fa:49:da:fb:50:e0:98:44:39:
                    e4:61:97:f8:83:8f:ff:78:ad:ce:6a:92:9b:79:ef:
                    31:75:a1:ed:13:f7:7a:e3:44:2d:e8:49:d7:01:5a:
                    55:dc:eb:27:a8:70:26:9e:c3:8d:61:31:44:d2:31:
                    09:70:e5:62:4c:ca:35:0e:69:f3:bc:ee:8c:37:6e:
                    1c:96:77:07:34:47:9b:15:d3:d7:d9:a3:12:b9:06:
                    a0:f9:47:ed:22:63:6e:a2:21:54:2f:86:5b:6e:76:
                    45:d3:51:ed:07:c9:0e:2a:88:32:a1:e3:c4:86:f5:
                    c7:6a:59:a4:27:a3:b4:15:86:cf:c4:d7:30:5f:6c:
                    16:17:e8:e8:25:d2:36:c6:6a:ad:09:86:3e:d7:6a:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0B:0D:85:ED:0F:D3:DA:0E:03:4A:08:55:03:57:20:58:FA:E2:D1
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:5580::/52

    Signature Algorithm: sha256WithRSAEncryption
         aa:f1:ab:11:d3:de:b4:d7:34:74:70:e8:b8:fc:af:1e:24:25:
         41:60:41:80:1a:07:b1:4d:46:ed:f2:38:35:5f:9d:2a:2e:b2:
         d5:6e:34:11:df:b4:30:fa:5f:67:c1:7c:3d:ef:9a:8a:d6:87:
         2d:19:88:3c:bb:7e:84:d5:b6:ed:5a:6b:0d:79:82:32:f5:2a:
         9f:b1:86:ce:36:46:32:93:43:b2:ec:c9:af:71:d9:fc:f6:cd:
         1c:b9:8f:67:1e:9f:89:86:67:94:98:9d:52:89:de:b9:6e:c8:
         25:92:75:05:89:3a:9c:b9:8f:1e:d7:b5:4c:45:3f:10:00:3a:
         2c:32:59:e4:2a:c4:19:6e:f9:44:94:50:ec:c6:64:d2:ab:cf:
         9a:fe:66:c8:09:e0:f9:76:ad:cd:f8:a7:ca:77:f6:3d:ba:0f:
         28:dd:56:bf:07:0b:20:36:7e:5a:46:44:ed:23:7e:ed:90:6a:
         82:5b:55:9c:01:58:a2:95:5d:ac:aa:ad:ca:39:e3:fb:01:25:
         6a:0b:42:b5:61:18:83:8b:c7:7c:26:91:c4:a3:c7:d0:3c:47:
         96:c4:a0:d2:d6:6a:ba:43:d4:22:73:c5:6b:28:2f:e2:20:6f:
         bd:cf:22:cf:92:51:de:31:c9:d1:fa:4d:8b:ae:36:38:9b:01:
         6d:9a:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:59 2025 by rpki-client