Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
File:                     E1AB1F92430F11EAA60DB885C4F9AE02.roa (raw, json)
Hash identifier:          0AMWGP+6uBhgSLnnmyVJPmvq5N7a9ynJhnv9JCsPnVs=
Subject key identifier:   C6:6C:74:1D:0F:D4:34:75:58:1C:45:1B:E1:A3:57:FF:F7:05:3C:DE
Certificate issuer:       /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial:       0B39
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
Signing time:             Sat 30 Aug 2025 19:40:37 +0000
ROA not before:           Sat 30 Aug 2025 19:40:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24014
IP address blocks:        2001:df3:c600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
                          rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2873 (0xb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
        Validity
            Not Before: Aug 30 19:40:37 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b353b5-6e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:d8:a6:86:97:f3:0f:74:a3:19:59:96:33:
                    02:ae:0a:b6:7e:b4:8b:8b:ff:59:e0:fa:f1:48:28:
                    b8:5e:23:85:00:97:79:d3:b8:39:39:a0:61:ff:4f:
                    bc:a7:68:b6:09:6e:a7:c8:08:bb:d6:9a:6f:16:eb:
                    3c:59:5c:8f:9b:dc:88:0f:5a:af:0e:c7:fa:46:6c:
                    c3:02:7f:bb:e0:80:44:3e:ea:39:6a:2a:55:3e:07:
                    e7:78:73:13:dc:f2:00:04:2a:fd:f5:d2:8d:fe:77:
                    e1:a8:09:2d:46:f1:d7:98:ec:1f:2b:b4:e0:5d:9a:
                    22:1e:56:66:93:4e:97:4e:04:6b:39:c8:e9:dc:4a:
                    46:e7:4d:3c:38:7a:eb:79:9c:22:87:c5:18:a9:26:
                    a8:8e:1f:ef:c9:e6:f0:a4:c8:b4:73:c7:85:58:95:
                    29:73:d4:7b:24:9b:1e:8f:d9:b4:7e:db:26:c1:bb:
                    04:1c:35:5c:0c:2a:67:ca:6b:c8:4e:62:2d:3e:02:
                    1f:82:25:6c:fb:7c:e2:e4:6a:f8:98:59:89:c7:01:
                    09:ea:c8:c0:bf:45:30:7f:cd:28:e2:48:ee:33:7f:
                    34:89:dc:4d:25:4d:e3:1e:bd:2d:92:e9:de:c6:38:
                    9c:a6:2d:6c:1f:94:15:5c:32:cd:0b:a3:a0:82:2a:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6C:74:1D:0F:D4:34:75:58:1C:45:1B:E1:A3:57:FF:F7:05:3C:DE
            X509v3 Authority Key Identifier:
                keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:c600::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:84:ec:15:b6:7f:58:f9:6b:f7:da:c6:98:e6:eb:92:ff:
         4a:ea:5a:95:a0:25:c9:06:53:49:2a:cf:5b:11:2f:e7:fb:2b:
         8e:fa:5c:26:f0:70:5b:51:4a:7b:8a:c0:84:0c:ff:53:72:64:
         04:a5:c9:ec:4d:83:ad:91:43:e3:6c:14:10:57:0a:6e:54:d3:
         8c:f8:08:2a:9e:92:bb:80:4f:01:04:77:ba:2d:d3:7f:3c:f7:
         b1:50:f3:68:3d:b3:73:5a:97:f8:18:40:5b:be:b5:e5:18:f7:
         04:33:1f:e9:1b:3d:47:ee:b1:35:af:1c:5f:48:d8:15:b4:a2:
         d5:9d:a8:00:bb:61:ed:6e:a4:e3:a5:de:36:4d:bc:c3:bf:cd:
         a9:07:74:c6:05:3f:72:cf:c8:d0:be:a3:d3:da:0e:30:41:51:
         26:71:d4:b3:c3:3c:e9:d1:cf:84:15:12:ab:6f:ed:81:c2:07:
         c0:3f:6d:e0:41:8e:23:e3:73:7b:a0:aa:f7:f7:e7:8a:b3:bc:
         17:f9:6a:8c:76:f3:71:d5:23:93:e6:a1:ac:b3:6b:56:63:99:
         8c:6a:7e:bd:93:47:35:16:9c:b7:bf:68:c5:93:ce:f8:2d:49:
         67:1c:39:63:0f:1a:95:2a:87:03:8b:d8:ac:a3:81:f6:f7:15:
         de:58:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:31:27 2025 by rpki-client