Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/F4757B1018C811EB94A5327AC4F9AE02.roa
File:                     F4757B1018C811EB94A5327AC4F9AE02.roa (raw, json)
Hash identifier:          j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=
Subject key identifier:   0B:A4:C9:08:F8:A7:0D:CA:0B:E3:E5:AD:8D:85:56:B6:14:61:87:63
Certificate issuer:       /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial:       08EE
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/F4757B1018C811EB94A5327AC4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:06:02 +0000
ROA not before:           Mon 02 Jun 2025 21:06:02 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139727
IP address blocks:        2001:df5:2d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
                          rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
        Validity
            Not Before: Jun  2 21:06:02 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683e123a-ca03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:72:28:76:d8:a8:7f:37:89:d2:72:c1:00:
                    6a:41:6b:d3:2f:7e:c8:da:85:db:83:bb:32:58:7a:
                    55:f1:6d:1d:cb:a9:db:aa:05:51:70:10:6a:2a:1f:
                    c3:ca:02:92:fb:dd:67:3a:b3:d3:8a:22:60:df:41:
                    1f:c0:b6:8f:78:80:ce:0a:bd:c1:40:08:fe:16:83:
                    64:41:0f:59:f3:a3:1b:b9:aa:7a:25:ff:47:62:c4:
                    b4:93:82:c6:2c:a0:88:0a:c7:d8:81:12:f6:bf:45:
                    7f:6a:11:da:a2:77:1c:d1:c1:e5:25:1f:40:db:4c:
                    d4:4d:09:60:d7:2a:6b:00:11:2c:05:bb:eb:a8:db:
                    e3:5c:4d:18:f0:1e:91:de:b3:bd:ab:e6:6c:ce:21:
                    ed:45:1c:94:ed:be:6f:dc:03:4c:7d:42:bf:fa:a3:
                    da:fc:bb:64:63:ae:de:9a:6f:78:48:2c:65:4e:af:
                    57:d8:1d:61:4d:00:ce:94:83:50:4d:31:58:20:3b:
                    26:70:8f:20:9f:4c:c3:4a:9a:18:ba:6e:13:0d:9d:
                    f0:ca:27:88:8d:8e:ca:36:ad:77:ba:3f:76:5f:a4:
                    a8:26:da:a3:ab:83:fc:6f:e3:f7:10:04:ad:e4:67:
                    d5:86:1e:cb:bb:34:0c:99:25:f5:f5:d6:9d:f3:cf:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:C9:08:F8:A7:0D:CA:0B:E3:E5:AD:8D:85:56:B6:14:61:87:63
            X509v3 Authority Key Identifier:
                keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/F4757B1018C811EB94A5327AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:2d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:f0:f5:f0:99:ad:e3:f5:18:07:ab:25:51:55:1d:1d:62:
         e4:d1:45:14:51:db:84:c1:9a:04:00:38:17:8b:14:73:89:bb:
         de:d0:57:e6:47:9b:34:e0:b2:79:51:70:34:2c:10:25:3b:90:
         51:5f:c5:3f:b2:e3:5d:31:77:b4:92:59:15:6e:59:0d:d7:49:
         e3:2c:9d:01:99:28:21:39:fd:9f:da:39:48:b5:3a:09:e1:dd:
         8e:5d:5e:73:d8:63:da:d1:46:7f:fa:38:b8:44:ec:a1:f9:8c:
         26:5d:f2:e5:77:4a:f9:15:b7:d1:26:19:eb:bf:ac:00:18:4e:
         6d:97:70:eb:7a:06:18:07:44:ec:74:c2:a2:94:e2:a3:b6:dc:
         77:f0:91:c8:85:71:cd:34:93:29:bc:16:6f:46:c1:b5:71:81:
         6c:e7:e8:f6:7d:15:89:81:a0:46:0e:bc:32:46:65:e7:88:6f:
         77:e2:0b:4b:99:3a:05:70:4c:b3:43:c2:fd:1a:2a:5c:50:85:
         ea:0f:c2:61:c4:e5:20:2f:65:96:f6:29:f4:b2:88:8a:8a:e9:
         1a:5d:02:2a:d0:12:21:ee:0d:20:61:05:4e:55:3d:96:0a:1a:
         60:a1:e9:91:c9:9e:b9:51:86:cd:33:a7:7f:0c:a1:10:cb:fe:
         4a:7a:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:38:56 2025 by rpki-client