Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/469F3FE44CDF11F08D2EFF16C4F9AE02.roa
File:                     469F3FE44CDF11F08D2EFF16C4F9AE02.roa (raw, json)
Hash identifier:          V/fASBu8lY37YHb4lDAmyOYyJCBMY5CbifIBgISs7Nk=
Subject key identifier:   6F:BF:87:0B:54:7B:4A:49:DA:62:CF:3B:80:3E:99:2A:BC:B8:63:A8
Certificate issuer:       /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial:       02
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/469F3FE44CDF11F08D2EFF16C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 07:30:29 +0000
ROA not before:           Thu 19 Jun 2025 07:30:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153980
IP address blocks:        2001:df5:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
        Validity
            Not Before: Jun 19 07:30:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6853bc95-7ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:5e:b9:93:57:e4:8f:d1:f8:ce:70:4b:30:
                    dd:e9:84:51:cd:c8:8e:13:6f:ab:5f:34:74:e0:13:
                    26:f5:51:bc:08:19:81:b4:e7:fc:8c:c6:af:0e:21:
                    b5:84:2c:5f:c7:4a:41:10:de:9b:22:81:38:d1:7a:
                    a1:0a:d3:62:28:5a:c6:4c:6e:58:17:e8:3a:ff:e4:
                    a0:b2:dc:ab:b0:aa:3e:c1:db:4f:cf:93:52:7a:5e:
                    8e:e3:7d:ab:f6:b4:5e:35:ab:d6:4a:8c:12:d7:23:
                    13:b9:a8:05:6e:ea:d7:3a:14:a1:c6:c3:7e:f9:b3:
                    5b:1a:3f:ec:b1:49:21:d0:f1:d1:68:d2:63:01:f5:
                    7f:9a:14:a1:0f:85:8c:b7:a8:f2:00:83:97:59:53:
                    13:5c:74:4d:bf:2c:db:53:d9:5b:56:e8:56:6c:a0:
                    9c:6c:03:98:db:95:d5:cf:5d:7a:d5:38:5f:32:4f:
                    5e:4e:b1:d5:f0:2d:2f:a2:6e:7d:74:c6:0e:d4:fd:
                    40:bf:ab:99:63:fc:5b:c2:15:5d:69:c1:1b:4b:16:
                    01:21:29:79:61:3e:ee:b2:9b:db:1a:5b:2b:9d:c8:
                    e7:b4:9f:dd:32:6f:73:d2:bb:54:3a:31:dc:02:37:
                    b1:68:f6:a1:be:91:ee:c7:79:12:ea:f0:2e:d1:f0:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:87:0B:54:7B:4A:49:DA:62:CF:3B:80:3E:99:2A:BC:B8:63:A8
            X509v3 Authority Key Identifier:
                keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/469F3FE44CDF11F08D2EFF16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:c3:fa:0b:87:45:25:40:ef:33:f0:9e:8a:e6:e1:b4:0e:
         19:93:4f:ce:2c:a7:56:c1:c3:b1:86:e3:f2:20:cb:dd:af:34:
         f0:8b:9e:c4:03:af:b0:01:aa:4c:08:ce:77:36:5f:d0:bf:ba:
         46:13:3f:86:44:6c:b3:12:73:f4:c2:6c:77:de:4d:ad:ce:be:
         fb:af:ef:0a:a6:9a:83:3d:c2:6f:4e:73:31:93:38:d6:7c:6b:
         22:6c:43:a2:f8:d5:cf:50:e6:fd:ad:bf:d4:90:73:a1:fc:95:
         18:ec:98:2c:8e:79:13:26:28:0b:26:51:be:7b:9d:c8:e4:7f:
         5d:35:e4:af:bf:3a:59:35:57:a0:6e:25:de:ee:43:c9:ff:b1:
         0d:77:11:40:88:2b:b3:2d:17:3a:33:14:db:d8:f2:66:30:23:
         de:d2:be:ce:4a:34:71:09:95:b2:b6:1d:3c:4f:f4:40:cf:f9:
         93:ce:72:6a:f1:16:c7:b5:e5:48:46:53:8f:76:f3:ba:35:06:
         6d:66:7b:50:3d:83:fb:fe:33:74:e1:bd:24:a2:de:bb:4b:8a:
         e1:19:ae:f1:92:54:68:ab:ee:01:0a:d4:cd:df:ce:82:0b:30:
         1c:86:76:6b:5c:45:14:33:42:95:19:e0:02:73:5d:ce:f0:d9:
         14:82:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:43:40 2025 by rpki-client