Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa
File:                     9AC721604BC211EEA7AF2B6FC4F9AE02.roa (raw, json)
Hash identifier:          5rm3oqRl26penC4ZlBUixk7pYEojJ8/qGcU/gCHvkcY=
Subject key identifier:   71:4B:0F:47:12:23:D0:7D:BA:20:87:5A:9A:96:50:23:69:20:95:A5
Certificate issuer:       /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial:       037A
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa
Signing time:             Mon 19 May 2025 00:57:48 +0000
ROA not before:           Mon 19 May 2025 00:57:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151338
IP address blocks:        2400:70e0:bab::/48 maxlen: 48
                          2400:70e0:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
                          rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Validity
            Not Before: May 19 00:57:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682a820c-40aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:42:31:54:1a:25:be:29:8e:41:dd:3f:68:
                    b0:e9:b4:53:61:69:c3:a2:8c:c8:b7:db:0f:5c:07:
                    fb:0f:0b:5f:b4:26:3c:8e:d5:2b:5e:6c:b3:b0:84:
                    59:d0:96:05:6b:76:3e:18:dc:b2:3e:a1:92:e4:12:
                    00:d7:ba:9c:7b:e3:c3:ed:f1:1a:44:35:4e:32:0e:
                    57:6c:37:d9:4f:3b:0e:1f:47:21:3b:e4:16:27:80:
                    07:e2:ca:1c:96:91:e8:6f:bd:71:37:e5:b6:ec:5d:
                    02:0f:de:24:50:75:b0:3f:e2:4d:65:65:a5:71:75:
                    03:c6:d8:b9:90:25:81:ad:a0:c2:23:81:00:0c:41:
                    c5:ae:34:a1:11:77:c7:98:29:3d:e1:dd:10:a1:fe:
                    12:c7:1f:9b:ff:6b:44:7f:71:4d:97:6b:1d:0b:f0:
                    92:5b:f6:cd:ec:03:48:b7:8d:9c:d6:86:5e:13:91:
                    8e:bb:e9:47:fb:fc:dd:25:81:da:a4:82:43:d4:c0:
                    84:d5:95:1b:8e:23:cb:6d:60:0b:73:04:79:33:89:
                    34:79:5b:92:50:0a:90:5b:0b:66:18:e5:06:d9:c2:
                    a6:1d:b7:f4:6e:c0:b5:f6:a3:d6:59:29:ff:1f:9b:
                    96:1c:19:63:93:0a:aa:5e:cc:cd:d3:53:d9:05:b1:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:0F:47:12:23:D0:7D:BA:20:87:5A:9A:96:50:23:69:20:95:A5
            X509v3 Authority Key Identifier:
                keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:70e0:bab::/48
                  2400:70e0:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:c5:26:4b:f7:2f:2a:18:d0:c7:f5:1b:4d:96:11:65:b2:
         54:a5:f8:8f:61:57:51:a8:51:1d:6b:de:b9:b8:b5:54:75:6c:
         e8:f9:d2:85:61:ae:28:36:96:38:53:97:26:b6:85:5f:46:76:
         bd:4f:d9:f5:0d:37:32:28:bd:4e:bc:18:47:02:b0:5b:81:19:
         d2:a7:5b:da:79:19:b4:64:98:6b:ce:07:36:b1:cc:7e:78:af:
         e5:39:89:db:1f:82:a6:ec:29:c6:28:fd:b9:cc:a6:54:bc:df:
         2a:16:a0:4f:05:77:01:a0:8f:b3:0d:9b:dd:0f:90:7e:0a:d5:
         de:58:93:95:b9:49:d5:37:4e:47:2f:6e:5c:cd:39:89:3d:87:
         21:d3:03:3b:9d:1b:88:39:04:8c:16:5d:b5:89:23:3c:12:6f:
         92:6b:30:82:0f:f9:c6:a9:cd:4e:e8:90:e4:1d:0e:f1:c2:62:
         e1:de:6d:b3:2c:38:96:35:99:dc:0b:4e:92:2f:0b:4e:04:16:
         01:9e:a7:6b:f0:64:0c:10:58:9a:08:d5:44:7f:9f:de:a8:13:
         63:d3:d7:8c:1c:75:5d:ca:ce:82:bf:70:b9:62:53:2b:25:e1:
         df:ef:37:6c:17:f2:e2:33:52:07:81:3b:ff:73:8a:b6:10:33:
         39:10:c7:89
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC
RTJBQTBBRDUwHhcNMjUwNTE5MDA1NzQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJhODIwYy00MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskdCMVQaJb4pjkHdP2iw6bRTYWnDoozIt9sPXAf7DwtftCY8jtUrXmyzsIRZ
0JYFa3Y+GNyyPqGS5BIA17qce+PD7fEaRDVOMg5XbDfZTzsOH0chO+QWJ4AH4soc
lpHob71xN+W27F0CD94kUHWwP+JNZWWlcXUDxti5kCWBraDCI4EADEHFrjShEXfH
mCk94d0Qof4Sxx+b/2tEf3FNl2sdC/CSW/bN7ANIt42c1oZeE5GOu+lH+/zdJYHa
pIJD1MCE1ZUbjiPLbWALcwR5M4k0eVuSUAqQWwtmGOUG2cKmHbf0bsC19qPWWSn/
H5uWHBljkwqqXszN01PZBbFq5wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHFLD0cS
I9B9uiCHWpqWUCNpIJWlMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx
NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvOUFDNzIxNjA0
QkMyMTFFRUE3QUYyQjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkAHDgC6sDBwAkAHDgsAAwDQYJKoZIhvcNAQELBQADggEB
AHFsxSZL9y8qGNDH9RtNlhFlslSl+I9hV1GoUR1r3rm4tVR1bOj50oVhrig2ljhT
lya2hV9Gdr1P2fUNNzIovU68GEcCsFuBGdKnW9p5GbRkmGvOBzaxzH54r+U5idsf
gqbsKcYo/bnMplS83yoWoE8FdwGgj7MNm90PkH4K1d5Yk5W5SdU3TkcvblzNOYk9
hyHTAzudG4g5BIwWXbWJIzwSb5JrMIIP+capzU7okOQdDvHCYuHebbMsOJY1mdwL
TpIvC04EFgGep2vwZAwQWJoI1UR/n96oE2PT14wcdV3KzoK/cLliUysl4d/vN2wX
8uIzUgeBO/9zirYQMzkQx4k=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:16:33 2025 by rpki-client