Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
File:                     1275EBB054C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier:          rd4m/ze4ur4N9L0qDeoX0uHYip2jlp5yvrxh4AR86+8=
Subject key identifier:   84:F4:7E:67:83:E8:6B:63:62:09:1A:C1:93:A9:69:F6:A8:1D:90:C1
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0EDA
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
Signing time:             Thu 22 May 2025 20:07:44 +0000
ROA not before:           Thu 22 May 2025 20:07:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153189
IP address blocks:        2406:840:fc60::/44 maxlen: 48
                          2406:840:fef4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3802 (0xeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f840f-2aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:e7:7a:8f:1e:eb:36:52:72:67:3c:6f:cf:
                    59:f0:b2:f9:45:bf:10:0a:49:28:3b:18:13:4d:4b:
                    d7:53:73:0e:9a:95:b3:9e:fc:2c:88:93:57:e2:3f:
                    45:4e:39:51:dd:de:8e:71:7a:b2:10:05:cb:b2:e4:
                    5a:7d:8c:a5:a3:78:f8:a3:50:5e:69:65:96:03:4a:
                    96:4d:48:41:2b:c7:4c:d7:4a:ce:8a:e9:90:ef:d3:
                    5d:3e:5c:3a:c3:98:ae:14:02:1f:8f:6c:c9:86:a9:
                    8c:cb:d1:45:5e:b5:ed:a0:bd:70:94:e8:86:03:de:
                    4a:a5:ea:a6:cc:1e:80:a0:0a:24:18:03:78:cb:f7:
                    50:2c:f6:b8:3f:88:65:62:8b:f2:e5:6c:5c:9c:c0:
                    ee:1e:4e:93:4c:c8:cf:70:de:3c:08:51:7a:e6:11:
                    d4:e5:03:56:21:d2:50:ce:b5:64:3e:95:67:a4:63:
                    98:91:6c:24:b7:4b:bd:59:36:91:68:65:6a:a0:fe:
                    7b:6a:44:ea:65:cf:1b:31:82:24:80:c4:e9:d2:61:
                    7e:a4:fa:ed:9d:31:45:be:20:a2:0f:5b:1d:58:5d:
                    e0:ad:9c:ba:2a:33:ff:bd:b1:f2:50:dc:98:98:2c:
                    c4:26:cd:1a:c5:ec:02:97:10:5e:9c:8e:91:3f:88:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F4:7E:67:83:E8:6B:63:62:09:1A:C1:93:A9:69:F6:A8:1D:90:C1
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc60::/44
                  2406:840:fef4::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:60:ec:dc:26:be:53:0d:52:dc:b9:42:a1:73:fc:ff:8b:79:
         c4:bb:da:d0:2f:e7:99:c1:f7:6e:9e:cd:4a:71:1a:9e:94:80:
         cb:3a:62:4b:20:6d:fe:79:bd:67:8b:52:2e:69:8e:9d:04:d9:
         e0:ab:29:da:8e:60:49:1f:00:22:c5:1f:e8:fe:d4:b3:24:c7:
         86:85:35:ee:75:7c:7f:a0:ad:0f:05:e1:ff:15:36:1d:cf:0e:
         ed:91:65:b6:d6:3f:bb:21:f1:ce:30:8c:a0:d2:94:f7:b0:62:
         1c:98:c7:a9:f7:b1:b3:e3:89:4a:c0:e5:85:db:53:f6:b3:34:
         e6:be:c9:fc:2b:f0:fd:c7:e6:d3:d1:c6:73:a6:f6:cf:09:63:
         98:7c:f7:bf:b0:55:3f:c1:8f:3f:b7:05:7e:40:a8:7d:05:f2:
         c6:5a:fb:65:6e:7b:56:01:0c:79:aa:02:9a:96:1a:17:60:9f:
         10:c4:6b:3f:b0:58:a7:af:14:1d:d4:38:95:37:e8:da:a9:fb:
         8a:5b:5e:c9:39:01:d7:07:32:46:34:2c:2e:43:d1:8c:1c:c1:
         6f:57:2d:f3:92:50:91:c8:88:f4:4d:f4:31:1c:6c:ad:09:59:
         76:a9:c4:21:c5:0a:b3:36:77:a5:63:a2:71:ac:a4:51:78:73:
         8c:f5:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:16:27 2025 by rpki-client