Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1335102E52DE11EC8E8CB053C4F9AE02.roa
File:                     1335102E52DE11EC8E8CB053C4F9AE02.roa (raw, json)
Hash identifier:          EX74L2OYlYfbLeZlttOU4biLkobjnsZGxiVMzJB4OG4=
Subject key identifier:   FF:E1:80:41:9D:E6:75:D2:EE:8B:DC:89:0A:FD:9A:43:90:0B:0E:B4
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0EA5
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1335102E52DE11EC8E8CB053C4F9AE02.roa
Signing time:             Thu 22 May 2025 20:06:53 +0000
ROA not before:           Thu 22 May 2025 20:06:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141429
IP address blocks:        2406:840:e0c0::/44 maxlen: 48
                          2406:840:e0d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3749 (0xea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:06:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f83dc-278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:ec:e0:c0:e3:53:d0:6b:a9:67:15:2d:5a:
                    56:47:b8:69:16:21:1a:36:e6:9b:72:4e:4f:49:17:
                    5e:8d:4c:dc:aa:31:8e:51:59:80:5d:b8:87:61:1a:
                    83:72:04:52:4c:ac:a9:91:30:97:ad:0b:8a:8e:28:
                    cb:6a:a6:70:a5:45:a7:36:ba:6f:78:55:11:ff:93:
                    42:fd:df:a9:01:80:83:80:19:87:f2:0d:d3:d6:e4:
                    51:bf:ef:77:ca:74:f5:85:ee:d5:dc:cf:47:74:88:
                    7e:56:8d:67:59:d3:79:a4:52:8a:8e:4d:e2:2e:17:
                    a2:ef:76:ef:e1:2e:b0:a6:06:60:1e:15:a4:e0:e5:
                    6f:bc:5f:aa:49:d1:6d:02:44:84:98:23:f6:8a:26:
                    05:c7:0c:61:4e:5b:53:73:4d:a4:e9:37:35:ff:d6:
                    e1:46:78:47:1d:20:85:84:8f:91:73:94:af:65:4d:
                    da:6e:af:a1:31:94:48:09:77:2c:49:93:b3:6d:28:
                    40:91:1f:39:e8:87:0c:5d:ca:45:d9:49:15:ab:00:
                    9b:db:85:67:35:7d:e8:71:2f:33:5e:ac:2f:c0:0e:
                    a6:ff:aa:8d:42:a2:ae:6d:59:62:a2:a9:a3:5a:09:
                    18:48:f8:6d:5c:f4:47:83:9e:e6:e1:0e:87:db:72:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E1:80:41:9D:E6:75:D2:EE:8B:DC:89:0A:FD:9A:43:90:0B:0E:B4
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1335102E52DE11EC8E8CB053C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e0c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:2b:8c:3d:7a:ca:00:ea:7c:f0:ea:eb:09:f8:25:59:03:
         91:c6:75:a2:7d:f1:94:e8:64:52:d4:e4:cd:c1:a2:29:d6:da:
         51:3a:55:66:ad:61:97:47:d8:74:bc:25:45:e5:2d:4c:b5:48:
         30:7d:1b:bb:15:0d:61:26:7e:d3:a8:7b:18:63:56:c4:8d:88:
         be:4e:87:26:54:09:20:2d:df:8d:4a:8e:59:d2:3c:f8:c9:cb:
         2d:49:e5:84:4c:a7:68:46:24:bd:40:10:16:5c:11:8e:7a:2d:
         0c:6b:13:74:d2:84:30:17:cd:06:c3:de:07:1a:da:93:de:c7:
         eb:9b:83:0d:1b:04:41:d4:e8:69:32:dd:f6:3d:2a:88:ea:00:
         9a:05:e6:9b:43:a8:e8:77:95:e6:54:4e:1c:bf:6c:d1:d3:a9:
         d4:bf:9e:87:af:b3:6f:ca:28:4e:85:41:ab:0d:79:95:13:12:
         fe:f6:50:35:05:6b:00:27:37:e9:bf:73:1e:6a:72:53:ec:21:
         02:b4:23:c3:83:c3:73:e3:b5:8a:0e:5e:5d:4a:b1:f9:66:18:
         19:af:c0:0f:90:29:e2:c1:b4:4e:00:f6:12:fa:71:80:8c:15:
         56:12:50:4c:3a:cd:0b:07:40:e2:c6:46:ad:7e:aa:94:42:4d:
         65:ea:de:c4
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmODNkYy0yNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ULs4MDjU9BrqWcVLVpWR7hpFiEaNuabck5PSRdejUzcqjGOUVmAXbiHYRqD
cgRSTKypkTCXrQuKjijLaqZwpUWnNrpveFUR/5NC/d+pAYCDgBmH8g3T1uRRv+93
ynT1he7V3M9HdIh+Vo1nWdN5pFKKjk3iLhei73bv4S6wpgZgHhWk4OVvvF+qSdFt
AkSEmCP2iiYFxwxhTltTc02k6Tc1/9bhRnhHHSCFhI+Rc5SvZU3abq+hMZRICXcs
SZOzbShAkR856IcMXcpF2UkVqwCb24VnNX3ocS8zXqwvwA6m/6qNQqKubVlioqmj
WgkYSPhtXPRHg57m4Q6H23I9eQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFP/hgEGd
5nXS7ovciQr9mkOQCw60MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTMzNTEwMkU1
MkRFMTFFQzhFOENCMDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwUkBghA4MAwDQYJKoZIhvcNAQELBQADggEBAJ6uK4w9esoA
6nzw6usJ+CVZA5HGdaJ98ZToZFLU5M3BoinW2lE6VWatYZdH2HS8JUXlLUy1SDB9
G7sVDWEmftOoexhjVsSNiL5OhyZUCSAt341KjlnSPPjJyy1J5YRMp2hGJL1AEBZc
EY56LQxrE3TShDAXzQbD3gca2pPex+ubgw0bBEHU6Gky3fY9KojqAJoF5ptDqOh3
leZUThy/bNHTqdS/noevs2/KKE6FQasNeZUTEv72UDUFawAnN+m/cx5qclPsIQK0
I8ODw3PjtYoOXl1KsflmGBmvwA+QKeLBtE4A9hL6cYCMFVYSUEw6zQsHQOLGRq1+
qpRCTWXq3sQ=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:16:58 2025 by rpki-client