Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/62D37DCC331A11EFAB575211C4F9AE02.roa
File:                     62D37DCC331A11EFAB575211C4F9AE02.roa (raw, json)
Hash identifier:          ykjxGH/+qXWIwL4guHgXSit4eM3ghpy7t5QcH4LIw2k=
Subject key identifier:   BB:DD:2A:AA:DC:4B:5E:D8:E3:10:C6:67:66:78:2E:02:DF:C0:7A:D5
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0ED1
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/62D37DCC331A11EFAB575211C4F9AE02.roa
Signing time:             Thu 22 May 2025 20:07:35 +0000
ROA not before:           Thu 22 May 2025 20:07:35 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153034
IP address blocks:        2406:840:fdc0::/44 maxlen: 48
                          2406:840:fe92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3793 (0xed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:35 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f8407-c0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a7:b9:3b:ee:d6:df:83:77:23:b6:1a:d0:38:
                    c4:95:40:3a:0d:76:b8:0f:07:a0:10:7b:ec:e7:52:
                    d6:32:b1:04:38:b6:28:fb:26:a1:a1:16:d7:a8:36:
                    e3:a6:97:43:17:a0:b5:c0:90:c0:c9:10:ef:42:02:
                    79:75:ac:34:4b:8d:35:69:55:fa:21:df:e3:8b:4c:
                    14:65:50:95:af:25:12:b6:ca:4b:e5:36:f7:35:0f:
                    95:24:e6:c8:16:15:2a:ea:b6:4c:d4:16:22:0e:ad:
                    e3:61:d4:e6:1f:d0:4a:29:6e:aa:12:f5:07:4a:98:
                    35:ed:a4:3a:34:59:30:4e:1a:b2:e9:15:f2:05:34:
                    f9:33:6b:b4:99:6c:0c:b3:48:30:98:70:79:5d:20:
                    a3:6d:4b:64:9a:37:5d:82:a5:d2:ea:99:97:4a:68:
                    01:21:9c:9d:93:04:9e:e6:71:e9:90:d1:b8:db:72:
                    d4:ad:c1:31:14:d4:00:3c:8e:d6:52:e1:64:cb:7c:
                    f4:92:c8:57:5d:97:c5:d1:68:36:93:02:3f:27:ee:
                    90:7a:0b:31:be:0a:4c:aa:3a:45:f6:b6:9d:2e:6c:
                    c5:c4:5a:28:f9:f8:41:7e:66:50:64:50:f5:2c:f4:
                    5d:f7:53:ab:ba:68:5d:f4:a1:4e:12:b6:ac:81:9f:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:2A:AA:DC:4B:5E:D8:E3:10:C6:67:66:78:2E:02:DF:C0:7A:D5
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/62D37DCC331A11EFAB575211C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fdc0::/44
                  2406:840:fe92::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:45:6d:f7:29:b1:0e:f1:e9:be:4f:3e:5c:f5:14:d5:49:d1:
         57:cc:32:f5:72:b8:ae:e1:8a:80:bb:2a:cb:c8:8a:ea:ce:c9:
         ae:68:48:3d:56:e7:60:45:a7:1f:85:ba:55:00:66:f2:60:c4:
         12:ce:4f:9e:33:a4:d4:1d:24:8d:87:ae:bb:ca:1f:03:e9:bb:
         b7:44:65:01:6f:8e:d1:2b:21:35:47:e8:5f:bd:0f:1c:9d:a8:
         a9:e2:32:d8:58:ce:28:73:9d:c5:67:90:e6:4e:3a:9d:08:bf:
         91:84:db:28:f3:ea:61:9d:f5:2d:31:16:4c:14:a7:9d:3f:f4:
         95:7b:3f:a7:92:1f:78:38:af:6a:91:25:07:3b:73:f9:7c:65:
         7c:98:27:8b:d5:a2:4f:c5:40:ba:72:82:75:1a:30:a0:33:b8:
         a7:4b:6b:52:2f:bb:5b:c8:58:6c:c9:2a:fa:aa:ec:7e:b3:93:
         28:ba:5c:21:e0:77:9f:80:39:3f:e4:d4:2b:fb:0d:33:3a:aa:
         6c:8b:19:66:71:34:0e:26:db:00:d0:f7:c8:ea:f6:c8:97:e2:
         00:37:9a:41:5e:b3:a9:27:9d:7f:0d:cc:45:0d:35:07:f7:45:
         77:b6:63:7e:3e:e7:8b:fc:07:47:ee:ef:a2:5d:e7:a6:ef:11:
         33:38:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:02:55 2025 by rpki-client