Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
File:                     69AC1BDC2E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier:          vg7YOTvt5j6Jqt1dRVffIELicYUARXB9Bd8iEwmbndo=
Subject key identifier:   E5:56:B8:30:CD:9C:C5:9E:BD:9F:E7:68:3E:8B:DE:81:28:41:F0:B7
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0ECE
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
Signing time:             Thu 22 May 2025 20:07:33 +0000
ROA not before:           Thu 22 May 2025 20:07:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152922
IP address blocks:        2406:840:fd90::/44 maxlen: 48
                          2406:840:fe90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f8405-6aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:57:fe:9d:af:41:51:e6:60:6f:e2:94:ba:
                    00:b6:f6:12:2f:ad:c8:99:40:56:86:de:28:1a:dd:
                    4a:0b:05:14:78:be:c2:44:34:41:c8:02:42:ae:aa:
                    a6:d8:64:04:50:1f:1a:05:07:02:02:51:aa:41:0c:
                    ef:c7:4a:fa:ee:2a:b8:cf:97:c7:f8:58:b5:26:e0:
                    aa:ae:6f:f3:32:df:d0:f8:f3:b6:58:bb:0b:ac:99:
                    f4:dd:48:59:ce:c9:e9:81:01:a9:8e:d6:e9:7b:30:
                    06:ae:d3:16:81:7b:2e:d2:5c:dc:ee:87:c9:69:4c:
                    58:6d:ea:25:fe:92:cc:b8:3d:07:09:77:83:8f:dd:
                    17:3e:29:c2:b2:91:c5:a0:2c:17:b2:1b:55:4a:34:
                    d5:dd:95:7b:cb:8f:d5:1e:c5:2d:7e:85:05:33:d8:
                    83:a2:64:06:e4:0e:c5:1d:08:db:3d:6d:54:f6:37:
                    8c:f6:45:20:b7:0b:a0:32:00:12:74:7f:fd:ee:de:
                    e6:1a:6e:ba:e9:93:d6:d8:52:5f:f1:69:41:de:8a:
                    08:7b:de:dd:ff:99:cf:ff:a3:b6:f5:a0:ee:27:ac:
                    72:de:fb:6a:1e:72:80:6f:5e:7e:06:6d:59:a2:0a:
                    8f:d0:fb:ad:4c:d3:da:9e:e7:85:fc:18:1f:c9:64:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:56:B8:30:CD:9C:C5:9E:BD:9F:E7:68:3E:8B:DE:81:28:41:F0:B7
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fd90::/44
                  2406:840:fe90::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:5f:9f:5a:92:4c:10:47:09:a1:93:f2:59:5f:44:49:00:0f:
         11:c7:37:fb:13:9e:37:32:54:bf:1e:3c:99:67:95:76:8b:88:
         bf:6d:65:3d:c4:3b:81:eb:77:29:56:b5:f2:5a:6a:71:61:97:
         20:4a:14:59:72:86:5a:d1:7f:f0:cf:07:19:c7:ff:29:d2:2d:
         41:8f:96:22:65:41:f5:bc:d9:a5:8b:3d:c5:b2:d9:71:e3:48:
         69:55:e4:66:c5:18:e0:91:fa:b0:dd:f9:7a:4f:c5:86:2b:df:
         d7:5c:f9:91:5a:06:60:f9:b0:55:20:28:e7:6b:dc:e7:5c:b8:
         94:aa:37:01:26:22:49:13:4a:bb:f1:e8:45:b0:9f:38:46:52:
         c5:ab:98:95:c0:09:99:d2:8b:81:8c:8b:0d:1c:b6:30:03:54:
         a3:e1:ce:68:78:0b:b1:2c:38:0d:c9:fd:52:da:03:c3:d2:b5:
         26:8e:50:46:28:67:ff:64:24:7e:07:6f:10:0f:be:1b:d1:40:
         22:ae:c5:cf:46:21:e0:03:e7:f5:f8:45:97:84:9d:b7:ae:9e:
         a2:49:13:70:2f:3f:2b:ba:91:fa:f4:d8:ce:47:6f:b8:a4:ba:
         af:11:98:54:61:63:16:f9:b7:3c:d5:e8:4d:0e:84:93:ce:c7:
         6e:93:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:09:30 2025 by rpki-client