Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/75EA140C0FFD11EE86648956C4F9AE02.roa
File:                     75EA140C0FFD11EE86648956C4F9AE02.roa (raw, json)
Hash identifier:          bih/0MI/JNvp06h0EquZexTMD9uQcAZobfzVGdmSsOA=
Subject key identifier:   7B:E4:61:BF:C0:C4:A5:62:E7:10:6F:D4:7D:12:5C:D0:A8:11:06:8C
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0EBD
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/75EA140C0FFD11EE86648956C4F9AE02.roa
Signing time:             Thu 22 May 2025 20:07:18 +0000
ROA not before:           Thu 22 May 2025 20:07:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151418
IP address blocks:        2406:840:9100::/44 maxlen: 48
                          2406:840:fed0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3773 (0xebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f83f5-16b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:2a:7f:65:65:34:29:47:4e:a6:30:b6:9e:
                    39:a2:f7:a5:83:7c:01:af:28:e8:a3:44:2c:f3:37:
                    a8:38:06:cd:f5:b3:23:06:df:b6:6d:f2:c1:4c:0a:
                    cc:17:19:75:8b:43:65:44:77:a2:3b:ab:cd:40:9c:
                    f9:1f:e8:75:0b:64:a1:8b:57:22:6c:c3:02:7c:aa:
                    40:5a:03:6b:84:f8:72:86:eb:82:06:25:00:4f:fb:
                    6a:1f:d1:fe:ea:17:35:79:67:96:3e:bb:bd:e8:03:
                    d8:ae:ab:01:cb:0e:86:67:18:2f:81:64:18:b9:1b:
                    bb:04:72:7a:0f:a7:65:f2:0f:42:29:a0:56:40:a6:
                    b0:63:57:1d:2e:21:4b:4a:87:9a:ba:41:a8:16:68:
                    82:af:02:9d:59:c0:d9:77:4f:20:1c:ac:a7:fa:70:
                    08:c1:79:4b:6c:7b:96:c6:ea:49:44:9e:d5:e4:a9:
                    24:0b:d9:63:3c:ee:05:0d:8c:bd:7e:ef:87:64:ef:
                    d9:b3:8e:02:a7:12:69:76:b8:f9:54:fe:3a:c9:f6:
                    36:51:12:ee:37:df:6d:44:ef:bf:95:48:a9:38:f5:
                    9f:b8:7f:63:0b:7a:33:20:18:06:c8:ca:d8:67:24:
                    a9:f4:b8:38:09:0b:93:0c:6a:d0:e1:4d:84:c0:2c:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:61:BF:C0:C4:A5:62:E7:10:6F:D4:7D:12:5C:D0:A8:11:06:8C
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/75EA140C0FFD11EE86648956C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9100::/44
                  2406:840:fed0::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:e0:54:12:b1:62:ca:9b:49:6f:27:48:07:88:8c:f2:35:
         5c:24:1f:e1:4a:62:6c:1d:80:83:89:9b:3d:af:ae:e0:f1:82:
         23:ce:b5:fb:80:3e:df:21:e0:39:ae:78:1e:4e:cb:52:61:20:
         7e:59:29:0b:95:16:e0:a6:fe:6e:e4:23:1c:42:e7:7c:1d:cd:
         0c:2c:b0:ee:6b:cd:0b:99:09:61:42:28:43:b5:4a:f0:e4:00:
         d4:50:f6:23:42:fd:15:94:db:b5:5d:5c:5d:8d:6d:5c:cb:4e:
         43:3d:ed:35:d5:4d:e0:5f:70:bf:ac:34:48:2a:84:5c:8c:83:
         e6:6e:f5:b8:3f:29:f0:eb:3e:cb:ad:4b:61:71:d6:2d:60:d6:
         5a:8d:5d:8e:b0:3c:83:f3:a5:21:38:38:d1:4c:20:c1:fe:2f:
         fa:91:e5:d7:8c:cc:41:ef:8f:79:74:e8:98:ba:76:cf:0d:16:
         73:42:31:a4:f5:ef:80:82:2c:67:bd:c9:06:c5:c2:10:d4:de:
         3f:ac:5f:42:e1:e1:bf:48:71:80:9f:1e:c7:02:f8:92:30:8e:
         f2:57:5c:09:75:c4:0f:1f:b5:50:24:58:eb:2d:b5:26:e6:63:
         a0:36:37:e8:4b:81:62:7c:2c:dc:4d:63:a4:8f:44:35:cd:6e:
         ae:94:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:54 2025 by rpki-client