Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7A3997FE914211EFB620F512C4F9AE02.roa
File:                     7A3997FE914211EFB620F512C4F9AE02.roa (raw, json)
Hash identifier:          IUDvW+xLx0Qht8DV1H0Z225UYHbQF9Zm54WezQ6Qjbg=
Subject key identifier:   07:0B:69:CA:BD:02:C7:31:7F:55:04:7A:B5:A4:7B:AA:67:14:85:00
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0EE1
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7A3997FE914211EFB620F512C4F9AE02.roa
Signing time:             Thu 22 May 2025 20:07:50 +0000
ROA not before:           Thu 22 May 2025 20:07:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153376
IP address blocks:        2406:840:e600::/44 maxlen: 48
                          2406:840:fead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3809 (0xee1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f8416-1f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:00:e8:0c:ba:5b:93:4b:d3:5b:f5:76:71:
                    86:f5:9a:75:9a:4e:9b:14:23:a4:6f:4a:5a:fc:f8:
                    5a:18:f9:bd:b0:59:d2:cf:08:09:ef:d9:b5:1e:c0:
                    21:4e:fb:ba:f6:d0:ad:1b:86:2d:06:b1:21:7d:50:
                    77:60:c0:fd:db:6b:2b:70:c9:19:e7:0f:04:41:50:
                    87:e3:f9:ef:2c:49:ff:a0:ac:34:d2:22:69:6c:55:
                    5f:46:49:03:ac:a2:47:e1:ed:93:1b:11:9e:ec:4b:
                    4f:11:42:f2:5c:8f:4f:36:10:13:07:ff:d3:f5:b6:
                    62:a4:51:c1:6f:94:da:1c:bd:1d:ed:bb:bb:f9:71:
                    b9:21:be:df:ae:1b:af:34:77:35:d5:3a:61:0a:73:
                    fd:e9:48:ca:f2:97:f8:a2:7f:58:c3:ee:c8:1d:ca:
                    12:73:7e:dd:c2:80:40:af:b3:03:95:3b:b2:ea:41:
                    9b:d9:3f:b9:ff:2f:b6:da:a4:f4:19:be:10:65:58:
                    41:18:e7:6a:37:53:da:9f:64:24:f2:04:54:22:2a:
                    1e:81:9b:09:67:3e:91:fe:d3:74:85:e0:20:e4:86:
                    2c:24:78:f0:76:f2:5b:66:76:da:46:d0:f6:3b:9a:
                    5b:93:ae:31:ba:cf:23:ba:75:be:50:50:d9:35:04:
                    ce:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0B:69:CA:BD:02:C7:31:7F:55:04:7A:B5:A4:7B:AA:67:14:85:00
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7A3997FE914211EFB620F512C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e600::/44
                  2406:840:fead::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:5c:97:6b:54:45:8a:16:54:fa:8a:d2:e6:36:40:70:00:
         83:ad:cc:6a:ec:da:01:01:9d:78:97:47:4e:82:55:c1:40:b5:
         92:cd:22:5e:3a:d7:13:55:1c:67:8d:90:5d:8a:af:ac:65:1e:
         13:10:cf:23:d2:54:af:28:a1:1e:86:64:14:90:9a:b3:63:f1:
         6d:c0:52:1f:77:a6:ca:d8:76:81:d7:70:34:62:c0:08:92:2d:
         00:a4:57:d2:ad:1c:e3:22:63:c2:7d:a8:09:5c:55:bb:ff:97:
         22:d0:0e:6c:62:67:00:20:41:34:32:c1:be:5b:5d:ee:66:f7:
         a7:12:8c:18:6f:95:39:94:5a:34:2b:e5:81:0d:3a:3e:18:93:
         12:7b:5b:d4:80:ca:48:90:f6:9a:d5:22:27:3d:a4:a0:5c:e7:
         1f:f9:59:82:15:e4:3c:14:06:63:2b:e6:64:9f:35:b0:7c:45:
         8e:6e:57:19:77:a4:e9:7f:75:89:f2:0a:12:84:92:21:de:f6:
         c4:1b:e2:f1:44:ba:38:d7:4a:67:f9:e8:b0:e7:9f:4e:6a:67:
         72:c3:67:8b:95:49:b4:50:60:89:4b:f2:c1:62:a2:f9:f6:25:
         d5:5f:a4:e2:4e:b6:1b:77:94:a9:66:93:fd:76:e2:47:cf:e0:
         b7:01:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:14:14 2025 by rpki-client