Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
File:                     E7F77E5E42E711EF8B9EF861C4F9AE02.roa (raw, json)
Hash identifier:          xBAC2IeuuzKl82FU9KBewyyGYj38dZfZQ7//75oYBSo=
Subject key identifier:   80:B7:2E:C6:62:57:E8:1D:EB:14:B2:61:92:F6:FF:BD:45:C6:8F:6D
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       014B
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 05:54:42 +0000
ROA not before:           Wed 03 Sep 2025 05:54:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     207338
IP address blocks:        2403:ad80:102a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 12:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep  3 05:54:42 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7d822-9ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:8b:3d:57:a5:d9:15:3f:b7:4e:60:3c:b1:
                    1f:cb:ec:7a:a6:2d:b3:07:08:e2:95:9f:7f:c0:0d:
                    51:9e:f4:1f:26:0d:fb:c6:20:e7:4d:d9:97:1a:82:
                    3c:b5:8d:7b:f1:35:c7:b3:e4:5e:e6:c9:09:f6:d8:
                    2a:8f:0b:cc:90:48:3e:1f:d8:9d:4b:bd:81:48:c8:
                    55:aa:6c:ad:80:94:96:d4:fe:42:6a:18:6a:30:97:
                    9b:94:fa:78:29:40:4a:c6:00:5b:68:d0:2b:91:19:
                    58:56:52:13:c9:c7:d3:a9:41:74:d6:a1:ad:5a:0f:
                    47:5f:e6:8d:d9:bf:0d:71:92:f6:cd:cb:91:46:49:
                    2e:53:50:31:b8:b2:49:06:12:a8:6d:aa:93:8e:1c:
                    a2:d9:33:34:21:97:1e:40:b1:e5:f0:3f:de:d2:aa:
                    39:6b:f7:68:52:9f:5a:7e:f3:5c:32:5b:98:15:dd:
                    d8:75:1c:8d:4a:d1:44:16:c1:5c:8a:b7:64:bf:2a:
                    a5:bd:32:a9:76:19:96:67:c1:fe:1c:b0:1b:54:04:
                    2b:e5:18:8c:11:ac:0f:a3:16:f9:f8:5e:00:a6:45:
                    d1:57:e8:52:5b:6f:0f:fa:21:5c:3f:0d:d7:3f:88:
                    0c:b2:d4:f1:32:e6:86:48:04:30:a9:d8:fa:f7:f7:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B7:2E:C6:62:57:E8:1D:EB:14:B2:61:92:F6:FF:BD:45:C6:8F:6D
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:102a::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:53:ec:bb:67:38:8c:f7:f2:3e:fb:95:ba:c8:6b:eb:22:37:
         c0:83:0d:fe:ec:64:45:54:a1:b8:94:1d:6d:84:65:20:e7:05:
         bd:bd:4b:cf:fd:84:15:5d:6b:e5:97:ec:45:95:21:c0:79:76:
         a5:1e:f0:47:60:15:93:ae:0d:55:bf:45:68:f7:aa:35:94:00:
         d4:84:62:6c:0e:eb:28:14:01:9e:f0:c7:62:9c:65:e4:64:b0:
         d6:1e:ba:3c:6e:dd:00:c3:88:1b:26:dc:a0:b4:20:1c:8b:b1:
         7c:b7:87:c7:62:8e:40:ba:59:fc:bf:de:a2:94:9e:ff:35:16:
         2c:d9:20:3f:61:1b:14:04:c8:cd:12:cd:57:b8:96:e3:a2:03:
         36:43:61:ca:e4:d1:c9:71:af:1b:83:43:fe:14:8a:52:ca:7d:
         51:fe:e2:c4:8f:9e:9a:90:ec:a7:a9:fb:9d:ea:a2:85:f0:7a:
         31:59:0c:ab:f4:aa:a0:ea:1e:9d:c3:35:15:12:62:1e:80:c6:
         3a:8c:6d:bd:37:8f:20:0b:3b:41:db:7e:c7:ce:38:6c:e4:d3:
         77:29:73:53:69:83:d6:9a:12:e2:49:76:97:fc:eb:0a:ee:a1:
         b3:47:26:17:dc:3d:19:29:a3:28:fe:45:56:31:4b:b8:ed:c0:
         b5:2d:2b:77
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1
QjVENjcyOUMwHhcNMjUwOTAzMDU1NDQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3ZDgyMi05Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuj6LPVel2RU/t05gPLEfy+x6pi2zBwjilZ9/wA1RnvQfJg37xiDnTdmXGoI8
tY178TXHs+Re5skJ9tgqjwvMkEg+H9idS72BSMhVqmytgJSW1P5CahhqMJeblPp4
KUBKxgBbaNArkRlYVlITycfTqUF01qGtWg9HX+aN2b8NcZL2zcuRRkkuU1AxuLJJ
BhKobaqTjhyi2TM0IZceQLHl8D/e0qo5a/doUp9afvNcMluYFd3YdRyNStFEFsFc
irdkvyqlvTKpdhmWZ8H+HLAbVAQr5RiMEawPoxb5+F4ApkXRV+hSW28P+iFcPw3X
P4gMstTxMuaGSAQwqdj69/fOfwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIC3LsZi
V+gd6xSyYZL2/71Fxo9tMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD
NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUE3NzcvMEJBNTcyQjBFQzRGMTFFRUExQjM4ODY2QzRGOUFFMDIvRTdGNzdFNUU0
MkU3MTFFRjhCOUVGODYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkA62AECowDQYJKoZIhvcNAQELBQADggEBAIVT7LtnOIz3
8j77lbrIa+siN8CDDf7sZEVUobiUHW2EZSDnBb29S8/9hBVda+WX7EWVIcB5dqUe
8EdgFZOuDVW/RWj3qjWUANSEYmwO6ygUAZ7wx2KcZeRksNYeujxu3QDDiBsm3KC0
IByLsXy3h8dijkC6Wfy/3qKUnv81FizZID9hGxQEyM0SzVe4luOiAzZDYcrk0clx
rxuDQ/4UilLKfVH+4sSPnpqQ7Kep+53qooXwejFZDKv0qqDqHp3DNRUSYh6AxjqM
bb03jyALO0HbfsfOOGzk03cpc1Npg9aaEuJJdpf86wruobNHJhfcPRkpoyj+RVYx
S7jtwLUtK3c=
-----END CERTIFICATE-----
Generated at Mon Sep 8 16:57:24 2025 by rpki-client