Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F73A3EA458FF11F0831F6664C4F9AE02.roa
File:                     F73A3EA458FF11F0831F6664C4F9AE02.roa (raw, json)
Hash identifier:          AwPQ2C0JmEfPKukGC3Ro3WYtZg4y6hLp5m6xMhubTwE=
Subject key identifier:   75:44:48:85:67:C6:DE:76:40:1F:89:2D:C9:51:C0:26:87:9A:66:A1
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       014D
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F73A3EA458FF11F0831F6664C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 05:54:44 +0000
ROA not before:           Wed 03 Sep 2025 05:54:44 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     53356
IP address blocks:        2403:ad80:5012::/48 maxlen: 48
                          2403:ad80:5016::/48 maxlen: 48
                          2403:ad80:5017::/48 maxlen: 48
                          2403:ad80:5019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 05:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep  3 05:54:44 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7d823-255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:43:32:94:9c:db:fa:4a:dd:e6:b7:52:23:
                    6a:12:9b:a5:ab:3b:14:77:73:90:40:49:17:b5:50:
                    1e:87:6c:bd:e3:31:71:29:9c:59:75:55:86:a7:0c:
                    63:cf:c5:83:5c:29:c6:04:22:d7:2e:51:11:b0:fc:
                    2e:9b:2e:4d:ed:fc:75:8d:1b:2a:a8:87:d8:69:6a:
                    2b:5d:25:e5:75:aa:1d:31:42:2e:57:81:43:6c:89:
                    e0:de:1f:51:cf:41:00:2d:6f:57:77:3f:71:c8:2d:
                    e5:41:c2:4b:c2:79:7f:46:e9:9e:b8:08:c2:f5:d7:
                    49:3d:83:3f:c6:d6:3b:80:cd:e1:ac:5e:76:41:a6:
                    57:e7:0d:53:b6:3f:cb:af:fc:a0:a1:a6:b7:2e:92:
                    67:e3:99:17:4b:93:47:13:58:ae:12:03:f4:8e:6f:
                    3b:0f:3b:37:c3:5c:56:29:d3:09:5d:0c:f6:f5:7d:
                    b0:c8:df:92:96:51:95:bd:9b:ce:58:7e:85:67:f2:
                    7b:cb:84:cd:d9:4d:55:45:2a:2e:85:41:1d:8a:54:
                    8b:f4:e8:bd:41:c2:92:ef:f1:45:d0:20:c4:4d:3c:
                    3c:fe:53:9b:76:e0:4a:8f:ab:2a:2e:59:03:ae:e4:
                    73:24:85:76:ab:c3:29:8d:39:bf:c3:71:4f:ec:36:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:48:85:67:C6:DE:76:40:1F:89:2D:C9:51:C0:26:87:9A:66:A1
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F73A3EA458FF11F0831F6664C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:5012::/48
                  2403:ad80:5016::/47
                  2403:ad80:5019::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:43:b6:c9:fe:99:66:7e:98:ff:b9:d4:90:a0:a7:09:c2:
         cd:47:bb:e8:36:8f:fd:fc:74:18:1d:3f:4f:92:bf:1b:d3:9d:
         9c:51:94:51:a5:4e:fa:8c:b7:1a:a3:cd:69:85:f9:87:f8:cb:
         e4:92:1a:1a:11:8a:b6:28:c5:33:18:9b:6c:ce:29:0c:94:fd:
         f2:45:19:23:01:55:ef:4b:f5:49:0f:50:e6:6b:37:4b:68:1b:
         01:02:7e:49:fe:ff:63:ea:db:97:9b:35:b2:45:ba:61:62:4a:
         1e:6b:d9:a4:f4:2c:60:f1:ff:4d:5d:41:49:91:0d:e6:89:68:
         a3:34:cf:f2:47:0a:26:27:31:ac:2b:be:0d:94:e7:a8:a2:fd:
         94:b8:00:30:1e:96:91:9f:c0:56:35:b8:3c:fc:fb:30:63:3c:
         ec:db:62:a3:37:0d:c5:91:e9:b6:d1:60:9c:51:34:e8:8b:30:
         a9:fa:6c:d1:b5:e3:b3:a7:74:1c:c6:cb:1e:d6:ef:bc:7c:68:
         f7:bf:56:7d:3c:d8:3e:3f:f2:34:de:d3:4f:73:8e:dd:c6:8b:
         24:fc:1e:c5:f5:f2:6f:01:29:0f:76:c0:c6:48:39:58:6e:f6:
         6d:4e:a2:44:04:2e:eb:9b:91:58:4e:94:01:5e:d6:0c:65:43:
         30:4e:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:45:17 2025 by rpki-client