Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
File:                     6019FE0A351F11F0A19A4165C4F9AE02.roa (raw, json)
Hash identifier:          RltFGiH/4qFzxXpUFf3K+zTBE0M4VSZ7daUjJjGvmfA=
Subject key identifier:   F8:67:2E:AC:6C:7B:FD:B8:EB:AE:C5:88:C5:A6:82:1A:47:71:74:9A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4B3F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
Signing time:             Tue 20 May 2025 02:08:52 +0000
ROA not before:           Tue 20 May 2025 02:08:52 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150860
IP address blocks:        2401:1760::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19263 (0x4b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: May 20 02:08:52 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=682be434-76e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:a0:cc:9d:de:de:32:b7:99:b3:11:f0:b8:
                    65:b2:26:b4:f3:85:60:b1:97:f4:18:95:b6:3b:95:
                    14:73:3a:5f:5a:96:ba:ca:84:7a:dd:50:e3:6d:6e:
                    9c:86:d5:fe:10:21:4e:b4:36:44:fd:a0:21:ca:5b:
                    69:9b:20:48:88:1e:22:63:5b:fc:a3:81:4d:98:15:
                    1a:be:af:68:1d:31:fa:e7:69:ee:34:62:37:20:70:
                    29:16:90:e5:91:bb:47:f9:1f:69:ae:d5:2f:7b:36:
                    b5:ec:9e:a3:a7:28:c3:4d:56:a8:8a:ef:10:d5:d0:
                    70:ee:ab:a4:29:9e:6b:57:bb:a8:a0:46:78:6b:c7:
                    48:67:77:0d:14:c7:c8:2c:25:ca:41:c4:d9:50:62:
                    a0:e5:ed:a2:84:94:e4:12:33:68:35:6b:fe:45:06:
                    b4:3b:71:60:3c:4b:fa:33:56:bf:07:30:d8:30:61:
                    19:81:b5:ea:7c:f5:60:11:3f:e3:62:45:05:10:89:
                    1e:b0:b9:b2:0f:d9:7e:cb:18:43:cf:64:9d:d8:ec:
                    58:e1:96:fc:2a:da:0d:88:70:56:31:57:34:c1:ab:
                    c5:c3:65:ce:75:e4:e0:b0:4a:3b:a6:5f:a7:7f:dc:
                    a6:b2:31:8b:6d:e5:b7:1e:d5:f8:3b:85:c3:55:da:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:67:2E:AC:6C:7B:FD:B8:EB:AE:C5:88:C5:A6:82:1A:47:71:74:9A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1760::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:d9:31:a2:d4:bd:59:77:50:0c:85:4d:58:39:05:84:ca:
         c7:cc:de:12:10:8c:76:28:3a:86:53:ac:91:e8:45:4b:2b:de:
         00:1a:5f:99:2a:ef:e2:ee:66:fa:36:73:62:2c:e1:dd:be:ee:
         3a:37:be:07:bf:33:43:ed:87:ad:2a:9d:aa:61:ce:57:c1:b0:
         62:ce:1c:90:6e:20:93:47:21:db:98:4d:cd:fc:d2:84:f2:5c:
         fa:5e:20:cb:9d:e7:0d:08:33:49:c5:ff:c3:55:e7:11:34:90:
         21:5e:9f:2b:f2:20:91:a8:66:97:85:88:87:72:b0:1d:e2:56:
         90:14:c5:84:f4:cc:48:36:a4:ac:da:7a:fd:7e:c3:e8:00:d2:
         ff:86:a1:4e:51:0c:13:5a:6a:ae:7b:96:56:f8:71:8f:a6:ff:
         9b:51:c4:a2:27:32:b9:ef:97:06:8e:d1:2d:0b:f0:ba:57:f7:
         2c:0e:6e:87:9b:95:5e:cd:8f:85:a4:77:84:37:42:47:89:30:
         e2:d1:9d:a9:a8:d5:99:93:3e:e4:32:a7:49:dc:86:34:06:01:
         1d:e3:02:06:f7:d4:78:cd:ec:50:ed:68:91:b4:7d:41:6e:2a:
         da:82:84:7e:55:d7:6f:52:fa:0d:6c:9f:b9:48:e2:c2:0c:ff:
         99:73:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:07:28 2025 by rpki-client