Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/9772767EB69A11EFBEB6CE0CC4F9AE02.roa
File:                     9772767EB69A11EFBEB6CE0CC4F9AE02.roa (raw, json)
Hash identifier:          7OwaJrudjWnecoz7BCK7kPXjzB+3R7tWJ8DmqplI2rk=
Subject key identifier:   61:11:67:80:F6:5B:7E:5F:E4:EB:B0:E6:88:0B:C4:08:B1:23:E0:FA
Certificate issuer:       /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial:       01B5
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/9772767EB69A11EFBEB6CE0CC4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:11:17 +0000
ROA not before:           Thu 05 Jun 2025 03:11:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        2403:1cc0:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
                          rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 02:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
        Validity
            Not Before: Jun  5 03:11:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68410ad5-578c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:45:58:0b:8f:06:3c:42:84:92:5b:38:c9:
                    42:b5:26:64:38:c2:5f:45:d5:d3:57:2e:3a:13:bf:
                    01:ac:d6:f1:85:3f:60:05:76:ca:14:b0:4a:bd:e7:
                    19:21:f4:e1:c4:78:6d:b9:10:65:d8:a8:0f:fd:5d:
                    76:a4:07:70:a7:da:d4:c7:de:67:19:75:d6:60:cf:
                    31:3c:92:50:ef:c3:61:7f:17:30:f8:e5:64:46:d2:
                    c8:e6:7b:8f:1e:96:9e:ea:3b:53:89:3a:77:bb:b6:
                    43:19:2a:dc:7b:2e:ca:ed:e3:6c:a2:46:4b:5e:f7:
                    44:f9:38:87:96:db:a0:a8:1c:04:98:0e:56:41:68:
                    ad:ac:e7:8b:bf:36:2e:cc:8e:0c:c6:67:2d:a2:a1:
                    36:73:ff:e3:b5:42:4b:fa:f9:04:e9:5b:b9:27:dd:
                    9b:4d:7f:96:85:6f:e2:30:3f:b6:78:ab:98:c8:bd:
                    19:36:96:ac:4e:cd:7d:ea:e7:09:b6:74:20:0e:78:
                    a7:67:85:bf:bd:be:17:77:cd:d3:58:42:cc:c9:e0:
                    ed:75:e9:f1:00:26:ac:b8:08:32:d6:45:e1:f5:f0:
                    db:05:c8:19:9d:99:ab:91:80:31:47:af:ec:d8:26:
                    b1:cd:1b:0f:fc:ae:b6:dd:57:90:a2:30:d5:f8:26:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:11:67:80:F6:5B:7E:5F:E4:EB:B0:E6:88:0B:C4:08:B1:23:E0:FA
            X509v3 Authority Key Identifier:
                keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/9772767EB69A11EFBEB6CE0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1cc0:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:60:84:25:b4:c2:d1:d9:af:5f:98:46:be:11:a9:bf:e8:
         8c:71:21:da:39:4a:be:fc:8a:cd:aa:9b:cf:47:a3:39:7a:8d:
         99:ad:3b:3d:6f:81:ea:32:34:d4:e1:ba:a4:0b:15:19:b3:c7:
         3c:2b:e6:a0:b2:37:1d:62:20:9c:1b:05:4d:1a:47:68:03:cf:
         44:24:09:c0:07:53:dd:83:85:39:5d:fb:55:f6:59:fe:9f:2d:
         84:10:d8:36:0b:7d:db:42:aa:fc:e9:e4:e8:c4:7a:79:ec:62:
         20:b3:bc:58:bf:0e:ca:dc:5f:94:5d:b5:36:69:82:2d:c5:76:
         49:b9:20:ad:b1:17:c5:8b:28:6a:31:d1:50:01:0c:b2:14:8f:
         dc:f9:0d:c2:8e:33:93:c3:3b:ba:a1:ed:93:27:cb:a9:ce:08:
         a8:bc:cc:bc:c7:f3:fd:50:b2:69:e5:41:20:68:9d:86:96:e3:
         52:d2:fe:aa:59:8a:da:06:5b:36:db:6d:09:4f:c0:9c:32:a2:
         30:fb:95:e0:b6:a3:5e:bc:4e:5e:c2:61:95:4f:88:9a:23:d1:
         3b:a2:f0:22:5a:02:cf:2a:01:35:44:ef:62:98:f3:03:e4:ed:
         3a:92:59:79:b3:d6:97:4a:4f:a4:6d:68:7e:eb:00:6d:b6:89:
         e7:11:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:25:38 2025 by rpki-client