Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/7DDEB3163B9D11F08338F965C4F9AE02.roa
File:                     7DDEB3163B9D11F08338F965C4F9AE02.roa (raw, json)
Hash identifier:          Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=
Subject key identifier:   69:D4:D8:19:E4:8C:51:F4:BE:F7:CB:32:FF:AB:31:31:2D:57:35:75
Certificate issuer:       /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial:       02
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/7DDEB3163B9D11F08338F965C4F9AE02.roa
Signing time:             Wed 28 May 2025 08:26:46 +0000
ROA not before:           Wed 28 May 2025 08:26:46 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     139772
IP address blocks:        2001:df4:dc40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 07:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
        Validity
            Not Before: May 28 08:26:46 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6836c8c5-c91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:e1:82:34:a7:e4:84:ae:c4:da:4d:9d:45:
                    9b:51:5a:55:c8:cd:ca:fe:30:d6:b3:c9:01:91:a5:
                    53:f9:67:0f:2b:90:ac:f4:68:6c:e4:fa:07:6b:7e:
                    86:a4:09:71:04:cc:1a:6f:d3:95:c1:d6:b9:42:bc:
                    e1:d0:a7:24:06:db:34:7e:26:01:f1:d6:de:3c:42:
                    fd:f2:54:59:ae:44:57:ba:49:4d:5f:f5:19:44:90:
                    a7:93:2f:e9:db:f5:25:ee:2d:60:8a:3a:85:9f:08:
                    a4:d7:4c:37:18:da:70:c4:43:92:41:23:02:6c:f5:
                    5c:aa:76:8e:21:62:ae:13:58:5d:4c:f8:66:49:c4:
                    d6:48:d1:12:ad:72:a4:8f:a8:bb:ff:f4:05:ce:f7:
                    b5:00:bb:7a:bb:ea:d1:9b:34:17:d9:3e:6d:1f:12:
                    04:e5:01:89:4a:c2:76:a5:25:54:00:db:cf:2d:1d:
                    3d:57:65:28:d8:e3:18:49:6d:5c:25:65:99:a0:ca:
                    7c:87:f7:9d:1f:b4:99:e3:5d:81:40:11:20:f5:96:
                    c5:07:95:c8:0d:75:53:68:d7:48:9e:2a:5d:52:14:
                    3f:46:38:2f:12:f0:cb:37:8c:01:ea:cf:1b:48:5d:
                    54:f3:90:cf:74:0b:cf:42:66:71:2d:ac:20:d8:d3:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D4:D8:19:E4:8C:51:F4:BE:F7:CB:32:FF:AB:31:31:2D:57:35:75
            X509v3 Authority Key Identifier:
                keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/7DDEB3163B9D11F08338F965C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:dc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:35:a3:6e:46:e7:68:ea:82:d3:85:3d:d6:fb:33:43:bc:
         11:cc:ca:b1:cf:3b:b4:f8:db:67:90:cc:85:58:5d:2a:de:3c:
         0d:31:b1:17:c4:5f:bd:e6:26:c2:d4:df:27:ac:40:2b:80:f7:
         63:05:b2:03:38:88:de:39:fd:d8:68:3c:a0:aa:f6:8e:a4:da:
         6a:93:42:44:ee:4d:b6:b9:6a:50:43:78:d4:bb:41:ab:a3:ea:
         eb:98:41:b7:7a:1f:60:8c:3d:6b:7f:8e:eb:13:e5:82:2e:12:
         42:bf:12:fd:92:05:53:60:ad:3a:61:0d:56:38:1a:b5:a0:43:
         e1:e7:3d:44:1d:68:8d:68:a6:09:70:4e:ad:bf:71:26:96:a2:
         f2:04:75:d8:8d:49:21:2f:c6:fc:8a:b8:21:20:2a:f2:64:61:
         fb:06:0f:8d:c3:fb:41:b4:78:2b:b8:92:0c:31:6f:3e:41:85:
         f8:ce:bf:50:1a:d9:84:7b:12:65:6c:b2:63:ab:2c:e6:ee:d9:
         46:5a:82:37:2b:9f:39:c8:a2:cc:3e:04:e7:f5:29:f0:84:7f:
         62:f0:8c:34:38:60:e5:f6:97:bf:a3:80:6e:c4:cd:0e:13:18:
         ff:ae:27:09:a5:db:ca:79:77:c2:d2:fc:4a:c7:75:7e:2d:8f:
         61:dc:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:35:51 2025 by rpki-client