Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/7E04A27C33F911E98674843BC4F9AE02.roa
File:                     7E04A27C33F911E98674843BC4F9AE02.roa (raw, json)
Hash identifier:          MUiCEFkOTO4FtkjvpufTX4GTFRhCPjdetQYvgSwrwG0=
Subject key identifier:   B4:EE:60:BF:64:81:EA:E9:9B:9E:85:19:47:FB:D0:ED:AB:E7:4D:C2
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       3586
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/7E04A27C33F911E98674843BC4F9AE02.roa
Signing time:             Sat 14 Jun 2025 14:50:55 +0000
ROA not before:           Sat 14 Jun 2025 14:50:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9431
IP address blocks:        2404:138:4004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Jun 14 14:50:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684d8c4f-2fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:7c:2e:65:31:06:64:95:a2:ab:fa:cb:d5:
                    e7:78:c3:0a:1e:8d:f1:af:48:5c:ea:30:8f:46:52:
                    b3:57:8d:ff:d7:0b:0b:a7:1d:af:48:9c:10:fa:8e:
                    a2:75:c6:1a:f4:69:5f:6a:46:dd:80:64:bb:d6:aa:
                    9c:7a:83:82:8c:98:66:2d:60:6b:69:ae:6e:60:25:
                    12:17:d4:89:3b:2c:22:3d:e7:63:d8:e1:6f:d7:1b:
                    50:18:cc:16:17:2e:63:dc:99:42:71:4e:5f:2d:08:
                    4b:63:c4:da:a9:9b:d6:ca:58:5c:b2:df:b9:03:00:
                    1b:25:80:58:67:0d:d0:fd:64:fc:e9:2f:ef:ff:15:
                    d9:b7:dd:51:73:64:94:6d:83:08:a9:bd:3d:07:c7:
                    1e:9a:a6:c1:f2:70:b1:ee:d9:ea:68:ab:5e:5e:c9:
                    90:36:a9:c5:eb:83:0a:bf:2e:16:17:6e:fb:41:d8:
                    1b:f3:d1:1a:08:e0:09:ea:a4:b3:99:e8:fb:26:ac:
                    58:2d:6e:05:5a:30:60:c9:57:c0:5b:d2:1a:b1:ad:
                    5b:8b:dd:12:a4:df:78:10:67:7d:cf:ef:ca:0b:7b:
                    9d:44:df:3a:ef:09:19:99:b0:4f:e7:cf:f5:5b:ac:
                    8c:ee:45:a7:8d:32:d7:53:5e:c2:1e:c4:47:ad:9c:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:60:BF:64:81:EA:E9:9B:9E:85:19:47:FB:D0:ED:AB:E7:4D:C2
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/7E04A27C33F911E98674843BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:138:4004::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:44:47:63:9b:24:ab:7b:fa:3e:e8:64:1c:af:87:47:53:ec:
         72:9d:e2:01:b8:06:1e:cd:6d:1a:1a:c6:a7:7c:6f:69:1d:da:
         58:e5:19:b8:af:26:bb:cd:db:01:5c:4a:9b:8c:7f:90:eb:cb:
         ed:5d:48:1e:a9:3b:c2:d0:7f:07:32:45:e7:a9:60:d6:ad:a7:
         06:12:94:ea:40:df:9d:6c:5e:4c:52:17:22:41:62:4a:bb:3f:
         a4:47:e6:8e:3c:15:de:44:6a:36:b9:3e:c2:f1:d6:be:65:da:
         1b:5f:ca:93:2b:f2:a1:0b:3b:c2:c2:f8:d4:8e:6f:51:fb:85:
         64:43:4e:94:5f:00:6f:4a:51:f2:ac:0d:ef:f2:b2:63:b7:95:
         50:cb:41:8f:62:e1:db:1a:44:94:87:26:67:dd:7c:23:39:af:
         e7:e0:fa:6d:64:29:35:b4:df:60:7d:b3:86:e5:8a:22:29:5e:
         c8:8f:2f:09:75:81:68:3b:b7:54:68:a1:98:1f:a1:74:5e:18:
         52:08:88:04:74:90:97:d1:de:22:87:57:e1:47:04:dd:58:15:
         de:35:89:24:e2:95:55:11:e9:72:c7:20:d7:c8:a5:4a:1e:c7:
         71:5c:94:b6:73:24:82:72:77:80:e6:84:d3:9b:03:34:85:66:
         e8:74:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:56:12 2025 by rpki-client