Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
File:                     282CA82C023F11EEB716134FC4F9AE02.roa (raw, json)
Hash identifier:          EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=
Subject key identifier:   0D:B2:17:34:97:9A:6E:E3:DC:74:EA:0C:4E:76:3D:36:6A:76:FE:A7
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       0197
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 04:01:32 +0000
ROA not before:           Tue 03 Jun 2025 04:01:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     203472
IP address blocks:        2401:5a0:bbb0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun  3 04:01:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683e739c-0f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:df:86:e1:94:30:a0:af:20:44:19:70:86:
                    20:ec:45:8f:34:2f:52:46:06:fa:38:25:a2:50:4b:
                    e3:8a:36:c6:a3:df:f2:f9:83:6f:83:c3:1a:00:03:
                    db:a5:9b:a0:94:04:5f:02:aa:dd:b2:c0:f7:87:d7:
                    bf:d5:4c:90:9b:1a:52:5d:36:c7:f6:76:e8:a2:14:
                    56:79:b4:f7:4b:8c:dd:b2:af:97:20:54:e7:70:f4:
                    3b:ad:02:96:d9:94:ae:27:62:96:9b:e5:33:6f:30:
                    d1:a3:bb:18:23:1b:54:92:36:7c:37:66:b2:8e:fa:
                    b1:cc:8e:b4:c0:48:37:df:78:88:dd:3e:e3:c4:ec:
                    62:a2:00:03:0e:5e:ad:4f:ec:fa:19:82:01:d4:fb:
                    ba:1b:a6:25:a9:23:02:ff:ce:18:50:c7:5a:2d:05:
                    f8:f1:bd:eb:4e:a1:cb:f5:69:87:40:bc:83:e1:c9:
                    36:8c:18:66:c7:29:e7:00:c0:67:84:c5:34:b0:d7:
                    a6:4d:4f:b9:a1:9c:74:8e:b1:1a:93:0f:a8:85:96:
                    3f:53:25:c3:cf:48:22:33:69:9d:af:e8:5a:5c:3f:
                    b2:22:f6:a7:d0:94:36:f9:eb:45:79:f3:6e:38:f4:
                    46:63:37:41:de:64:5b:5c:22:9b:1d:18:9b:a6:cd:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:17:34:97:9A:6E:E3:DC:74:EA:0C:4E:76:3D:36:6A:76:FE:A7
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:bbb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c9:5e:2f:0d:db:dc:e6:d1:15:0d:5b:44:bc:27:86:37:a9:68:
         64:e2:58:a0:1c:3a:75:f5:8d:4d:ea:69:1a:2f:df:71:80:fa:
         0e:91:ce:a2:01:45:c6:1a:17:73:b9:a2:f6:79:f3:28:a4:e7:
         cb:ce:20:46:f6:4f:6f:83:8a:b5:79:c8:04:ad:b5:42:c5:95:
         24:b6:5f:c9:c9:15:9b:08:3b:83:b9:72:b0:43:cd:f3:26:ff:
         d6:bc:aa:06:b8:d8:ff:54:0b:f9:7a:74:c9:c1:70:79:00:d0:
         96:24:14:60:46:19:eb:42:b4:30:10:fc:f5:01:fe:39:df:68:
         c3:da:7b:e6:c5:45:09:e6:b5:c0:d0:5a:62:16:1f:3d:da:9c:
         b8:bf:d4:ad:99:67:0a:77:22:55:b3:0c:44:f4:82:57:21:0d:
         2f:d2:e9:6b:60:35:11:4c:31:e1:6c:1b:22:a1:2c:26:f8:e6:
         c2:66:88:24:5a:40:1d:5d:6c:a6:60:ba:0f:27:86:fa:bf:dd:
         5f:e0:51:ec:80:4d:00:01:d6:a8:9a:21:ac:13:3a:33:b0:00:
         d9:4d:54:b4:06:f2:46:4b:dd:5b:27:bf:74:aa:76:16:0c:b8:
         a3:3c:00:75:9c:fa:cd:bd:ec:75:e7:e1:d9:2b:ca:b1:6c:a9:
         70:e8:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:59:12 2025 by rpki-client