Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/19D89DB656F311F083F53B5DC4F9AE02.roa
File:                     19D89DB656F311F083F53B5DC4F9AE02.roa (raw, json)
Hash identifier:          Krc4hrUxizB7HZBQVnd3e8NynO1iw8BpxC+SzV7uUy0=
Subject key identifier:   C1:12:B3:1E:F1:1C:6F:3D:B9:EA:9D:FC:59:CF:98:06:1C:68:80:0B
Certificate issuer:       /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial:       07
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/19D89DB656F311F083F53B5DC4F9AE02.roa
Signing time:             Wed 02 Jul 2025 03:17:36 +0000
ROA not before:           Wed 02 Jul 2025 03:17:36 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     38794
IP address blocks:        65.181.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
        Validity
            Not Before: Jul  2 03:17:36 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6864a4d0-59e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:c2:11:51:48:f9:a1:a4:8f:5b:41:a5:8d:
                    8f:80:c6:dc:25:de:37:30:8a:c3:78:ad:b2:32:40:
                    b4:61:b6:5e:6a:e1:7f:83:54:ce:7f:c1:ca:d5:ad:
                    28:6e:f6:27:b7:a9:19:35:32:82:22:f9:ee:ef:4d:
                    56:f1:83:2d:6e:c0:d0:0e:10:ab:a3:ae:94:e1:3e:
                    29:d2:a3:a8:60:f7:02:bc:ae:05:c1:b5:0e:11:96:
                    0d:2d:ac:38:9b:63:4c:ea:4b:f0:30:05:71:2d:be:
                    93:5e:41:b3:80:39:15:93:27:e0:57:87:a2:ef:5d:
                    75:d7:d9:14:41:c6:b7:4c:ee:d4:d7:1e:70:5d:28:
                    27:75:03:26:fc:eb:99:49:f5:21:79:d8:0e:a4:8b:
                    9f:40:36:a3:4c:67:4d:ad:d5:f7:4f:b6:c0:db:ff:
                    8c:5b:60:a9:fb:ad:6f:85:e3:e8:82:57:db:1a:bb:
                    1e:01:0a:09:7d:fe:52:9a:c4:7a:23:83:f6:4a:53:
                    c1:39:65:e5:d4:85:c9:13:52:2d:b6:2f:6a:b2:ad:
                    8a:f5:69:37:48:8a:3c:05:8f:f7:47:e2:df:f0:4d:
                    01:2a:2f:da:56:e8:b3:fd:52:fb:3d:e7:d4:b0:8d:
                    9e:51:67:0c:4f:32:ef:12:ab:e9:16:0c:28:60:a6:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:12:B3:1E:F1:1C:6F:3D:B9:EA:9D:FC:59:CF:98:06:1C:68:80:0B
            X509v3 Authority Key Identifier:
                keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/19D89DB656F311F083F53B5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:44:f5:ed:ff:6a:51:f6:46:fc:86:ed:66:04:80:36:1e:0c:
         74:36:99:11:40:83:f7:b7:e2:e8:16:12:5f:37:85:77:e5:08:
         4f:3b:fc:66:84:9f:fa:03:5d:b5:fd:22:d9:5f:2a:20:dd:d4:
         9b:0f:2e:07:3f:56:26:bc:b3:0d:e1:74:e0:7b:25:52:23:8c:
         99:d6:94:85:76:0c:2d:39:72:c5:02:bd:1f:7b:bd:33:4e:78:
         5b:7b:a8:ef:8d:b6:bd:60:9e:8c:74:d2:fa:21:4f:84:86:7a:
         24:13:e0:ef:f2:76:47:22:78:32:78:80:e4:7e:d0:f1:66:3d:
         08:db:de:84:e6:3b:4d:6d:74:cc:b1:e5:c3:0a:33:33:1b:5d:
         26:27:b7:8a:ac:5e:e5:8f:c9:0a:3d:b8:b0:4c:f7:70:a8:62:
         e4:75:a0:e6:12:2b:c0:90:09:30:80:bc:3b:66:2d:0b:98:e4:
         f5:65:2a:8d:b0:75:c8:5c:6a:6f:17:7d:d4:84:30:7b:ad:20:
         48:26:8a:38:85:e4:09:4b:3d:57:a6:f2:94:23:ef:85:98:f6:
         44:e5:64:26:fd:e4:36:38:76:40:ad:3f:c1:92:6b:7d:4a:78:
         f9:df:f8:33:6e:49:30:57:8b:6e:e5:27:4f:88:58:f5:dc:35:
         30:5c:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:09 2025 by rpki-client