Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BE608B1833DC11EF82BB2E27C4F9AE02.roa
File:                     BE608B1833DC11EF82BB2E27C4F9AE02.roa (raw, json)
Hash identifier:          exVLBxR9pxtqc5cvsQFpU7WzBwIbqGPyCKYDoLeIqwE=
Subject key identifier:   E3:F8:18:17:D4:39:9E:C7:44:E1:2A:10:0E:A4:E2:49:15:2B:9E:CF
Certificate issuer:       /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial:       027A
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BE608B1833DC11EF82BB2E27C4F9AE02.roa
Signing time:             Sun 21 Sep 2025 02:20:08 +0000
ROA not before:           Sun 21 Sep 2025 02:20:08 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     36733
IP address blocks:        2001:df4:2a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
                          rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
        Validity
            Not Before: Sep 21 02:20:08 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68cf60d7-1b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:19:f9:f1:60:6f:c4:ad:e5:90:f8:f4:51:
                    75:e9:5e:c3:92:10:50:55:79:d2:3b:8a:25:20:3e:
                    d0:df:27:26:00:f9:47:d9:8c:7e:48:e4:c3:2e:4c:
                    9e:67:7b:ae:ca:49:e8:6f:1a:99:5a:ae:b2:6d:93:
                    3a:f6:5b:61:7a:cb:ca:22:c7:94:8b:20:be:b8:11:
                    6a:e2:89:a2:3a:84:08:94:77:3f:44:f8:3d:30:04:
                    26:1c:60:87:1b:51:71:5b:57:91:0e:55:e2:b1:64:
                    fb:2c:81:0d:f8:d5:7f:c9:4d:ee:16:46:74:48:2b:
                    bc:70:57:ba:04:cd:c0:3a:f4:a6:b4:8b:1e:6b:8a:
                    e7:ec:0e:81:5a:0d:fd:f2:0d:e5:00:f5:0e:e4:90:
                    e8:f3:20:89:75:64:68:e4:a5:33:63:b0:ce:2e:54:
                    97:45:3d:33:ba:1f:ba:ef:d4:45:c9:e4:1e:71:dd:
                    e1:0f:6c:99:12:61:55:c8:ec:10:6b:fa:57:db:b8:
                    22:6e:71:79:ae:1f:df:0f:ce:6a:87:bd:16:91:a8:
                    43:40:40:8b:b8:a6:ec:35:15:fd:cd:e8:14:02:4a:
                    8b:1a:34:c0:dc:1b:79:86:81:78:b3:58:df:3c:fd:
                    6c:af:e2:18:aa:60:46:24:9f:71:b1:5f:d6:00:05:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F8:18:17:D4:39:9E:C7:44:E1:2A:10:0E:A4:E2:49:15:2B:9E:CF
            X509v3 Authority Key Identifier:
                keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BE608B1833DC11EF82BB2E27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:a1:41:d7:43:88:15:a1:b8:c4:54:87:a7:c6:62:7f:cc:
         58:d3:26:68:99:1e:86:24:f5:45:bd:7d:19:e6:d8:dc:88:4b:
         77:96:3d:52:e9:dd:aa:bc:eb:b0:6c:d2:5e:6d:66:8d:20:6f:
         74:c5:d2:74:1e:ab:53:ba:a0:8c:7c:05:30:75:1e:89:ce:88:
         f8:08:33:10:f8:6c:47:ea:38:68:ce:3b:7f:62:09:9b:88:71:
         82:a8:56:42:10:0e:5c:46:9c:7e:29:ff:3d:03:e6:f1:8a:20:
         56:f0:88:df:31:15:35:8a:8e:6d:4e:f4:71:c4:8e:eb:39:25:
         cd:27:1a:2d:5d:88:5b:8b:61:0d:85:a2:52:b8:9a:76:cf:43:
         d4:cf:39:2a:05:04:63:28:c4:48:d5:59:d1:3f:84:2f:a3:b0:
         34:4f:a8:30:a5:37:62:39:16:1e:21:53:e9:8d:3f:cb:71:56:
         52:bd:e8:72:47:aa:b4:21:03:af:80:68:1a:b5:02:2e:e4:9a:
         e7:39:3c:5a:51:dd:02:bc:44:5a:4c:12:cc:8c:61:b7:1e:5b:
         2f:7c:38:9e:fe:62:3c:5b:11:2c:c6:d7:41:0d:4c:5e:f5:23:
         16:f1:e8:3c:e7:2c:ae:4b:77:43:6d:c0:95:52:38:87:ec:99:
         bb:ca:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:50:39 2025 by rpki-client