Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa
File:                     41372C94C1A311EC8986B978C4F9AE02.roa (raw, json)
Hash identifier:          nE6kAHCEwbJOcQitJ5kMnlC5G5Mi3eMom/Kjm/RmIu8=
Subject key identifier:   80:6B:00:2F:61:47:44:6E:FA:0C:1C:0A:A9:1B:D6:68:4E:6C:85:F6
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       07DC
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa
Signing time:             Sun 14 Sep 2025 18:27:51 +0000
ROA not before:           Sun 14 Sep 2025 18:27:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139192
IP address blocks:        2001:df0:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Sep 14 18:27:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68c70927-8cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:8b:5e:a6:c7:c4:eb:df:0f:be:7e:6f:30:
                    b3:ac:55:c2:29:97:ba:19:b7:2e:ff:6e:a3:2a:f3:
                    35:9c:36:a6:44:21:71:2a:cd:e0:60:39:0b:d8:02:
                    06:d8:84:93:3e:43:5b:a9:22:74:7d:fb:fa:d6:88:
                    3a:27:74:74:b5:fb:b4:88:b0:91:ee:90:e8:80:b0:
                    24:b2:3a:3f:9d:86:3d:4b:99:f5:07:f8:a7:ae:a9:
                    ce:0b:fb:0e:8a:96:61:65:a1:76:43:af:fb:fb:b5:
                    23:38:df:71:de:42:da:8d:78:d1:a3:24:3b:7a:3b:
                    fe:2d:e3:7f:00:8b:d6:2e:95:c2:82:2e:6e:e0:74:
                    d6:69:3f:50:f7:c7:98:e0:97:b3:8f:dc:26:f4:70:
                    79:4d:c4:72:da:82:1b:a6:0b:21:ec:3a:fa:61:55:
                    55:6f:11:87:bc:0c:7c:4d:93:c5:69:c4:db:49:b7:
                    0b:7d:1c:9a:2a:32:f0:c0:74:1c:32:cc:ec:ea:7e:
                    a1:b3:5a:3b:e4:39:9d:88:ed:8f:1d:96:b4:31:61:
                    73:f9:50:60:1b:a6:98:5e:dc:fc:e2:12:94:7f:87:
                    3a:67:f2:55:5b:36:f5:67:c7:b1:4c:12:67:96:94:
                    20:78:a4:ab:7a:2e:18:cc:bb:63:f1:ac:48:39:0a:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6B:00:2F:61:47:44:6E:FA:0C:1C:0A:A9:1B:D6:68:4E:6C:85:F6
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:99:dd:2b:1d:29:16:4e:c1:f3:2e:ce:f3:37:e7:99:c4:1d:
         c6:9a:eb:52:b5:bf:b7:ee:88:57:79:97:58:63:a6:f2:1e:a5:
         02:fc:17:7f:00:69:d9:af:43:87:38:d1:76:bc:57:36:84:34:
         db:24:8d:75:ed:1f:f1:a5:5f:83:11:ec:9c:ab:0f:5a:8b:6f:
         93:67:af:06:33:39:81:5c:1b:07:21:cc:49:b1:a0:68:e6:4c:
         fc:ca:60:18:b1:28:0b:60:e2:8f:98:dd:2c:66:95:db:57:e2:
         e8:1e:d3:f7:83:0b:ee:eb:02:8e:1d:21:a8:9f:51:b6:de:07:
         37:e5:2a:07:2e:2a:ad:6a:bc:fe:65:f7:f9:7a:3f:f0:e3:47:
         7b:8f:ea:d2:d0:c9:50:58:ab:18:df:26:84:60:08:15:81:fa:
         d4:47:b1:7d:ab:29:86:ac:a0:2b:c8:10:c9:8d:06:f5:bf:f8:
         6d:78:a3:db:7f:6b:7c:ad:dd:9f:b5:8c:6a:09:9c:41:5a:8e:
         2b:e9:c5:15:67:1a:cc:b8:43:de:ac:92:41:e0:72:50:c0:51:
         00:1e:b9:f0:ef:ca:33:38:a0:24:c5:80:1c:cc:ef:51:e1:aa:
         4f:22:2e:c5:f7:0a:a8:57:e2:96:a2:7a:68:f8:90:9b:a0:84:
         87:ca:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:10:54 2025 by rpki-client