Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
File:                     0722D856931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          QPwmUi6Jbr6XpgG54LpHBRL5GHoE85qF3kMh45EU4DQ=
Subject key identifier:   BA:6F:83:6E:B3:5B:0B:FE:34:68:85:69:FE:20:17:2F:FC:EF:40:BB
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2647
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
Signing time:             Sun 14 Sep 2025 17:57:32 +0000
ROA not before:           Sun 14 Sep 2025 17:57:32 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     141384
IP address blocks:        2001:df0:5580::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9799 (0x2647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Sep 14 17:57:32 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68c7020c-ae74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:90:a4:62:9e:b0:62:a3:c3:cb:ce:0f:c7:33:
                    f9:81:d6:9e:0b:7b:a7:5d:31:38:50:f7:35:68:61:
                    5b:75:9c:54:63:df:54:6f:94:2d:af:f9:a7:18:a6:
                    c9:24:5c:af:86:f4:ba:0d:94:f6:f0:93:6b:9b:aa:
                    f8:c2:44:13:eb:16:43:ad:6d:1f:43:b5:88:61:87:
                    2e:d1:9d:3b:14:7f:dd:f4:63:d4:93:d2:1d:df:b7:
                    88:b3:b1:b5:25:73:ca:88:82:04:da:ec:7e:e5:9e:
                    8a:f0:e5:99:9e:94:dd:26:99:5d:1b:6e:4d:1f:a7:
                    07:eb:62:25:db:61:d9:ef:6a:47:9a:38:6b:ad:4b:
                    51:13:84:76:a8:c2:30:b4:8e:29:86:68:44:ee:2e:
                    5c:91:67:fe:00:28:e4:46:52:0e:94:41:f9:1e:2c:
                    cb:94:68:99:de:70:4d:2b:b3:ed:29:60:9f:2a:5a:
                    43:e7:c3:cc:81:5b:23:ed:3d:5e:12:2f:4a:04:57:
                    cc:cc:18:f2:3f:68:5b:ef:93:9f:1d:d2:d8:08:12:
                    3f:5d:58:c4:2e:99:83:d5:30:5f:c9:52:3e:3a:38:
                    36:4c:fd:fe:51:ff:6a:eb:5d:7b:3b:c0:c4:51:13:
                    80:8b:93:f8:c5:fc:9b:4c:30:b6:dd:8f:3c:08:da:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:83:6E:B3:5B:0B:FE:34:68:85:69:FE:20:17:2F:FC:EF:40:BB
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:5580::/52

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:2c:44:f8:e2:18:dc:09:c6:e7:6b:14:91:77:4d:03:73:
         09:8c:d1:89:8a:06:aa:17:a8:38:d2:7d:18:83:3c:24:6e:63:
         f8:d0:b6:e5:43:27:38:48:a2:cc:e2:6d:fa:25:d7:15:26:9c:
         07:68:0e:4f:31:33:40:59:4f:f9:0c:ae:03:68:6e:01:66:bb:
         e1:bf:85:fd:53:cc:cc:49:4a:6a:c2:88:f9:7a:c0:fb:4b:8c:
         89:98:c9:f9:fe:72:9c:6a:84:9e:0d:2b:5f:b3:6d:0a:16:be:
         e9:0a:db:3a:62:0c:23:7b:e3:30:19:48:81:12:4e:e7:34:34:
         ac:e7:57:b6:58:ff:b6:c5:50:5e:80:2c:47:c1:ca:43:7a:7f:
         03:f8:fb:d3:fe:09:ef:e6:74:b8:10:9b:67:71:1a:a7:d8:8f:
         17:54:9e:bf:86:1c:55:31:2d:cd:c1:ad:17:df:b8:48:d0:d9:
         2e:22:7a:47:38:33:a8:36:08:d8:a0:b4:ac:1e:53:7e:35:d5:
         7c:36:79:f1:4a:77:90:a7:53:4f:cb:57:c0:05:cd:87:da:f4:
         3a:42:d9:1c:66:42:03:76:7a:90:18:98:87:d0:4a:62:38:9e:
         81:1a:48:cf:47:f5:a0:5f:b1:fc:46:49:d8:c3:01:dc:66:8c:
         01:28:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:53 2025 by rpki-client