Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/E160BBDC495E11EF8EE0647AC4F9AE02.roa
File:                     E160BBDC495E11EF8EE0647AC4F9AE02.roa (raw, json)
Hash identifier:          zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=
Subject key identifier:   5A:B3:43:6F:0D:BB:8F:65:E4:67:1C:7A:87:A2:59:4C:4B:25:36:4E
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       B2
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/E160BBDC495E11EF8EE0647AC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 06:44:54 +0000
ROA not before:           Tue 01 Jul 2025 06:44:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152909
IP address blocks:        2001:df3:ebc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Jul  1 06:44:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686383e6-c08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:d9:62:97:eb:cb:36:c0:e5:0b:e6:e0:63:
                    e3:67:1f:e4:c9:ce:38:c2:04:64:c5:3b:70:01:f7:
                    98:8b:e2:a0:6e:a3:66:aa:c8:e9:ad:c0:52:e1:44:
                    4d:68:cc:8a:6b:b1:18:59:42:4c:d8:2e:ea:3c:99:
                    10:98:28:95:2b:ad:59:7d:9d:2f:bb:bb:b0:be:ce:
                    4d:b8:7a:90:d7:05:31:48:eb:63:dd:11:4a:34:6a:
                    cc:f7:05:bf:01:da:55:72:ea:56:50:f7:82:52:8e:
                    84:62:47:d5:c7:47:21:ff:32:79:05:94:69:87:ef:
                    6c:d2:f5:f4:e4:f9:f2:0e:d4:5b:29:ae:25:28:53:
                    9e:3d:3f:22:52:e9:cf:33:4f:3d:40:cd:96:c7:2e:
                    89:22:69:9f:e3:3d:63:a5:dd:ec:8b:87:45:e5:b1:
                    b2:36:3e:2b:24:8f:e8:37:7a:82:52:40:47:25:ae:
                    e8:e9:c2:35:b1:c8:5c:9a:ac:0d:45:6c:11:6e:69:
                    33:93:83:70:74:47:85:9a:43:4f:80:31:df:51:88:
                    34:5d:c9:5e:96:f0:8d:f4:49:bf:7a:55:82:2b:61:
                    c6:f8:c5:9f:71:58:ff:d4:16:19:0f:b2:52:a1:2c:
                    db:1d:54:29:05:11:01:d8:2a:20:51:a5:4b:aa:e9:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B3:43:6F:0D:BB:8F:65:E4:67:1C:7A:87:A2:59:4C:4B:25:36:4E
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/E160BBDC495E11EF8EE0647AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:ebc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:22:03:e8:7c:83:70:d7:dc:ef:c0:db:c5:a0:42:35:72:5d:
         95:c3:30:2a:9c:f0:d7:c0:f1:87:d8:4c:41:21:92:0d:46:39:
         a3:ec:8b:7a:32:b5:38:8c:14:10:2a:06:50:4b:d3:92:80:be:
         a1:70:b0:e3:c4:16:9b:ee:8d:24:96:22:83:69:ec:ee:a8:93:
         7c:66:3c:7d:8e:77:ad:d9:e9:3d:a1:05:a9:c6:64:db:50:c9:
         6f:b3:c3:aa:82:2c:0e:2d:e4:01:f8:d4:b3:7f:21:3b:6e:fa:
         d2:d3:fa:1a:5d:95:df:49:7a:22:62:56:8a:bf:cb:80:ec:6d:
         09:a5:8e:1a:19:69:30:1a:25:57:7c:2b:b9:c8:d8:90:3f:18:
         64:7e:c8:52:fe:61:a0:0b:15:14:e9:b1:50:38:42:3c:ba:bf:
         31:7e:fa:c1:0e:38:ca:3c:bd:75:67:4e:7b:2c:0a:24:b2:86:
         09:bc:3c:1c:76:87:9c:28:b3:c7:f9:e5:02:44:5b:fc:03:e9:
         3a:82:fb:0b:73:50:16:75:97:8e:96:94:68:bd:46:aa:77:d1:
         1d:4e:04:a4:3b:3d:11:9f:85:24:5e:9d:7a:29:ec:98:60:9e:
         9d:7a:a6:fe:95:74:2a:81:a2:d6:cd:2d:8a:01:b2:61:c9:63:
         b3:b7:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:40:27 2025 by rpki-client