Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
File:                     92F8F6D042DA11ED93029A6AC4F9AE02.roa (raw, json)
Hash identifier:          6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=
Subject key identifier:   F7:51:1A:F1:41:14:59:EB:6C:5E:F6:F9:05:E3:35:3B:A8:20:BE:9E
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0CE9
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
Signing time:             Fri 12 Sep 2025 18:28:16 +0000
ROA not before:           Fri 12 Sep 2025 18:28:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141731
IP address blocks:        2406:ff80::/32 maxlen: 32
                          2406:ff80:1::/48 maxlen: 48
                          2406:ff80:2::/48 maxlen: 48
                          2406:ff80:3::/48 maxlen: 48
                          2406:ff80:4::/48 maxlen: 48
                          2406:ff80:5::/48 maxlen: 48
                          2406:ff80:6::/48 maxlen: 48
                          2406:ff80:7::/48 maxlen: 48
                          2406:ff80:8::/48 maxlen: 48
                          2406:ff80:9::/48 maxlen: 48
                          2406:ff80:a::/48 maxlen: 48
                          2406:ff80:b::/48 maxlen: 48
                          2406:ff80:c::/48 maxlen: 48
                          2406:ff80:d::/48 maxlen: 48
                          2406:ff80:e::/48 maxlen: 48
                          2406:ff80:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Sep 12 18:28:16 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c46640-dc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:fc:69:85:6b:31:1f:f0:26:be:99:8b:98:
                    bc:a9:50:e4:3a:cc:c6:60:89:5a:ed:08:12:1c:de:
                    72:77:25:fb:35:11:4a:6c:0b:d8:8e:09:30:e0:36:
                    bc:cf:74:b9:79:f3:b5:a3:46:40:06:66:cf:de:f8:
                    d9:b0:99:9d:2d:93:0c:87:75:c7:ab:8c:4e:5e:d1:
                    19:20:8b:98:f7:57:55:66:c6:97:66:e2:78:0e:a0:
                    0f:5b:b5:a2:72:66:42:68:78:e8:db:ae:4a:fc:bd:
                    21:87:42:da:e3:79:58:ec:25:16:01:82:53:12:29:
                    e0:1b:cc:1f:90:fa:4c:7f:7a:bb:dc:49:8a:99:3d:
                    ab:be:fb:11:70:41:de:b3:f5:7d:44:0e:6e:a6:fa:
                    06:4d:0a:99:73:8d:72:80:24:39:4f:9c:11:7c:9f:
                    e1:19:4e:bf:63:00:3d:4a:c1:2b:2a:ef:b8:a5:96:
                    d3:94:6a:9f:8d:5f:73:45:ed:46:d1:d7:ad:e0:21:
                    d6:ce:e6:ff:15:87:e0:ba:f5:5a:e0:2b:85:8d:f5:
                    9d:7b:44:67:a2:1e:69:5e:33:ec:ab:94:6e:f5:5f:
                    2d:92:64:a9:36:2d:9a:9b:76:4d:c8:58:72:6c:18:
                    4c:7e:4c:10:22:d5:87:ed:4c:5c:57:30:0a:c6:1a:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:51:1A:F1:41:14:59:EB:6C:5E:F6:F9:05:E3:35:3B:A8:20:BE:9E
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:16:75:fe:96:1b:68:41:8c:dd:a3:a9:76:e4:a0:57:8b:6f:
         8e:c6:10:fb:11:fc:06:38:7d:bb:a3:a9:94:ad:9b:99:d1:b6:
         26:32:01:a7:21:bc:d9:b5:93:9f:8d:0c:79:6c:f1:4c:b5:1f:
         2a:e3:e7:fb:76:f6:25:53:1e:54:4e:29:04:ce:24:a5:a6:b5:
         12:30:cc:35:5c:b9:fa:f3:6a:d8:05:5f:d3:06:bd:90:23:8e:
         34:3e:b7:4d:a1:bf:60:2a:da:5b:69:d0:44:f7:c2:14:6f:48:
         39:83:90:3f:fa:65:03:8c:1d:75:d4:0c:8a:0c:fc:6f:d2:cd:
         c3:ae:de:fd:61:61:23:80:1a:9a:5e:19:cf:21:01:ad:80:b0:
         1a:9f:93:1d:ea:28:dc:07:dd:f9:1e:3c:0d:58:33:eb:f1:61:
         a1:fb:59:8a:67:2c:e6:bb:24:8b:19:70:3e:72:25:9d:60:ed:
         3e:80:85:61:c4:6e:57:ef:d8:7a:44:45:b6:3b:92:f4:12:88:
         dc:75:9c:bc:a9:13:0f:8b:16:e3:e1:83:80:31:8d:9e:f6:b6:
         20:89:6e:3f:73:32:21:8a:5f:38:79:21:7e:66:1f:ed:49:24:
         e5:63:8f:06:c3:b5:c2:85:69:bc:cf:f3:a1:18:ad:56:39:22:
         75:23:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:01 2025 by rpki-client