Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
File:                     459087B0C4A411EB90A2C754C4F9AE02.roa (raw, json)
Hash identifier:          Cl2KWkJMmgS/msfjoIb/24y+W648m1pybjj0isVF+vk=
Subject key identifier:   FD:1B:FE:F5:F0:AC:96:89:E3:A8:C6:2B:DB:8D:4F:1C:DD:97:6E:CD
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1345
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
Signing time:             Thu 14 Aug 2025 17:26:45 +0000
ROA not before:           Thu 14 Aug 2025 17:26:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16625
IP address blocks:        2406:3000:35::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4933 (0x1345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 14 17:26:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689e1c54-48c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:21:43:53:9d:af:fa:26:a5:8b:02:0f:f0:
                    52:67:ea:8e:c0:b5:0d:6f:e2:c3:bc:f9:4a:53:16:
                    73:49:5b:d5:27:f5:86:e5:cc:3f:1e:8c:61:4e:83:
                    84:02:94:a6:5b:30:a6:ec:c3:f0:3a:3d:94:e0:69:
                    1d:18:d9:ac:f9:a4:57:a6:2e:33:95:9d:0f:20:af:
                    3b:08:ac:0e:82:20:35:14:28:ec:6c:08:4f:84:57:
                    ea:76:e1:82:cb:19:b3:84:1f:cf:3e:ee:51:2a:ed:
                    e2:f1:33:3e:8a:a9:ec:05:2f:9e:61:3d:02:c6:6b:
                    56:ca:e9:68:58:99:23:46:b1:81:8f:cb:42:50:ba:
                    93:6b:9e:4a:20:e5:c7:cd:ae:a3:52:a1:1a:90:50:
                    fd:78:b9:07:3b:13:54:bb:a7:e7:86:e6:c0:e0:75:
                    43:15:2a:17:36:b3:27:90:40:69:39:9e:e0:d7:1d:
                    39:6d:56:5f:d3:02:15:48:3c:35:88:fe:73:30:49:
                    bc:f1:ff:4f:11:ad:ff:c6:f7:17:ff:46:e0:00:81:
                    46:41:5c:36:fe:b9:c5:dd:ea:7f:ec:20:c1:cd:0a:
                    83:4e:32:bc:0d:36:da:eb:11:06:ea:24:51:0b:71:
                    2a:d6:c8:eb:10:10:c2:d9:82:8c:d2:3c:db:33:74:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1B:FE:F5:F0:AC:96:89:E3:A8:C6:2B:DB:8D:4F:1C:DD:97:6E:CD
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/459087B0C4A411EB90A2C754C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3000:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:cc:27:58:e3:4a:79:4f:4f:04:67:d4:83:e0:15:d7:16:
         01:95:25:8c:7b:c4:fd:c1:a6:5a:8f:4a:51:1b:30:a8:5f:2a:
         66:2b:f6:43:0a:f5:80:f8:83:93:08:d0:c1:4e:31:78:fc:7c:
         2c:3e:f3:41:76:ac:3e:bb:aa:2e:f7:d9:26:dc:26:e1:94:c4:
         69:f6:38:dd:f4:25:48:47:a0:08:2d:be:53:b9:af:a5:9b:f2:
         b5:e3:47:52:02:06:00:40:05:3c:35:b7:69:7b:a2:fb:99:ab:
         80:cd:78:ee:c7:5b:d3:8f:45:c8:a7:7d:ec:37:8a:9f:87:7d:
         6a:ea:ae:9b:d3:97:f2:9a:c9:3b:80:72:de:20:54:8f:e9:6b:
         83:14:f6:8f:c7:52:f3:09:3c:be:ee:06:86:40:90:e3:57:b0:
         04:ee:27:81:19:32:4a:93:c6:12:54:70:ac:15:ef:cf:8a:0d:
         3f:24:fb:dd:35:af:6f:65:b7:46:ad:89:40:58:c4:0c:62:d2:
         51:56:43:c8:18:33:f0:54:1b:20:4f:1e:4d:0b:35:49:c7:7b:
         df:ff:13:8c:aa:f4:1a:b5:ff:56:6b:59:94:3c:79:8f:5f:32:
         7e:82:b6:e0:bf:ae:cd:70:11:0f:cd:d3:b9:71:5c:4d:95:60:
         e7:b1:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:19 2025 by rpki-client