Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/6A721236977E11EBB7908378C4F9AE02.roa
File:                     6A721236977E11EBB7908378C4F9AE02.roa (raw, json)
Hash identifier:          /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=
Subject key identifier:   6D:F7:17:1E:08:B6:B8:E1:AC:3E:7F:9A:2D:C3:4F:AC:56:55:7F:BF
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       31E2
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/6A721236977E11EBB7908378C4F9AE02.roa
Signing time:             Wed 30 Apr 2025 15:52:32 +0000
ROA not before:           Wed 30 Apr 2025 15:52:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        115.111.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12770 (0x31e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68124740-ec94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:fa:b5:ae:12:85:59:df:35:e4:f8:2e:38:
                    07:84:3d:25:67:1f:01:ae:e1:c4:3d:1d:85:d3:03:
                    90:5b:f0:25:a4:89:60:d2:a2:38:bc:9f:bb:72:5c:
                    55:dd:3a:f2:e8:da:54:9c:c5:c7:3b:63:5e:15:06:
                    fa:b8:64:83:d2:0a:9f:c8:ed:6e:b5:88:1f:85:58:
                    f8:fa:b1:7a:68:82:9b:e0:32:83:27:14:bc:0a:48:
                    a7:71:21:8d:51:97:01:f9:d1:14:2c:17:03:17:8c:
                    a0:9c:d7:9b:7d:40:55:3a:9d:70:e7:eb:f6:25:1a:
                    4d:67:38:6f:fe:d8:23:06:e7:3d:2b:7c:d8:c9:8c:
                    4d:1a:2f:c7:18:3b:49:c3:b2:90:48:86:d7:e2:10:
                    ae:3c:d2:02:25:f1:00:45:e9:ae:3c:de:65:ae:73:
                    ca:3c:26:9e:bd:e7:c4:ca:b9:33:34:a6:6b:89:30:
                    57:a6:fc:2d:3e:e6:34:84:16:4d:47:3d:1d:42:cb:
                    59:73:99:e1:5d:4c:1b:86:30:70:c9:c1:e4:9d:ff:
                    72:a2:3a:e3:fa:5f:f7:b0:e2:09:09:27:a3:07:4f:
                    f3:97:c5:f4:6e:a0:d6:03:e5:e0:91:aa:87:bf:4c:
                    27:20:78:6a:1e:62:d9:b4:bb:da:cd:b0:7c:bb:e0:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:17:1E:08:B6:B8:E1:AC:3E:7F:9A:2D:C3:4F:AC:56:55:7F:BF
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/6A721236977E11EBB7908378C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.111.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:75:75:f3:fa:5d:a3:20:cd:97:dc:c4:b4:e1:bc:db:df:
         31:f8:91:6d:c0:7d:4a:6c:e7:ad:65:5b:16:9a:67:93:00:72:
         62:42:1f:98:fc:b1:3f:cd:10:ef:79:06:14:f8:15:ae:50:64:
         c7:a3:a0:5b:90:59:92:22:17:f5:ff:ce:4b:6e:3d:af:99:b0:
         17:dd:f5:e1:02:30:ac:48:36:b3:07:df:4f:70:f3:dc:e0:e0:
         64:44:ea:b1:21:51:f7:d7:ba:a4:90:d1:73:63:e4:46:54:3c:
         dd:16:ae:8a:41:fb:17:bc:72:36:1e:ab:3e:79:59:40:26:d2:
         16:f9:d8:87:b6:23:ba:8c:8e:5c:66:ff:3c:45:af:e7:06:7b:
         ed:ec:96:8c:09:ce:37:55:e2:8a:13:fd:23:9e:02:0d:74:23:
         8d:e1:9c:99:bc:51:4f:d9:d7:8b:9f:67:23:db:8d:18:a3:fd:
         2a:30:93:21:1c:e0:82:48:1e:8b:0f:b2:89:92:31:e7:c2:85:
         45:09:54:8b:54:12:d7:54:b8:b6:ed:f3:54:cc:e4:f5:b2:e1:
         d5:f8:ae:e9:60:25:57:45:c9:81:6d:19:a7:66:7f:92:75:e7:
         80:25:b6:e2:a8:c6:77:53:77:90:da:8a:19:6f:19:4d:ff:15:
         1d:38:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 14:20:28 2025 by rpki-client