Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
File:                     9D1066F8474111F08A856E0FC4F9AE02.roa (raw, json)
Hash identifier:          li2dKgi4m1tCsscpNBOqoFWPl8ZQf47NHlPCiTLeoRk=
Subject key identifier:   5D:1D:47:7A:B9:8E:52:E4:6D:DD:97:F2:AA:4A:6E:93:C1:60:1E:26
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1F07
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
Signing time:             Thu 12 Jun 2025 03:59:18 +0000
ROA not before:           Thu 12 Jun 2025 03:59:18 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     148981
IP address blocks:        121.62.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7943 (0x1f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jun 12 03:59:18 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=684a5096-e473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:9b:78:25:21:e6:7e:d2:c9:86:79:38:df:
                    d7:3e:f9:60:0f:44:f8:f2:1d:0d:a6:e7:ee:7b:a2:
                    33:df:02:1b:73:53:7d:45:1d:f4:cb:7b:56:7c:57:
                    b0:3b:24:27:ac:f3:19:f3:68:a1:05:9f:b5:df:cb:
                    a7:79:65:17:be:aa:cc:2b:3f:4a:15:69:dd:b8:2f:
                    1c:1f:43:1b:77:59:a6:7f:79:28:34:bb:b8:6c:83:
                    64:9f:04:8f:4b:75:e4:3b:2b:8f:6c:ba:fa:d4:93:
                    2a:29:02:73:f9:aa:e5:89:83:24:9e:d2:d4:8d:2c:
                    23:c9:fc:5f:bb:75:6b:81:de:62:1c:52:a1:a6:bd:
                    a5:2d:56:de:e3:ae:49:87:cb:76:42:a4:31:69:6f:
                    3b:53:3f:b1:24:f2:65:b4:bd:1c:ee:1b:0c:aa:ed:
                    f9:58:db:30:ae:1a:ee:9f:b1:bd:e2:c6:be:16:e2:
                    0f:47:20:82:1e:4f:af:a5:47:3d:85:07:5f:ad:fe:
                    1a:79:26:aa:02:c8:a2:5d:9f:67:85:6a:ec:7f:85:
                    fe:65:ef:88:25:e3:57:df:f8:a4:5c:49:c4:a8:ae:
                    f3:3a:05:57:b7:02:ae:0e:3d:45:3e:e4:88:46:12:
                    a6:14:e5:e8:d4:a3:37:d4:f4:d3:a0:ce:d1:df:02:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1D:47:7A:B9:8E:52:E4:6D:DD:97:F2:AA:4A:6E:93:C1:60:1E:26
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.62.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:40:56:ec:23:6e:43:b2:a2:8c:e1:59:4c:a0:d5:c3:67:87:
         f7:33:f5:6f:0f:c3:e8:78:34:cc:36:be:da:87:9a:9a:a0:26:
         59:54:b0:8b:ce:1a:63:9c:db:77:f5:05:07:ba:07:65:dc:de:
         1b:c6:e8:04:7f:75:42:dc:5e:2e:79:65:75:1f:a2:08:64:ee:
         5d:32:f2:60:b5:eb:4b:a7:9a:ea:89:07:f4:ec:0c:db:8e:25:
         07:75:f0:93:df:5b:e4:be:61:44:70:db:b0:28:55:1c:fc:34:
         97:e0:4c:48:b4:02:e5:e8:67:38:a4:67:b1:f6:dc:dc:77:2f:
         a1:73:ce:f6:c6:25:ae:8c:e4:a4:2a:c3:9a:1b:21:b8:39:4a:
         b6:6c:58:20:90:9a:86:df:04:cd:31:ca:4b:72:e3:74:94:30:
         ed:ca:ac:15:21:fb:56:5b:9b:0c:99:a8:98:cf:02:cb:bf:04:
         c2:95:50:d0:55:14:d1:67:11:e6:b3:3f:73:61:8c:21:8f:05:
         c3:4b:a0:97:29:e0:c8:e9:33:d1:14:fa:38:41:bf:3a:39:d1:
         a5:86:7b:f3:b2:4a:88:68:43:d4:7c:46:d7:22:6d:9b:7d:a7:
         73:3a:0a:72:0a:2c:c7:05:bb:7e:b3:21:44:01:86:fa:36:65:
         99:69:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:33:01 2025 by rpki-client