Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
File:                     9A6A637EF48C11EBBDF92914C4F9AE02.roa (raw, json)
Hash identifier:          lhMvYRsrjVyA66+IzRjCtkWTHGswP9g49oqeoBG1Neg=
Subject key identifier:   D1:6C:70:F6:2F:29:3A:DB:B3:75:25:9E:D1:01:BD:AF:00:42:49:8C
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0AB9
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
Signing time:             Wed 20 Aug 2025 20:00:04 +0000
ROA not before:           Wed 20 Aug 2025 20:00:04 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        2404:f340::/44 maxlen: 44
                          2404:f340:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745 (0xab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Aug 20 20:00:04 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a62944-94b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:1a:80:db:4e:db:31:43:66:06:c8:b4:0b:
                    2b:80:67:74:2e:cf:20:19:cf:79:91:98:e2:f6:ac:
                    f1:1b:39:6e:b5:17:32:60:ba:37:29:89:76:4b:46:
                    92:58:30:6d:d8:8d:ce:cf:5d:b2:ef:da:0a:2e:ed:
                    5f:10:21:0e:1f:37:05:8d:be:a6:21:66:cc:87:b7:
                    e1:79:39:6e:dc:e8:33:a6:b4:0b:8b:63:a0:0a:b8:
                    9e:a3:d2:47:b0:38:e8:8d:e5:d9:dc:17:4b:1c:6d:
                    a9:0c:7e:80:3f:8f:59:21:82:e2:ad:84:02:03:67:
                    25:fe:a7:a7:53:6e:82:8f:df:d3:d1:06:63:5c:7b:
                    fe:a3:0c:52:4a:f9:21:0a:65:62:46:84:cd:5a:40:
                    e6:3e:45:94:a1:6e:1f:74:3d:d1:83:d4:19:fe:ac:
                    2c:84:ec:d0:30:3f:8c:dd:89:82:68:c1:2c:ce:70:
                    ed:7f:94:d1:21:c0:3c:28:35:7e:4f:4a:53:bf:43:
                    c3:db:08:ea:f2:48:1e:b1:11:d1:f3:16:31:3c:48:
                    cd:f3:bf:9b:cd:7e:84:00:a3:fc:f2:e2:40:22:78:
                    47:47:e0:70:e9:99:f7:b5:ee:78:47:5c:32:b7:e1:
                    d8:0f:d1:20:8e:fd:5a:b1:c9:f8:9c:84:54:15:26:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6C:70:F6:2F:29:3A:DB:B3:75:25:9E:D1:01:BD:AF:00:42:49:8C
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f340::/44
                  2404:f340:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:10:4a:07:9f:81:f8:83:82:e9:7b:ae:4d:5b:fc:e5:23:
         7d:0a:d0:3c:7a:a3:9d:59:bb:d8:45:fb:0d:78:72:b6:42:6f:
         a6:28:cb:90:a2:56:a7:68:2e:eb:1a:fa:77:78:19:63:4e:2e:
         e0:ce:f6:a8:ec:a5:1f:c1:50:99:eb:6c:30:ee:f9:46:e5:17:
         42:64:6a:47:48:0c:d7:a5:f3:4f:32:d2:94:08:62:11:07:9a:
         05:7b:a9:8f:5d:d0:3e:6b:f3:b2:0e:d4:91:bf:36:f9:cf:66:
         74:f2:03:33:2d:73:eb:4e:7b:32:ec:7d:61:18:3c:12:ce:7d:
         b1:72:6f:74:c5:c3:54:52:2a:78:cb:f5:0e:99:4d:3c:e5:b2:
         70:03:e1:b4:93:2b:5a:69:90:04:4d:f1:ca:15:5e:07:c2:2f:
         95:ff:7c:d6:e8:7a:4f:33:c3:b1:2d:ff:35:db:04:68:10:c9:
         d6:59:be:11:0b:10:cf:e4:28:95:a2:19:d4:df:81:14:86:02:
         2d:11:d2:a8:dc:cc:f7:3f:be:96:2f:72:4b:38:be:9f:a0:ae:
         db:6d:85:1c:f5:de:b0:20:82:d9:f0:04:c7:09:fe:89:eb:93:
         d6:c1:0e:a4:ed:7e:a9:10:db:97:4c:1b:af:82:84:12:60:27:
         86:65:74:56
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF
REM2MEQ1M0IwHhcNMjUwODIwMjAwMDA0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE2Mjk0NC05NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZ8agNtO2zFDZgbItAsrgGd0Ls8gGc95kZji9qzxGzlutRcyYLo3KYl2S0aS
WDBt2I3Oz12y79oKLu1fECEOHzcFjb6mIWbMh7fheTlu3OgzprQLi2OgCrieo9JH
sDjojeXZ3BdLHG2pDH6AP49ZIYLirYQCA2cl/qenU26Cj9/T0QZjXHv+owxSSvkh
CmViRoTNWkDmPkWUoW4fdD3Rg9QZ/qwshOzQMD+M3YmCaMEsznDtf5TRIcA8KDV+
T0pTv0PD2wjq8kgesRHR8xYxPEjN87+bzX6EAKP88uJAInhHR+Bw6Zn3te54R1wy
t+HYD9Egjv1ascn4nIRUFSY4GwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNFscPYv
KTrbs3UlntEBva8AQkmMMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF
RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU0NTYvMjM3OEUwODA1RUU1MTFFQUFBNTJERTQ3QzRGOUFFMDIvOUE2QTYzN0VG
NDhDMTFFQkJERjkyOTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwQkBPNAAAADBwQkBPNAQAAwDQYJKoZIhvcNAQELBQADggEB
ABdaEEoHn4H4g4Lpe65NW/zlI30K0Dx6o51Zu9hF+w14crZCb6Yoy5CiVqdoLusa
+nd4GWNOLuDO9qjspR/BUJnrbDDu+UblF0JkakdIDNel808y0pQIYhEHmgV7qY9d
0D5r87IO1JG/NvnPZnTyAzMtc+tOezLsfWEYPBLOfbFyb3TFw1RSKnjL9Q6ZTTzl
snAD4bSTK1ppkARN8coVXgfCL5X/fNboek8zw7Et/zXbBGgQydZZvhELEM/kKJWi
GdTfgRSGAi0R0qjczPc/vpYvcks4vp+grttthRz13rAggtnwBMcJ/onrk9bBDqTt
fqkQ25dMG6+ChBJgJ4ZldFY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:55 2025 by rpki-client