Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/027532E6385F11EAA879692AC4F9AE02.roa
File:                     027532E6385F11EAA879692AC4F9AE02.roa (raw, json)
Hash identifier:          CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=
Subject key identifier:   02:2C:47:F2:07:C8:12:FF:FB:A0:F3:0F:CB:F7:49:3F:18:86:4F:00
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       248B
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/027532E6385F11EAA879692AC4F9AE02.roa
Signing time:             Fri 02 May 2025 16:23:21 +0000
ROA not before:           Fri 02 May 2025 16:23:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24047
IP address blocks:        2001:200:1ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9355 (0x248b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:23:21 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6814f179-f100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6b:07:7d:7c:d6:df:3a:bf:82:9e:30:55:4d:
                    6c:71:16:66:c8:f6:15:25:d7:0c:11:f6:d5:ce:8d:
                    33:c9:99:99:ea:39:2a:ec:bf:0c:4f:c0:b5:c9:34:
                    cc:1d:c6:d7:c2:9f:99:35:6f:28:8a:d8:d1:ba:1b:
                    f1:56:2a:ed:69:72:3a:d1:54:93:a8:46:2e:c4:da:
                    03:e1:6c:cb:32:59:ba:05:3d:63:2b:fb:ed:99:4f:
                    d3:e5:7b:2d:2b:18:17:69:d3:02:fb:dd:64:24:45:
                    71:75:ad:a4:42:55:59:fb:67:a9:18:4d:74:04:22:
                    27:0d:ca:9d:54:25:75:39:ad:93:74:8f:6f:3a:6a:
                    f3:d3:ab:8a:1f:8e:9c:02:35:9e:1d:9b:23:45:50:
                    29:ed:bc:33:e4:7e:a5:50:11:3e:1e:bc:6c:59:8f:
                    b4:bf:bc:7e:85:78:0e:62:8b:9a:18:a0:9a:ae:f5:
                    a4:17:9a:de:38:28:87:e2:8e:d3:09:a5:2b:a7:67:
                    37:0d:99:c0:97:64:1b:d7:ba:ab:7d:b7:04:c1:f8:
                    64:12:7c:56:b5:e1:c8:8d:33:2f:d6:f1:ad:ec:42:
                    96:0f:7c:2a:31:16:eb:10:db:11:8f:41:39:8e:a7:
                    a6:37:5e:57:74:1a:7f:33:1f:7f:71:93:40:f4:af:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2C:47:F2:07:C8:12:FF:FB:A0:F3:0F:CB:F7:49:3F:18:86:4F:00
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/027532E6385F11EAA879692AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:200:1ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:ba:24:5d:fe:c5:14:2f:d2:69:20:01:43:ec:aa:7b:47:
         7a:83:c0:27:cf:0d:cf:ac:94:8f:f6:f8:4b:aa:05:03:0a:0d:
         6a:66:91:01:7a:9a:21:43:8d:33:44:12:97:69:e9:c1:f2:62:
         4d:dd:f1:bf:3a:9d:a6:30:0f:2f:65:57:14:29:85:24:2d:12:
         ab:c1:b9:87:7c:31:74:d6:3e:52:e1:1e:24:a5:eb:c0:d7:ba:
         1e:1c:35:67:43:09:bd:59:59:61:6c:e8:4a:27:19:b0:0d:02:
         53:6c:4d:88:3c:c3:35:f8:4e:42:0a:98:ef:54:90:e9:c3:de:
         56:6c:43:04:1b:18:50:c1:ca:05:0b:bf:99:9b:a8:d5:b0:6a:
         e6:34:13:b0:0a:78:6c:ee:45:10:f7:11:c1:ca:4b:f1:8f:35:
         1a:1a:ff:8a:5e:e1:37:13:4e:a8:b7:1a:a9:02:8c:68:27:2c:
         4b:f3:bc:87:d6:44:95:e7:8c:fb:c3:d0:52:a3:4e:ab:fe:ca:
         66:33:50:da:f4:31:e8:a7:d0:e0:13:55:2a:cc:18:19:9b:ff:
         24:6d:fb:a7:df:bf:ec:33:87:ae:69:af:74:66:d0:02:c6:a1:
         0d:7f:c8:b8:ff:f4:fb:1d:d8:b5:e8:1e:db:f6:b0:a6:43:8c:
         e9:b9:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:26:31 2025 by rpki-client