Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/83684F548DF411E7A230506DC4F9AE02.roa
File:                     83684F548DF411E7A230506DC4F9AE02.roa (raw, json)
Hash identifier:          7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=
Subject key identifier:   FD:4B:F0:59:E2:3C:22:3E:17:2C:1A:10:DA:E6:22:B7:75:93:4C:94
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       2490
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/83684F548DF411E7A230506DC4F9AE02.roa
Signing time:             Fri 02 May 2025 16:23:26 +0000
ROA not before:           Fri 02 May 2025 16:23:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9367
IP address blocks:        2001:200:136::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9360 (0x2490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:23:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6814f17d-63be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:86:b1:00:ad:22:3d:dc:b9:c4:7b:14:2c:
                    25:92:d1:01:4b:cc:fc:f9:f3:2d:84:fe:b9:d2:b7:
                    1f:7a:fe:bf:0a:4e:04:cd:fb:f8:69:dc:17:29:f5:
                    b8:d3:77:cb:20:8d:d2:77:d8:16:08:2c:78:4d:9d:
                    af:9e:96:b5:19:40:da:df:4f:16:cc:45:8a:88:92:
                    54:28:da:6c:c4:25:7c:e7:6a:4f:10:f5:2b:76:fa:
                    d5:bb:5c:0d:fc:94:fc:59:07:62:81:1e:2a:97:0d:
                    eb:41:29:2d:86:d4:b9:97:a3:f9:f4:37:02:d7:86:
                    d8:2f:d4:77:1e:e1:84:73:07:ec:c1:b2:89:ea:92:
                    d6:34:bc:95:a8:f5:ec:a7:1e:7c:d7:1c:c2:6e:23:
                    27:2e:81:ce:4f:6e:8a:ca:a6:0f:9f:c7:e4:1b:b9:
                    f1:1e:7a:fe:35:5c:04:ee:87:4c:eb:62:1d:7a:85:
                    79:ac:7b:fa:56:a3:dc:b9:0d:c7:72:3a:11:17:5c:
                    f0:c6:7c:53:e7:1a:cc:76:22:70:7a:e8:25:69:d2:
                    aa:73:85:48:87:a0:ce:5b:35:4e:6d:12:c4:f9:0a:
                    fb:08:9e:33:02:6d:71:40:3b:2d:8d:7d:d7:db:14:
                    27:4d:4f:8e:0d:44:e5:6a:36:39:b0:9c:db:20:bd:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4B:F0:59:E2:3C:22:3E:17:2C:1A:10:DA:E6:22:B7:75:93:4C:94
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/83684F548DF411E7A230506DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:200:136::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:df:f3:6c:4a:d8:81:4e:9e:3f:ca:78:58:79:d7:2b:77:a0:
         c8:64:87:7d:51:91:01:5e:d6:2c:f6:d6:32:30:23:5a:73:d4:
         d0:18:16:28:35:21:8c:d0:a6:6e:b3:f7:c5:9b:1d:99:f8:b4:
         44:bc:9b:11:fc:8b:0f:4a:85:64:53:eb:a3:f9:a4:74:25:9b:
         81:e0:69:b7:2d:07:47:69:e7:f9:4c:e0:49:c1:f8:bc:8e:f0:
         fb:a7:21:25:54:c4:74:ae:60:e5:55:9e:07:b7:86:8a:e0:9a:
         bb:a7:49:c2:49:ae:e8:4a:2a:0a:af:97:f5:81:b3:c8:26:ba:
         5e:dc:e5:39:99:88:e1:cb:ba:ce:53:f2:f4:50:67:81:72:9e:
         e5:6d:3d:77:ad:b2:15:34:63:46:82:27:d3:a3:ae:8b:0d:a3:
         3a:88:5d:3c:af:b6:1e:e8:9f:78:5e:44:4c:5d:19:e4:15:fa:
         7c:a2:48:63:46:2c:38:1b:a4:54:ad:0e:1e:26:b3:21:52:16:
         53:5e:ed:45:be:f1:2c:d0:05:34:dd:42:77:42:40:7d:f9:30:
         9a:72:ce:08:bd:d2:72:36:7f:ec:8f:7a:fd:b8:e7:cd:76:9f:
         40:65:eb:c9:e2:2c:65:b5:ce:33:ab:90:18:5d:42:9a:cf:bf:
         aa:09:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:36:41 2025 by rpki-client