Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/05939A1C554611F09F737331C4F9AE02.roa
File:                     05939A1C554611F09F737331C4F9AE02.roa (raw, json)
Hash identifier:          wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=
Subject key identifier:   91:56:6B:D5:38:68:B8:F1:94:4D:04:56:8A:93:1C:4C:8B:4C:7E:B6
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       02
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/05939A1C554611F09F737331C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 00:06:08 +0000
ROA not before:           Mon 30 Jun 2025 00:06:08 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     151496
IP address blocks:        2001:df5:db80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Jun 30 00:06:08 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6861d4f0-113d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:3f:b3:9e:af:9e:99:d1:82:0f:f8:e2:63:
                    a8:6a:c5:d4:37:10:7c:f1:c0:dd:a4:67:bb:b9:5b:
                    d5:a8:b0:6a:5b:80:27:65:78:52:ce:4d:c9:d1:e4:
                    4c:17:61:30:57:5d:6a:f9:b1:91:25:e7:39:50:39:
                    2c:ec:c9:b8:99:d6:46:b5:6d:57:81:a2:bb:e3:ef:
                    9e:06:a3:63:6d:58:c1:7d:42:ed:eb:4c:f5:3b:45:
                    89:60:d7:2e:66:36:3a:50:1f:78:4b:c5:5c:63:5d:
                    af:1e:51:a1:4b:29:5b:8f:8d:ca:1e:30:24:79:51:
                    5c:b1:0e:d2:f4:24:52:ca:39:4e:ec:8b:ec:56:19:
                    26:15:7e:48:be:e0:c7:94:59:dc:89:23:28:e2:cc:
                    f8:0d:26:19:30:e2:d8:e6:9c:81:c9:cc:9f:17:33:
                    c1:7e:54:db:7e:c2:60:16:f4:05:ea:e0:85:7e:27:
                    7b:dd:11:09:06:5f:67:11:82:a2:ff:77:a3:e0:ea:
                    98:6e:70:d4:61:7d:84:3d:45:8e:5a:c1:80:32:78:
                    9b:06:db:2e:97:10:51:a3:4b:8b:1a:d2:9f:34:a0:
                    3e:36:93:3d:a5:c7:06:c1:db:2f:07:ec:4c:30:5c:
                    bb:83:23:5b:5a:aa:c3:06:6a:ef:c5:e6:76:33:69:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:6B:D5:38:68:B8:F1:94:4D:04:56:8A:93:1C:4C:8B:4C:7E:B6
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/05939A1C554611F09F737331C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:db80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:38:f2:a4:e7:ca:09:02:14:f3:0b:3e:19:2a:39:81:3d:
         de:0c:54:df:bf:e5:01:f1:1d:b1:dd:cd:85:de:a8:2d:93:19:
         7c:fd:02:e8:9b:d2:7b:16:fa:88:eb:23:3e:a3:12:71:ee:64:
         31:81:7a:28:11:8b:cc:0a:87:23:62:87:fa:4c:dd:63:ae:cc:
         ae:03:25:45:c7:cd:13:a0:31:c1:6a:ad:68:42:69:be:5b:82:
         b1:84:76:72:83:57:c9:29:de:03:b5:9a:48:fe:b5:07:a0:05:
         47:45:5a:58:9e:6e:28:b6:3d:1e:ba:84:c5:58:52:39:0b:fe:
         2b:73:56:f8:1d:76:aa:e2:7f:ce:48:94:50:09:72:33:b5:f1:
         14:62:9d:c6:c3:6f:b2:be:71:ab:57:33:43:87:88:0a:0b:56:
         4f:f0:37:3a:c4:ab:49:19:1e:02:75:f5:3a:80:1b:04:1b:5b:
         41:52:15:1d:3d:c4:15:24:b5:1f:ff:a4:59:ad:5b:35:26:2f:
         66:76:01:e6:f0:1c:32:0c:39:45:82:30:18:b8:38:3c:6c:c9:
         d3:52:8b:8d:f0:65:db:62:43:21:a8:f9:80:23:36:2b:5b:dd:
         8d:85:2a:3e:74:94:de:9d:ca:13:6d:a2:a5:1f:f6:53:44:35:
         1f:94:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:48:58 2025 by rpki-client