Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/AB4A60EECBA311EFB9E20E13C4F9AE02.roa
File:                     AB4A60EECBA311EFB9E20E13C4F9AE02.roa (raw, json)
Hash identifier:          tm5gAM08qDzN4tWEKgfrA+H/GMnEEscBYIggDt8IFhY=
Subject key identifier:   6F:6A:0A:DB:E3:85:D8:A0:37:69:91:CE:69:24:70:AF:72:6A:B1:66
Certificate issuer:       /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial:       D5
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/AB4A60EECBA311EFB9E20E13C4F9AE02.roa
Signing time:             Sat 27 Sep 2025 06:34:56 +0000
ROA not before:           Sat 27 Sep 2025 06:34:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138954
IP address blocks:        2001:df4:3340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
        Validity
            Not Before: Sep 27 06:34:56 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d78590-aea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:15:d2:87:0f:32:6d:af:be:8d:76:a0:40:
                    79:b0:6c:97:5c:49:b3:99:35:65:ca:a7:60:37:63:
                    0a:70:84:1b:30:40:62:df:5e:00:74:54:b5:d6:a0:
                    3a:53:33:ef:da:e0:76:c0:17:6b:8b:70:54:d2:b0:
                    0e:77:48:f8:9a:ac:ca:28:28:b7:5f:7e:aa:91:43:
                    0d:af:31:a2:37:c7:ca:ab:fe:8c:e3:c3:43:87:fd:
                    18:5b:e6:4b:1b:67:9c:2f:f8:d4:50:5d:5b:bd:ad:
                    82:b4:86:8a:c3:f3:4b:fc:62:24:cd:fd:b2:a3:17:
                    b3:03:33:2a:8f:ed:5a:3a:5b:f6:34:46:5d:70:93:
                    5d:c0:f5:24:44:5e:ba:24:99:5d:83:b8:37:cd:08:
                    ff:b5:1b:4e:55:37:d7:40:3e:c4:a0:84:b8:16:67:
                    ec:0d:1c:ba:dc:ea:63:ea:5e:d3:17:c1:ea:c2:9f:
                    a5:db:99:d0:ed:b6:04:f6:c7:97:36:35:8e:d0:7b:
                    68:ce:8a:c6:f1:33:fa:d4:0d:ec:98:ea:d2:82:16:
                    80:08:85:f5:61:af:22:2e:5f:57:34:06:69:78:dc:
                    80:f9:bd:48:80:6c:5e:bb:72:79:80:3c:b5:6b:ec:
                    62:e1:0d:2a:42:24:6e:94:b3:6b:ea:f1:1a:1d:ed:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:0A:DB:E3:85:D8:A0:37:69:91:CE:69:24:70:AF:72:6A:B1:66
            X509v3 Authority Key Identifier:
                keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/AB4A60EECBA311EFB9E20E13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:3340::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:5f:56:e1:c1:5e:b1:cf:1b:8a:89:d8:a6:62:e9:77:2d:ec:
         e8:5a:79:e9:c2:68:b8:83:f6:ac:d6:49:4f:23:8f:93:e9:61:
         96:48:bb:23:59:89:e0:50:00:5d:cd:15:cb:a4:7d:3b:03:2a:
         9a:62:b2:ef:1a:d9:2d:c7:b3:81:16:22:a5:38:4c:3f:77:cd:
         41:3d:e2:5c:01:15:0a:23:e4:87:b7:3c:e3:fd:4b:ff:47:c8:
         2b:5f:ea:6a:cc:ba:73:59:cd:bb:d1:17:85:e1:63:f8:e6:4b:
         7b:50:69:f1:42:66:c6:fc:30:b9:ee:ec:6c:9b:fb:bd:a4:b4:
         79:09:d4:8a:9d:2b:3b:b2:1d:c0:5b:8c:a7:5f:45:c6:69:30:
         ec:f4:ec:d1:c5:62:4e:66:31:04:7e:a2:45:13:bc:23:85:d2:
         74:9e:b7:e1:ef:68:32:3e:de:d3:34:ed:7b:28:8e:0b:69:ef:
         b9:fd:99:45:41:98:98:69:81:5d:b7:90:7d:86:cd:56:8e:4c:
         07:cd:ee:9f:ab:a3:5f:f7:d4:0a:31:f0:85:a7:56:69:43:a3:
         a0:f0:fc:f0:ef:b5:de:5f:db:d5:56:a6:d6:03:e3:28:f5:82:
         1e:5d:d7:2a:78:55:aa:d6:9f:16:bb:22:1e:cb:2b:8d:62:50:
         1c:52:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:42:39 2025 by rpki-client