Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
File:                     2574266EAA4911F09A71D135C4F9AE02.roa (raw, json)
Hash identifier:          Brwwe0F+aPgM2TNE0pK+hfBC17xvLwuArPyDlCwuh9E=
Subject key identifier:   DE:13:7F:2B:16:ED:CE:88:3B:DD:9B:01:2F:E1:A7:A4:7F:CF:F4:2F
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       077A
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
Signing time:             Thu 16 Oct 2025 04:32:39 +0000
ROA not before:           Thu 16 Oct 2025 04:32:39 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     55201
IP address blocks:        2402:3220::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Oct 16 04:32:39 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68f07566-f681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:d0:1a:f7:fc:e1:65:a4:89:56:0f:47:49:
                    80:4d:45:5b:50:dd:f2:24:be:a4:85:c0:1d:f6:19:
                    63:63:b5:01:8b:8f:fb:29:50:68:5f:90:d4:98:13:
                    19:b2:05:41:20:6f:1a:a4:dd:e4:c5:bd:d4:52:04:
                    af:fe:ca:ed:36:40:45:d9:15:bb:67:47:39:ea:af:
                    e4:84:03:d4:48:c3:2c:b7:ad:90:d6:b9:c3:da:eb:
                    0a:f1:a3:ab:a3:8c:ae:2f:6a:21:27:c8:e7:7e:fd:
                    f2:8f:cf:56:d1:47:77:1c:d1:74:18:3b:7a:9f:83:
                    f2:7a:13:4e:17:72:e0:bf:85:db:03:56:d1:c2:b5:
                    9b:6f:6f:a3:ad:9a:7a:8b:75:cb:73:9f:06:c2:28:
                    58:39:7c:f3:28:b0:71:3e:0d:cd:b4:ed:55:23:3d:
                    da:6f:e2:e3:d2:7a:91:15:72:0c:47:54:f9:93:47:
                    c8:27:11:f1:0f:41:2c:e5:20:22:a0:9a:7a:60:a4:
                    24:31:d6:af:12:7b:54:6b:d2:bc:9b:10:49:57:c0:
                    da:ad:e0:39:8a:87:76:b9:f9:85:e0:2c:9e:a5:4f:
                    2e:12:50:96:40:f2:8b:37:aa:d3:1e:b9:e4:66:7f:
                    e4:3e:0e:cb:cd:29:0d:56:d2:80:fb:ac:ae:cf:15:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:7F:2B:16:ED:CE:88:3B:DD:9B:01:2F:E1:A7:A4:7F:CF:F4:2F
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3220::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:de:2a:f2:07:ab:2d:30:4e:e4:82:db:95:57:32:55:ab:
         77:40:3b:da:30:b6:94:a5:43:67:f5:d8:d4:31:52:c7:1d:ea:
         b1:87:53:0c:b5:66:78:a0:df:e7:fd:ba:1c:da:cd:47:96:96:
         53:2e:e4:35:56:6a:80:9a:31:c2:e2:cf:4f:b4:51:b2:b6:e6:
         2f:86:e1:26:08:17:f2:1c:08:eb:ef:e0:72:9a:94:b2:16:8e:
         f7:dd:d8:b6:42:b5:f1:a1:d5:f8:76:26:14:17:1b:f1:3f:86:
         a3:3c:96:5f:1d:c5:a3:e8:0a:35:4b:61:b0:11:7f:d6:d5:2d:
         48:52:e0:78:1c:01:90:6d:e8:fb:b9:ff:b0:9a:e0:b1:dd:e5:
         d5:02:a5:3c:85:7e:42:fb:5a:35:69:7a:25:29:0e:14:9a:e8:
         72:d8:1a:72:55:b0:67:6a:b2:32:c9:e7:5b:78:ef:0e:5a:72:
         3f:38:f8:e4:15:ba:88:83:85:7d:ba:27:d1:cd:4d:99:05:9d:
         cd:d3:52:cc:7f:eb:8f:df:4c:4e:8d:59:cd:06:08:1a:87:e2:
         60:80:9d:14:18:4d:c9:78:86:d7:14:f0:2a:0b:11:b6:83:13:
         67:90:d5:d0:5c:48:8c:20:13:a7:f2:e3:5f:8b:94:20:94:8f:
         89:5f:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:34 2025 by rpki-client