Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa
File:                     34956990D75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier:          dxCqVoSNOkIPa8mn9WccbxZTxKG1nVMRR4a4UGacE9I=
Subject key identifier:   82:96:18:84:AB:F5:6F:5D:E3:EC:1E:8A:72:65:AD:7B:B4:9D:31:35
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       06E7
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 22:31:56 +0000
ROA not before:           Wed 02 Jul 2025 22:31:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134835
IP address blocks:        2401:e9e0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  2 22:31:56 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6865b35b-872f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d3:c7:80:4f:b8:22:4a:ea:53:0e:e0:4a:f7:
                    b5:c4:6c:c3:eb:75:72:63:97:b4:68:9c:49:a0:1b:
                    d4:16:0c:99:16:f8:68:46:58:46:ec:dc:b7:2d:6d:
                    b7:66:f4:42:58:62:5a:1e:6e:56:72:c8:f6:1a:ae:
                    ef:f4:01:70:d2:65:76:9b:65:a2:20:90:9b:a8:c8:
                    7d:c5:ee:3f:8f:ad:da:09:f8:da:0f:d1:04:34:db:
                    03:8a:fb:cf:ca:0e:61:b0:31:71:f7:39:ad:42:eb:
                    92:d9:ef:e9:06:72:c5:1c:4b:65:2c:85:bc:c6:d9:
                    38:00:c1:59:73:a3:35:71:36:ce:ff:79:1e:b8:c8:
                    96:d5:04:a6:5a:f7:08:f8:e8:46:03:12:76:03:c3:
                    ff:d6:5e:4e:e0:b3:d8:cc:e2:5d:c8:63:a0:21:77:
                    20:f5:95:b2:40:2d:c3:50:37:34:7c:02:2e:0e:9e:
                    6a:55:f9:d9:70:00:0b:50:0b:4d:89:87:43:d6:1c:
                    9c:4e:2f:3c:a3:d0:b1:bf:51:36:ec:98:f4:0a:78:
                    1d:ee:19:5b:51:2f:89:34:92:fe:f4:4f:a7:7c:2d:
                    48:82:5b:a0:8c:3f:08:52:da:95:ae:7e:c0:66:44:
                    f9:ea:c1:5a:27:6f:8d:3e:da:08:64:0f:73:c0:04:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:18:84:AB:F5:6F:5D:E3:EC:1E:8A:72:65:AD:7B:B4:9D:31:35
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e9e0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c5:29:e9:9d:9a:86:59:2a:15:c3:de:83:3e:a8:a9:51:3b:41:
         5d:ff:77:c4:70:c9:52:28:8b:32:4b:03:b4:26:a4:19:1d:a1:
         09:8c:aa:5f:01:4b:24:f7:ae:a2:1a:17:f1:4d:db:2c:1f:55:
         1d:78:62:47:ee:48:e6:25:a6:72:1b:ad:bf:11:30:82:c5:d5:
         f6:fc:1d:7b:6e:3c:1b:fb:5c:23:de:29:06:01:69:79:22:4f:
         95:cc:05:fc:65:27:8c:c2:aa:a4:ac:24:5a:6f:69:60:a2:84:
         05:96:bc:61:c9:24:12:ae:3d:37:eb:53:26:e5:f1:3e:e2:56:
         32:de:8d:41:a6:d9:47:7c:f9:34:58:74:32:b0:bf:d5:82:00:
         15:19:53:18:a1:e6:e0:77:3c:8d:b3:af:80:2b:90:2a:6d:b3:
         b8:3c:c5:01:d8:55:4c:e2:2c:5b:24:ab:d3:7d:e0:52:0a:1d:
         c3:8f:31:ab:33:99:77:7c:af:c6:1f:4f:89:ea:4d:da:37:8e:
         32:45:a3:b1:fa:66:1d:97:6d:94:8a:6f:b2:44:64:2a:a3:9b:
         35:86:3a:0a:14:0e:f1:6b:c1:28:65:02:38:b6:74:eb:ab:a3:
         6e:d3:78:f4:bc:e3:41:b4:61:a9:25:61:1d:ce:48:74:1b:7f:
         de:28:46:8c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0
QzkxNTRGMjQwHhcNMjUwNzAyMjIzMTU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY1YjM1Yi04NzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA59PHgE+4IkrqUw7gSve1xGzD63VyY5e0aJxJoBvUFgyZFvhoRlhG7Ny3LW23
ZvRCWGJaHm5Wcsj2Gq7v9AFw0mV2m2WiIJCbqMh9xe4/j63aCfjaD9EENNsDivvP
yg5hsDFx9zmtQuuS2e/pBnLFHEtlLIW8xtk4AMFZc6M1cTbO/3keuMiW1QSmWvcI
+OhGAxJ2A8P/1l5O4LPYzOJdyGOgIXcg9ZWyQC3DUDc0fAIuDp5qVfnZcAALUAtN
iYdD1hycTi88o9Cxv1E27Jj0Cngd7hlbUS+JNJL+9E+nfC1IglugjD8IUtqVrn7A
ZkT56sFaJ2+NPtoIZA9zwATk6QIDAQABo4IClzCCApMwHQYDVR0OBBYEFIKWGISr
9W9d4+weinJlrXu0nTE1MB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzQ5NTY5OTBE
NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQkAengQDANBgkqhkiG9w0BAQsFAAOCAQEAxSnpnZqGWSoV
w96DPqipUTtBXf93xHDJUiiLMksDtCakGR2hCYyqXwFLJPeuohoX8U3bLB9VHXhi
R+5I5iWmchutvxEwgsXV9vwde248G/tcI94pBgFpeSJPlcwF/GUnjMKqpKwkWm9p
YKKEBZa8YckkEq49N+tTJuXxPuJWMt6NQabZR3z5NFh0MrC/1YIAFRlTGKHm4Hc8
jbOvgCuQKm2zuDzFAdhVTOIsWySr033gUgodw48xqzOZd3yvxh9PiepN2jeOMkWj
sfpmHZdtlIpvskRkKqObNYY6ChQO8WvBKGUCOLZ066ujbtN49LzjQbRhqSVhHc5I
dBt/3ihGjA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:05:51 2025 by rpki-client