Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/364089B4D75511EF80E68A39C4F9AE02.roa
File:                     364089B4D75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier:          NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=
Subject key identifier:   74:3F:78:ED:10:AF:EA:D3:8B:76:A9:49:DF:30:B7:66:64:2B:C4:D8
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       06EE
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/364089B4D75511EF80E68A39C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 22:32:02 +0000
ROA not before:           Wed 02 Jul 2025 22:32:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     967
IP address blocks:        2401:e9e0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  2 22:32:02 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6865b361-c19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:11:9e:12:9d:90:e7:7e:73:30:a3:71:99:ec:
                    a7:1a:72:d1:09:bc:23:bb:64:0b:52:60:80:21:27:
                    46:a8:aa:7a:c5:df:16:77:72:84:16:ba:f7:31:a3:
                    f5:b2:a4:f9:60:e8:dd:3c:f5:94:b0:8a:d8:90:9c:
                    5b:ac:77:76:54:c3:f5:bf:40:c9:b5:9b:72:fa:ab:
                    0c:dd:b3:c3:e0:8a:9c:b6:63:0b:15:ca:37:c6:b8:
                    c6:50:b1:e2:76:e4:1c:95:78:0b:7b:78:55:c0:43:
                    1b:3a:b9:1a:4d:63:4c:67:70:f1:90:37:8c:16:94:
                    7c:32:68:62:61:b1:37:20:ca:b8:05:5f:33:a0:84:
                    40:ff:21:91:37:bf:69:15:48:1c:45:63:35:b5:06:
                    72:00:c5:22:c4:e2:27:81:58:b6:07:64:bd:97:c6:
                    9e:04:a0:b8:6f:ba:47:14:36:62:6f:98:ad:44:7e:
                    2f:21:87:d5:b0:e7:99:8d:51:f5:f0:36:c4:b1:ae:
                    45:16:31:d5:c7:d8:1a:ce:99:c3:30:60:6f:b8:0e:
                    47:60:76:72:84:04:66:66:ac:a7:a5:8f:02:7c:8e:
                    12:aa:89:21:15:de:ff:bb:82:4c:59:a1:57:6a:a8:
                    71:65:57:08:13:6e:4e:7b:bd:95:98:d1:a2:f5:f1:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3F:78:ED:10:AF:EA:D3:8B:76:A9:49:DF:30:B7:66:64:2B:C4:D8
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/364089B4D75511EF80E68A39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e9e0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:71:51:ba:14:55:9f:b1:92:19:48:59:62:87:26:c8:b6:
         04:34:b6:8e:f4:b1:aa:53:d7:4b:11:a5:1b:5c:f5:d9:14:85:
         3d:5f:3f:ec:49:32:98:a8:ff:f7:b4:5e:5e:17:04:64:27:9f:
         b2:69:f7:fc:0b:75:34:c2:ba:58:7a:fb:76:3a:85:c9:fa:35:
         6b:2e:4d:7b:a9:0f:98:1d:b9:73:ee:a8:8e:d9:c9:35:14:f7:
         7b:f1:6a:de:74:00:6d:5a:45:15:1c:95:43:f9:da:b6:c8:15:
         71:b4:7c:fd:c9:0e:0d:1f:0d:17:63:4b:eb:02:3f:42:c9:25:
         65:1c:f8:d3:e5:7e:55:35:62:81:b4:ea:1d:4f:cb:8f:8c:3f:
         c2:5f:41:ad:ce:1e:4a:de:a2:65:b4:4c:cf:1a:4d:d6:1d:5f:
         cb:a2:cc:36:69:96:22:93:dd:0f:47:27:8d:94:bf:4f:93:a2:
         98:76:f1:09:f5:6c:78:1e:dc:19:19:70:3b:81:98:29:c2:58:
         b0:b7:89:5e:86:ea:02:51:1a:fb:97:e0:2b:c2:69:93:b5:a6:
         fe:5d:02:2b:cf:27:27:0f:df:de:83:06:91:c8:0c:26:16:d0:
         83:cb:5a:59:f6:62:78:cb:b5:e2:81:f1:4f:79:da:ea:6d:ee:
         58:17:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:14:31 2025 by rpki-client