Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A82E414A5C811F0B5152041C4F9AE02.roa
File:                     1A82E414A5C811F0B5152041C4F9AE02.roa (raw, json)
Hash identifier:          nI5hU5ggnxJjE3LypYEjwzuIvP3tyFhVhYe1/8GSApw=
Subject key identifier:   71:38:A1:47:00:22:F3:69:0C:01:83:18:01:29:73:37:57:9A:6C:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C620
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A82E414A5C811F0B5152041C4F9AE02.roa
Signing time:             Fri 10 Oct 2025 10:58:51 +0000
ROA not before:           Fri 10 Oct 2025 10:58:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154027
IP address blocks:        2402:14e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50720 (0xc620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 10 10:58:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68e8e6ea-d049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:73:39:c1:47:de:ab:02:d2:ec:fd:7f:71:
                    8a:7a:c9:2d:b7:b9:11:9f:7c:b1:5a:99:22:87:ec:
                    66:94:9e:5c:e0:38:52:6c:7b:e8:d2:cf:7c:f6:1c:
                    6c:aa:c8:7b:d3:b8:03:09:e0:07:4f:52:38:93:6c:
                    bd:b0:50:88:b8:31:9e:de:92:5c:cf:f8:0e:dc:70:
                    9b:5c:ac:44:80:59:6b:5b:f6:6b:2e:e6:3b:1e:4f:
                    f9:79:1a:21:b4:83:d0:16:2f:e4:cb:3f:24:cf:f6:
                    23:47:63:42:19:4b:63:73:0c:11:1e:7a:09:30:62:
                    d7:31:e5:fd:f4:8b:9b:99:22:a1:df:9f:3b:a8:d7:
                    0b:5e:ce:0e:97:72:00:26:59:cc:ef:81:90:48:85:
                    c2:57:f3:52:19:c5:fa:49:b2:c6:3d:cc:a4:52:4e:
                    47:ae:1a:b7:71:65:66:ae:49:f7:2c:65:f3:2b:3a:
                    42:10:bf:76:e8:c1:f2:f0:f6:31:0f:e1:2b:bb:3a:
                    2c:41:ac:80:fb:14:a0:b9:f6:52:ea:12:bb:ad:3e:
                    41:9b:65:72:98:19:f1:de:80:92:0d:66:3a:d1:41:
                    86:33:49:09:b0:a0:a1:c5:26:b0:40:3f:30:2a:36:
                    27:99:1a:06:41:d8:45:d4:22:6b:25:c9:cf:59:39:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:38:A1:47:00:22:F3:69:0C:01:83:18:01:29:73:37:57:9A:6C:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A82E414A5C811F0B5152041C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:14e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:42:d5:65:49:e7:d1:38:93:02:4c:82:7d:a3:bc:36:42:48:
         69:ef:63:85:0e:a0:a1:c5:97:6d:43:d6:15:f3:8e:22:03:49:
         ec:f6:93:10:0d:fc:99:20:11:da:e5:22:78:d2:02:0a:1f:e2:
         3f:36:5a:e7:11:bd:72:61:28:ce:89:d9:03:5c:e8:0e:25:45:
         b1:e4:be:32:d3:63:f5:b7:93:01:f4:90:30:a4:54:1a:c9:18:
         71:8a:46:59:ca:02:11:1f:ca:3b:bf:b5:ea:12:c4:c4:30:7a:
         bf:47:08:8f:c0:67:c8:40:81:a1:9b:d1:ef:41:b3:67:26:d1:
         99:26:17:d5:ff:cf:05:ca:6c:9f:51:2e:92:e6:ef:c1:75:95:
         32:18:f0:66:49:11:19:4a:47:35:a9:13:d9:59:6c:29:de:31:
         4e:f5:c8:45:cc:4e:cd:fa:e8:ee:f4:4d:9b:c7:30:1b:df:32:
         b9:ea:c7:02:3a:be:25:98:6a:89:44:41:c0:85:6a:6a:7f:8c:
         7f:11:4b:fe:3a:62:fb:0c:e5:14:34:f1:c3:42:33:7f:20:e0:
         99:f7:b8:f3:4f:e8:6e:18:06:e0:7a:2c:52:9a:40:0a:01:e3:
         46:a0:ae:d0:5f:0c:b7:1b:e8:35:58:9a:c2:a3:31:6c:06:88:
         ec:88:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:40 2025 by rpki-client