Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9530495612BE11F08CCA4623C4F9AE02.roa
File:                     9530495612BE11F08CCA4623C4F9AE02.roa (raw, json)
Hash identifier:          ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=
Subject key identifier:   C9:52:29:7B:B7:08:40:EF:58:C7:3B:6B:D2:F8:C2:2F:FB:61:93:53
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       ED
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9530495612BE11F08CCA4623C4F9AE02.roa
Signing time:             Mon 05 May 2025 08:50:59 +0000
ROA not before:           Mon 05 May 2025 08:50:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152586
IP address blocks:        2401:8360:2::/48 maxlen: 48
                          2401:8360:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: May  5 08:50:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68187bf3-b7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:b7:67:d5:06:e9:97:a7:fa:0a:4e:c3:91:
                    49:16:10:c7:25:26:9b:da:eb:db:6c:f2:50:6d:fc:
                    ec:f8:32:da:3d:45:9a:b9:9d:f5:38:83:3b:3e:98:
                    19:3e:4f:d5:a0:75:b8:91:f3:cc:b9:70:f1:67:20:
                    0f:c1:1a:f6:3a:17:bc:08:9d:27:ef:b9:09:dc:c6:
                    72:28:ce:7a:88:6e:38:e4:bb:f3:17:8e:a3:2b:2e:
                    98:f9:9b:16:4f:79:8f:f7:73:45:52:b2:af:73:ed:
                    9d:99:37:a6:42:9f:70:4a:9b:19:50:0a:9d:53:00:
                    27:6f:0e:78:bf:77:b4:79:f2:b8:e6:e2:93:62:29:
                    18:96:0b:42:79:59:0b:3d:22:cf:35:de:09:0a:ba:
                    79:93:34:e1:f7:fd:d3:04:d3:78:43:67:da:57:25:
                    62:a4:c2:9f:c3:f9:49:d2:65:14:bc:d0:8c:6a:fe:
                    e7:d2:07:d8:94:45:a3:24:46:79:9e:8e:28:ab:27:
                    52:ca:a5:d1:2c:6f:c1:cf:db:1b:cc:0a:0b:16:04:
                    59:ce:a5:16:3a:4d:13:ce:8a:21:ca:ff:bc:a0:af:
                    5d:55:3a:61:d7:40:d0:f8:35:36:f9:bf:ad:d4:ce:
                    d7:9e:0e:ad:82:14:b4:dd:7f:76:d6:85:a6:31:7f:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:29:7B:B7:08:40:EF:58:C7:3B:6B:D2:F8:C2:2F:FB:61:93:53
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9530495612BE11F08CCA4623C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8360:2::/48
                  2401:8360:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:cc:ca:e3:52:a9:8c:d0:c8:c7:72:e1:eb:1c:7d:b6:16:ea:
         54:7f:b2:10:b5:6c:20:a4:2b:b2:c3:f1:77:e8:f2:85:37:f8:
         5c:0c:ff:6c:30:d9:cb:e1:6d:c0:69:3b:66:94:ea:ec:a0:63:
         2b:24:4f:aa:e2:fc:63:fd:0e:bc:62:98:a8:54:43:e5:10:c9:
         29:f0:da:89:a9:b4:58:db:ab:81:d5:5c:cc:e7:e3:62:93:f8:
         05:4d:b4:a6:0d:20:58:ea:0d:db:d0:58:a2:98:e0:0e:fb:c1:
         0d:8b:66:ad:58:4c:ed:61:87:dc:f6:5d:aa:30:22:ad:88:b7:
         eb:8f:9e:d1:26:ce:1d:cd:03:ce:20:8e:bd:1b:32:db:db:fc:
         f9:44:51:fc:89:1c:55:18:7e:5b:ef:ff:ef:0e:3f:77:54:c1:
         7c:0b:cb:e2:fc:0d:39:91:fa:5b:73:60:6f:47:78:c3:6a:ac:
         4a:d1:80:f6:9d:ae:b1:41:4c:aa:fb:71:26:d1:87:80:4c:05:
         27:e0:ec:ca:b9:5c:dd:5b:0c:1a:6f:7a:e3:41:b6:6c:8f:b5:
         bf:6e:60:74:20:42:31:8c:d5:30:f5:27:4e:55:c3:c5:e1:15:
         d6:d3:b4:92:69:d1:f9:8a:d8:35:d0:2d:6d:67:c2:b9:46:ac:
         39:3f:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:20:45 2025 by rpki-client