Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa
File:                     76E5D6AE727411EFAD2ACD27C4F9AE02.roa (raw, json)
Hash identifier:          Z1ub1x4sdAUbVhPgJBxhv86znPBuyk7/OiOYt681rm0=
Subject key identifier:   33:70:A9:C7:2E:8C:22:3E:80:0E:E2:EE:10:B9:3C:94:20:D8:C9:67
Certificate issuer:       /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial:       0F45
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa
Signing time:             Fri 16 May 2025 17:52:39 +0000
ROA not before:           Fri 16 May 2025 17:52:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     104
IP address blocks:        2406:2c0:1132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
                          rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 17:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
        Validity
            Not Before: May 16 17:52:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68277b67-24ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4f:ba:23:c3:6b:ab:ef:9a:54:27:79:e5:cd:
                    0a:23:5a:9a:42:fb:5b:f1:27:d4:93:c2:d8:b9:c8:
                    7a:d2:f7:70:78:e6:fc:98:53:75:2c:3d:70:75:c0:
                    fc:ca:6b:15:11:7f:d8:99:1e:63:c7:b0:c0:8d:bd:
                    5a:28:b2:fd:27:f3:f5:44:44:f6:fc:29:3f:7f:a8:
                    ec:d1:ae:56:93:1e:ad:2f:b2:7e:f3:1c:1f:66:ec:
                    df:b0:bb:93:00:d7:19:9f:f3:6d:1f:2a:ce:b1:a3:
                    29:0d:76:99:0c:ab:69:90:63:5b:6b:e6:9a:d7:00:
                    e7:fb:f2:c1:a3:1f:2d:74:a4:6d:df:3d:b1:7e:57:
                    3f:67:db:2f:70:75:56:83:59:66:dd:3d:01:67:09:
                    e0:3a:ec:32:3b:99:fb:20:3d:c9:ac:2b:6f:b6:37:
                    65:eb:d9:c5:67:bd:11:e5:51:98:3b:29:1f:d2:16:
                    f9:56:9f:4c:36:de:06:1e:51:f7:c5:da:e9:5b:6a:
                    2b:b0:03:9f:94:1f:a4:58:b2:5a:a0:1e:2d:51:e8:
                    11:cf:18:5b:49:62:59:b8:4f:ba:82:69:d8:2e:2d:
                    b4:04:9e:6b:34:72:3c:70:00:29:21:c3:81:f0:3f:
                    f3:45:9a:1e:1e:93:7b:cb:d3:2f:91:44:61:e9:1a:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:70:A9:C7:2E:8C:22:3E:80:0E:E2:EE:10:B9:3C:94:20:D8:C9:67
            X509v3 Authority Key Identifier:
                keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:2c0:1132::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:7d:47:97:fb:c3:89:18:97:06:a2:56:3d:b6:05:23:ce:
         84:7a:ee:73:e8:02:2d:4f:a7:63:7b:f7:66:e7:95:d6:60:6f:
         15:64:3b:ae:c9:78:65:04:2b:00:90:a5:3f:7e:35:d6:17:07:
         1b:e5:44:a5:61:b1:cd:34:fa:fe:73:c5:74:73:ce:18:71:8e:
         51:c3:18:18:ea:a6:b0:f4:e4:29:c0:c0:39:f0:84:fa:1f:3c:
         81:ac:16:4a:88:65:8a:0f:bc:37:64:c9:48:27:16:ed:54:98:
         5d:01:5c:f2:11:e7:4c:18:a3:0c:68:99:8b:26:35:a9:03:de:
         e6:6d:74:2d:78:c4:6b:f7:e8:bf:82:42:6e:ed:88:b8:ea:8e:
         65:c7:64:f1:2f:4c:7a:d5:17:e9:fd:f2:fd:ad:cf:1f:04:d2:
         06:f2:91:0e:8c:cb:12:e2:12:8f:6d:64:52:aa:71:8c:fc:04:
         42:7b:ed:39:36:75:ea:e3:3a:82:84:c7:e6:63:8b:1d:f9:d6:
         69:4c:2b:9b:2d:05:c2:5d:d3:5b:cc:a8:92:d6:9e:ce:2e:f7:
         78:63:09:c1:aa:e2:fd:04:fa:87:f0:4e:a6:2b:f9:dc:37:e5:
         97:d4:42:42:1f:fe:5a:da:e2:59:3d:cc:0e:59:7d:de:b3:9b:
         7b:81:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 04:22:01 2025 by rpki-client