Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/5B4D02987E5B11F09260CE56C4F9AE02.roa
File:                     5B4D02987E5B11F09260CE56C4F9AE02.roa (raw, json)
Hash identifier:          lV9/OfD1pP8tzM2lzafbNv9IW406iEKYXoupLohRi0g=
Subject key identifier:   DA:96:6A:23:83:B7:95:88:C7:1E:76:A7:01:66:27:7D:84:EB:64:2C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       013E
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/5B4D02987E5B11F09260CE56C4F9AE02.roa
Signing time:             Thu 21 Aug 2025 06:52:09 +0000
ROA not before:           Thu 21 Aug 2025 06:52:09 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     205927
IP address blocks:        2403:ad80:5020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Aug 21 06:52:09 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68a6c218-d617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:23:25:db:fd:42:c9:84:52:5d:54:eb:87:
                    df:b9:7d:93:76:cb:9a:43:90:f7:62:f0:49:25:ce:
                    75:07:5f:ab:59:84:f5:5f:93:8e:0c:99:1d:ad:bf:
                    d8:0c:e0:77:52:bf:89:e8:f9:69:ba:87:98:20:91:
                    bc:cc:59:73:40:58:a4:84:a6:dc:65:81:06:d5:1f:
                    bf:a3:50:b4:39:b7:ed:9c:1f:76:f6:ce:d9:7a:e3:
                    7f:be:ae:66:15:0e:cf:20:9d:99:07:d4:5f:b1:75:
                    19:46:ab:fd:32:9e:70:15:a8:8e:13:3f:d4:94:69:
                    69:d8:c6:e3:2a:a8:82:01:b0:5b:df:7c:16:44:6b:
                    b7:14:a8:e6:a6:f4:ba:5f:60:97:9a:f8:26:2e:0c:
                    96:f7:eb:8b:00:63:60:82:a0:55:c3:9a:f0:d1:6b:
                    86:a0:a0:f5:2c:d0:7d:52:37:d7:18:7b:24:66:77:
                    1b:87:0a:64:28:22:88:65:13:f9:45:30:dc:e6:fb:
                    22:ba:a0:a8:32:e4:20:9d:85:be:f7:f8:63:25:88:
                    06:80:8b:9f:c3:a7:33:1e:44:48:7c:a1:a5:3f:cc:
                    e6:51:94:cb:bc:a5:8d:2b:1c:33:3b:1b:e5:ee:30:
                    49:76:2f:d0:fa:33:43:56:28:e8:f8:f1:56:44:a1:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:6A:23:83:B7:95:88:C7:1E:76:A7:01:66:27:7D:84:EB:64:2C
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/5B4D02987E5B11F09260CE56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:5020::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:87:c5:f2:ad:36:b6:52:00:2e:55:03:19:ca:1e:45:37:67:
         e2:2a:0e:53:8c:3e:28:6b:16:0c:4f:5d:41:c4:53:c8:fa:16:
         ce:a5:a5:bd:d2:99:ea:13:a6:e2:39:e8:03:a3:c2:e8:ef:87:
         58:32:b9:8c:aa:1c:f3:4f:a7:51:83:11:15:50:36:98:e7:1d:
         25:91:7b:1c:ef:0c:12:25:0e:08:27:4c:7d:6e:d3:05:78:1e:
         cc:69:6d:a0:6e:cc:3c:27:4b:68:c6:7c:af:58:a5:6a:d9:75:
         a0:22:74:b0:b9:ff:7f:2a:b1:ad:01:86:c2:30:48:3d:47:82:
         0d:4c:24:1c:8d:ff:d1:9b:03:00:a4:46:94:b5:78:9a:c3:99:
         a1:63:41:03:12:20:32:d0:a8:a7:ab:ff:fe:1a:b8:b6:f3:26:
         e9:f2:09:6b:cd:c7:d0:4a:21:24:c4:fb:e4:7a:2f:94:6b:c3:
         0d:3e:bf:1f:97:61:10:bd:4a:2e:53:0c:60:9f:32:ab:e5:ed:
         ef:06:40:66:35:fe:2b:b9:ce:92:ab:33:01:f9:b9:3f:17:db:
         7d:f9:3d:02:d8:b0:db:02:0b:fa:fd:b3:1e:fc:8d:c2:78:4e:
         1e:23:86:65:d8:b7:40:23:f5:28:16:28:6e:5e:78:11:ff:e5:
         1d:61:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:36:59 2025 by rpki-client