Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/6EA46446646511EFA9435879C4F9AE02.roa
File:                     6EA46446646511EFA9435879C4F9AE02.roa (raw, json)
Hash identifier:          N1pVptA00WkhE4m7SJH5EH6Jm0Owz+2oXrWW4KUrpu8=
Subject key identifier:   D5:81:00:EA:47:63:8E:74:28:65:46:7C:57:D3:D0:7B:23:02:DA:29
Certificate issuer:       /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Certificate serial:       0D42
Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/6EA46446646511EFA9435879C4F9AE02.roa
Signing time:             Sat 04 Oct 2025 18:17:43 +0000
ROA not before:           Sat 04 Oct 2025 18:17:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        2404:4f80:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
                          rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
        Validity
            Not Before: Oct  4 18:17:43 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e164c7-c402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a5:7a:b0:35:83:a6:1c:88:3c:91:f3:06:5c:
                    79:a8:79:32:05:f1:7a:92:4f:62:ef:0a:b0:54:82:
                    59:bb:a0:5a:b0:5f:68:2d:15:39:04:40:e5:a4:79:
                    7a:7a:25:89:c3:20:28:7d:af:98:23:ae:eb:b9:32:
                    07:67:c5:50:b2:cd:53:27:73:11:66:91:67:cb:be:
                    43:22:e1:86:c7:49:d5:f9:5e:8d:e2:6a:d9:cf:3a:
                    51:a8:3b:c1:77:a9:94:42:8a:ef:29:96:10:29:95:
                    1c:5c:ca:74:7f:f5:5f:37:8c:0c:94:b9:18:1d:81:
                    2e:9e:7f:14:b7:41:88:8e:54:d7:a4:14:d9:ad:f0:
                    bc:4e:e0:aa:6b:ed:94:82:d9:77:dd:9d:94:2f:53:
                    e4:16:f2:77:12:ce:8b:70:91:2e:19:7b:16:92:9b:
                    44:fc:8c:40:da:d4:08:71:ae:b5:b7:35:37:2e:5f:
                    3d:53:3e:06:10:2d:8b:25:be:c2:85:44:4d:c6:60:
                    f5:96:fb:3b:fa:23:0e:10:88:57:0b:00:35:82:9c:
                    82:dc:86:11:a6:e5:e9:04:f5:e1:60:08:ce:1e:e9:
                    69:cc:5d:97:41:69:6f:3a:bf:ab:52:f8:55:22:b2:
                    f9:59:e9:e7:57:13:93:b4:00:3c:c0:ea:72:5c:1f:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:00:EA:47:63:8E:74:28:65:46:7C:57:D3:D0:7B:23:02:DA:29
            X509v3 Authority Key Identifier:
                keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/6EA46446646511EFA9435879C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4f80:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:b2:e6:16:1a:48:08:f7:98:b4:d6:39:9a:37:23:1b:a0:
         cd:d8:20:be:e1:77:39:8b:f3:50:7c:be:60:57:5b:db:7b:23:
         5d:9c:6e:e4:08:db:5d:35:83:f8:cb:89:f6:cd:8b:cf:02:70:
         b6:39:dc:9a:df:e9:0b:a3:fe:d7:1c:e1:16:04:c4:e9:b7:f6:
         5c:ef:3e:87:49:fc:33:10:e6:56:5a:29:3f:25:ba:bc:fc:5d:
         ec:4d:1e:d4:b9:ed:cc:68:ba:36:b7:d6:82:1d:28:e6:39:63:
         3f:d8:93:82:1f:b7:df:ba:76:1b:cd:4b:6c:c8:be:1d:c6:85:
         3b:3d:75:1f:cc:73:b2:b7:b0:91:74:83:e0:5f:6a:36:19:6e:
         48:eb:aa:30:18:02:8c:ba:d4:48:69:59:e7:24:a4:1d:eb:54:
         f6:4e:cc:db:33:84:ed:31:b5:c7:d3:bf:7a:fa:79:42:16:b5:
         5d:64:5c:16:e0:bc:80:10:ea:b9:33:36:3d:9e:59:c8:0a:49:
         5a:38:7a:6d:eb:4a:11:bf:05:45:1e:9a:5f:c4:e6:8b:59:e7:
         9e:53:35:88:22:f6:a7:0a:29:1c:fa:98:5e:1a:77:6b:36:4a:
         b4:61:3c:e1:a3:38:f1:90:47:b0:b2:02:cb:8a:8c:c1:27:78:
         04:68:66:3c
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB
Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGUxNjRjNy1jNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6aV6sDWDphyIPJHzBlx5qHkyBfF6kk9i7wqwVIJZu6BasF9oLRU5BEDlpHl6
eiWJwyAofa+YI67ruTIHZ8VQss1TJ3MRZpFny75DIuGGx0nV+V6N4mrZzzpRqDvB
d6mUQorvKZYQKZUcXMp0f/VfN4wMlLkYHYEunn8Ut0GIjlTXpBTZrfC8TuCqa+2U
gtl33Z2UL1PkFvJ3Es6LcJEuGXsWkptE/IxA2tQIca61tzU3Ll89Uz4GEC2LJb7C
hURNxmD1lvs7+iMOEIhXCwA1gpyC3IYRpuXpBPXhYAjOHulpzF2XQWlvOr+rUvhV
IrL5WennVxOTtAA8wOpyXB94KwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNWBAOpH
Y450KGVGfFfT0HsjAtopMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy
NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNkVBNDY0NDY2
NDY1MTFFRkE5NDM1ODc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkBE+AAHEwDQYJKoZIhvcNAQELBQADggEBACn7suYWGkgI
95i01jmaNyMboM3YIL7hdzmL81B8vmBXW9t7I12cbuQI2101g/jLifbNi88CcLY5
3Jrf6Quj/tcc4RYExOm39lzvPodJ/DMQ5lZaKT8lurz8XexNHtS57cxouja31oId
KOY5Yz/Yk4Ift9+6dhvNS2zIvh3GhTs9dR/Mc7K3sJF0g+BfajYZbkjrqjAYAoy6
1EhpWeckpB3rVPZOzNszhO0xtcfTv3r6eUIWtV1kXBbgvIAQ6rkzNj2eWcgKSVo4
em3rShG/BUUeml/E5otZ555TNYgi9qcKKRz6mF4ad2s2SrRhPOGjOPGQR7CyAsuK
jMEneARoZjw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:39 2025 by rpki-client