Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
File:                     5D463936C87611EDAC86AA74C4F9AE02.roa (raw, json)
Hash identifier:          wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=
Subject key identifier:   07:5C:E0:C5:B1:C5:12:06:74:75:6C:0D:49:31:D9:6D:12:D6:08:02
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       01D1
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
Signing time:             Sun 11 May 2025 02:31:44 +0000
ROA not before:           Sun 11 May 2025 02:31:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     203472
IP address blocks:        2400:e3e0:f5a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 02:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: May 11 02:31:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68200c10-bc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:c8:db:20:a8:0c:ae:f9:18:66:95:b8:94:
                    9a:97:62:b0:ed:e7:62:68:46:df:20:ed:5d:d4:cc:
                    07:37:ba:6f:01:b5:82:f1:67:8c:b9:fa:11:61:c7:
                    71:a4:fe:e0:e7:a5:e5:7c:f4:8f:78:d4:c4:b0:95:
                    37:e9:47:1c:e2:66:51:77:cd:fd:c3:65:76:2d:f9:
                    95:13:dc:bf:d1:5f:12:cc:9f:82:d6:a3:04:3d:2a:
                    6a:a0:49:b9:c4:3e:be:84:49:64:c0:14:8d:3c:51:
                    73:ab:90:7f:db:e0:d4:66:09:df:62:8a:15:00:2f:
                    72:54:f7:0d:94:a3:89:df:fd:52:f2:5e:d9:79:d2:
                    ff:34:af:06:8a:bf:52:6d:fb:e9:49:08:27:bc:c8:
                    28:58:21:f5:d5:3c:e1:5a:f5:d8:7e:12:fd:ac:1e:
                    95:a1:8d:49:ce:4c:5e:10:ee:28:3d:2e:45:ac:cc:
                    4d:d9:5a:01:60:15:46:96:f2:5e:73:e9:9b:f0:02:
                    cb:5a:fc:b0:f6:78:8e:5f:fa:ca:12:7e:29:e4:85:
                    8e:41:6d:65:71:72:18:e9:9f:8b:ab:21:50:e2:39:
                    31:f5:1b:d2:50:fd:38:32:6c:50:5f:18:77:a5:49:
                    ee:83:cf:f3:48:31:80:7b:02:64:0d:15:0a:4f:a1:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:E0:C5:B1:C5:12:06:74:75:6C:0D:49:31:D9:6D:12:D6:08:02
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e3e0:f5a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:ca:30:0d:42:47:43:aa:57:e9:c1:b4:98:12:8d:97:a3:24:
         4c:b6:38:8b:15:82:77:d5:93:8f:7f:51:e1:f8:22:96:62:f1:
         73:b9:0e:67:7f:b1:c2:2a:5c:89:58:b9:34:d7:ee:d7:35:9a:
         30:3f:73:04:0c:73:1e:ff:c1:a8:28:6c:b3:a4:ef:0d:34:f6:
         50:2e:7d:4d:e1:70:5e:d5:1b:fe:b8:0f:2e:9e:a7:0b:55:30:
         8b:31:70:70:cf:8d:1e:67:be:53:d7:c3:41:b1:52:d5:17:2c:
         32:50:de:ef:85:b4:79:cc:2b:f7:cb:fa:15:21:45:a5:f4:28:
         bd:b8:53:5d:f7:f4:7f:6e:b7:18:40:f3:a1:86:e4:79:7c:3a:
         47:57:da:27:39:c7:83:d3:4f:69:ba:73:56:49:e2:81:cb:07:
         5b:56:3d:d2:e2:01:f8:1b:ee:c3:9d:19:25:b6:e4:d2:6a:48:
         02:2c:d4:da:97:a2:3b:49:5f:53:d8:ff:4d:73:03:92:3d:85:
         fd:fa:8a:af:a4:c4:f5:3e:1b:94:9f:3c:3d:dd:a7:db:c7:ad:
         54:3b:e6:45:47:fe:56:28:a4:f1:8e:31:72:4c:ca:87:55:1d:
         09:1b:7f:2d:c3:c6:00:31:cf:26:5f:a5:df:10:32:16:67:2d:
         4c:51:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:37:10 2025 by rpki-client