Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/6D85335A58BC11F0983EE987C4F9AE02.roa
File:                     6D85335A58BC11F0983EE987C4F9AE02.roa (raw, json)
Hash identifier:          hN0xUvCUkBl0EboCBMVqvJWCpE5CmPVA1aB8FayA0Ik=
Subject key identifier:   17:12:8A:C7:19:3C:45:38:2E:12:A3:D0:B9:24:5B:EE:51:CD:D3:6A
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       010C
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/6D85335A58BC11F0983EE987C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 09:51:16 +0000
ROA not before:           Fri 04 Jul 2025 09:51:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154024
IP address blocks:        2401:8ea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Jul  4 09:51:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6867a414-1835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:d1:3e:68:b0:b4:eb:f1:6e:70:81:02:32:
                    3a:35:3f:d8:59:99:96:11:68:8a:e9:9f:a7:80:3a:
                    b5:67:39:ff:fd:18:b9:d6:65:48:99:15:0b:b5:7e:
                    50:ab:eb:91:b6:d5:41:5c:29:7f:45:e3:67:34:3d:
                    4f:02:08:64:1f:a6:e9:20:3e:3c:c4:d7:66:bf:89:
                    af:0e:9d:f2:f8:a6:57:bc:2a:4e:8d:8c:a7:83:5a:
                    c6:ca:46:75:74:65:a5:a1:8d:fc:34:89:dc:67:68:
                    b8:f5:f4:f5:35:73:d3:9b:77:9c:8f:7e:ee:81:ec:
                    40:ff:87:6d:c4:d5:8c:9b:57:2c:15:c5:c7:0f:7f:
                    59:f0:47:fc:92:86:72:28:5f:da:26:33:b2:6c:f7:
                    b1:ea:6b:e5:8e:55:29:23:c4:9b:b8:ae:74:28:74:
                    b9:c2:10:53:77:d0:36:25:83:6d:05:c8:29:4e:7e:
                    2a:bf:c4:a2:e2:38:76:46:46:9b:32:32:dd:02:10:
                    c0:e8:1a:25:bf:17:27:e1:b9:39:de:c4:2e:e1:cb:
                    b8:8e:35:60:23:01:11:65:0d:92:38:46:2c:a7:05:
                    0f:86:dd:93:40:a0:8f:73:3c:05:28:27:23:b7:ea:
                    67:bc:7f:0d:ec:88:3a:75:4d:d5:0d:d4:03:b0:bb:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:12:8A:C7:19:3C:45:38:2E:12:A3:D0:B9:24:5B:EE:51:CD:D3:6A
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/6D85335A58BC11F0983EE987C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:7f:4e:4c:03:30:b8:8b:0e:f5:fe:87:b7:ba:dc:d5:ca:
         79:50:6a:43:f0:e7:90:19:e8:56:2f:02:8d:3d:f4:68:40:3f:
         8f:1d:87:74:06:e7:d6:e0:bf:7f:1d:99:a3:e5:a2:64:40:2d:
         7c:03:6d:e5:5a:f5:bb:f6:9d:d1:4a:ea:84:d8:96:a9:9b:3d:
         7e:88:14:5d:38:19:09:5d:eb:33:52:17:8b:ed:a8:c6:c6:fa:
         dc:e9:05:7a:33:9f:91:de:90:aa:cc:69:74:8d:d4:5f:21:e1:
         cc:c6:09:3c:fb:43:18:dd:b9:81:0e:75:23:96:85:35:96:a6:
         b9:0a:32:8a:f6:c9:84:c4:e4:7e:8a:61:f0:4f:46:5b:1d:f0:
         53:a8:95:55:7f:ab:65:40:38:a1:bc:20:3a:9f:e1:68:27:25:
         45:ca:9c:e8:a5:22:6b:b7:96:f5:5d:50:77:1a:07:9a:cc:d7:
         52:59:74:c4:bb:b0:52:3d:30:3f:84:ef:29:94:a5:c0:5d:69:
         18:67:8c:fb:a6:03:15:65:ca:e7:e3:e4:b0:99:b5:11:19:0c:
         fa:ae:bc:76:07:b0:d5:fb:2b:fe:9a:cd:39:e3:60:13:02:bb:
         82:11:b1:51:5d:58:fa:89:89:76:b3:6b:85:3c:ea:c0:34:93:
         6d:77:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 01:07:03 2025 by rpki-client