Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/2E82E686569E11F08015BC34C4F9AE02.roa
File:                     2E82E686569E11F08015BC34C4F9AE02.roa (raw, json)
Hash identifier:          X3/rru4+xefljKYMl46GF/bGOSAjEtyI1VDuB5H54Oo=
Subject key identifier:   FB:4E:DA:FF:7C:05:06:B0:01:E3:5D:8E:72:E8:D1:9F:15:40:DC:F4
Certificate issuer:       /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial:       0402
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/2E82E686569E11F08015BC34C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 17:09:43 +0000
ROA not before:           Tue 01 Jul 2025 17:09:43 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     57025
IP address blocks:        2400:56a0:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
                          rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
        Validity
            Not Before: Jul  1 17:09:43 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68641657-51fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:b0:13:c7:c7:df:cf:1c:0c:1d:16:fb:d0:
                    85:3b:32:45:d4:7f:ba:6c:5b:bd:99:dd:76:d0:7f:
                    f4:d6:bf:9f:19:48:db:b9:4b:91:35:43:50:fd:b6:
                    d3:7d:af:4c:c7:91:d8:3c:c6:7c:44:93:16:23:09:
                    1b:8c:6e:8a:b3:12:ec:34:60:78:61:f2:e6:ba:7a:
                    7d:ef:48:f0:e1:9b:e9:49:5a:df:10:6a:47:51:22:
                    5d:1e:e7:8f:e0:dc:60:e3:97:57:81:ac:67:c2:6e:
                    24:4a:0b:01:df:b4:6a:b5:2e:3e:5f:0e:73:b1:03:
                    13:c1:a7:de:2d:18:38:64:1b:e8:cb:87:59:59:0e:
                    37:10:9b:e8:49:b6:7f:6e:ca:c0:49:4c:d8:dc:fc:
                    6d:ab:32:f3:60:22:0d:34:25:7c:84:71:51:21:fb:
                    2e:2a:dd:a6:be:b0:79:cd:56:b6:2d:f3:66:af:c2:
                    c4:0d:eb:92:98:ae:c0:f7:0c:bc:1a:88:0b:30:af:
                    12:ad:5f:73:f0:d8:35:92:f6:87:40:4c:85:11:8a:
                    b7:42:c6:11:16:61:7b:34:c8:6c:f3:0c:88:d8:16:
                    0d:51:14:a2:08:81:a2:f0:15:7a:bc:4a:41:ba:29:
                    ef:38:a9:73:03:cd:fd:72:06:5a:01:36:ae:d5:21:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:DA:FF:7C:05:06:B0:01:E3:5D:8E:72:E8:D1:9F:15:40:DC:F4
            X509v3 Authority Key Identifier:
                keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/2E82E686569E11F08015BC34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:56a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:1a:db:a3:c3:14:82:b5:af:80:d3:e8:0e:95:5d:c6:27:ad:
         54:58:e1:88:e2:c7:65:c2:4b:e5:3a:f0:9a:cb:44:bb:6f:b6:
         27:3f:2f:41:8a:96:e4:d3:f7:2c:4a:c3:74:12:4d:1f:90:86:
         0b:9f:6e:47:5e:a2:45:af:fb:e9:99:41:b5:eb:d2:28:95:d0:
         98:59:18:eb:58:b0:14:03:03:43:b6:10:52:ca:56:bd:8e:05:
         c7:7f:93:59:62:64:b6:08:3b:ce:2d:82:2d:0e:72:3e:30:d7:
         a1:f5:c6:44:aa:9b:d8:90:e2:6d:30:64:15:f7:28:20:09:3a:
         d8:ee:28:fc:1a:f1:c6:a3:0f:df:51:58:c8:87:72:20:40:90:
         20:e1:06:71:97:d5:bb:c8:17:86:02:04:72:1b:fc:19:54:55:
         75:34:cd:28:f5:c9:4b:04:96:36:a4:30:07:7b:16:bc:d3:07:
         f4:bf:a6:cc:4a:f8:ba:ea:5d:ff:c0:86:89:18:2e:3e:d3:c9:
         da:b5:67:58:5f:a8:80:68:ba:a3:ab:15:43:06:e5:6f:a1:0a:
         bd:f1:84:3a:0d:29:c4:ac:35:8d:4d:3e:b8:42:d4:bc:db:60:
         a9:dd:be:e1:58:26:11:0b:a8:00:5b:44:76:42:3e:4f:ce:f2:
         f2:f8:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:42:58 2025 by rpki-client