Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
File:                     BACC6D0A4F7411F0A8124536C4F9AE02.roa (raw, json)
Hash identifier:          DXd58lVKAvc2UPgiS5Dl9wenDfuBudEt81twiJtKSDE=
Subject key identifier:   7D:AD:04:21:58:A4:A4:4A:B9:82:D0:AA:28:54:E6:BA:5E:5F:27:EE
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       01BC
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 06:53:20 +0000
ROA not before:           Mon 30 Jun 2025 06:53:20 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     26445
IP address blocks:        2402:be0:fff0::/46 maxlen: 48
                          2402:be0:fffc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Jun 30 06:53:20 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6862345f-9180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:8f:96:c3:ea:e6:f0:46:44:f8:bf:d1:32:
                    7e:06:7f:11:39:d9:cc:36:e6:e2:94:f5:ac:88:c7:
                    aa:79:c3:33:0e:a4:3e:fe:65:cd:cd:5e:c7:8f:ec:
                    93:8d:03:be:47:eb:52:b6:20:cd:51:96:6c:7c:fa:
                    70:35:52:f8:20:36:25:6a:64:28:3f:c9:7e:86:b2:
                    f1:2a:90:e8:43:04:d9:74:a1:9e:bb:61:ea:9c:6c:
                    da:cb:c5:66:d6:49:6f:97:0d:a0:06:30:69:70:43:
                    a9:dd:ec:71:9a:12:64:e2:e6:c1:4d:1c:7c:06:a8:
                    c0:06:71:fa:31:b5:29:8b:07:fa:27:71:bf:68:8f:
                    60:42:83:41:24:50:10:db:95:f9:92:05:87:ca:d5:
                    e2:02:69:61:28:24:a2:93:d9:30:66:a1:8f:8c:94:
                    c3:e6:23:dd:1c:26:f8:70:83:a2:87:83:7d:c1:3e:
                    7d:f5:1e:e5:d8:ff:60:4f:7f:e3:5a:76:52:c0:07:
                    6a:2e:79:ae:a2:85:e3:1a:2a:57:f3:b6:ce:60:f0:
                    16:c4:72:ee:91:80:3e:5a:73:f5:73:86:5a:65:09:
                    7c:5b:e2:83:07:87:18:b1:9d:1f:fa:f5:ca:a0:05:
                    ad:f0:13:d9:c9:67:fa:db:1f:1c:1b:20:d6:62:16:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:04:21:58:A4:A4:4A:B9:82:D0:AA:28:54:E6:BA:5E:5F:27:EE
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fff0::/46
                  2402:be0:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:74:5d:e2:0d:20:8f:86:53:2c:90:18:61:27:dc:b7:d2:59:
         a1:b5:e8:b2:f6:d7:f4:0a:80:bd:1d:f2:8f:c3:5f:5b:f3:27:
         93:9e:57:d2:dc:5e:09:c3:49:46:75:57:a3:53:a1:14:04:c8:
         31:1e:e0:9e:a4:f1:43:0d:82:86:38:13:e5:44:f6:c5:e8:18:
         30:2a:f9:78:e2:08:4c:b9:6c:f8:69:38:df:d6:1e:82:8f:90:
         ac:61:89:e8:9b:bb:a3:eb:23:0a:2d:29:df:05:f2:31:a8:30:
         35:f3:b3:e7:d8:78:88:db:21:e6:d0:9f:31:fd:02:f3:0c:73:
         a5:f7:90:2f:5c:e2:15:10:81:6f:79:e7:18:6a:53:4b:23:ae:
         e1:9f:a7:56:6a:31:dd:50:67:0b:68:0e:54:ad:06:ec:eb:91:
         ca:ea:61:b0:fd:45:e3:48:09:9d:a8:19:4c:cf:c6:54:32:e2:
         06:59:ad:af:38:88:2b:b7:f2:4a:4c:63:21:c9:ae:5c:7d:c8:
         56:c6:ef:3b:4a:3e:c5:29:b9:57:38:8a:ac:c7:2a:bb:e0:57:
         25:9d:19:97:9f:ac:6f:dd:20:9e:de:35:65:cc:6a:ea:b1:9f:
         07:1e:06:2b:5b:ed:b7:63:6f:aa:11:55:59:63:3e:24:74:c0:
         47:1e:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:03:52 2025 by rpki-client