Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa
File:                     D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (raw, json)
Hash identifier:          oh7ui7LK3WMunAv1J2fHvn2kFRTi6Zr/uzSPr1lq2oo=
Subject key identifier:   75:7C:0D:2B:39:A6:30:EB:CF:7A:2E:4D:FD:4A:57:C9:A0:75:95:27
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       01CC
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa
Signing time:             Mon 30 Jun 2025 08:47:13 +0000
ROA not before:           Mon 30 Jun 2025 08:47:13 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151349
IP address blocks:        2402:be0:fefd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Jun 30 08:47:13 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68624f11-045c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:f3:4b:e4:e5:35:52:b9:80:1c:36:7e:7f:
                    96:fd:3b:7f:00:bc:a8:aa:fa:b4:93:f7:38:d2:e9:
                    87:0b:d0:38:68:8e:27:e9:ff:22:0d:c9:66:73:9e:
                    6d:82:b3:d7:42:e4:fc:7f:bc:3a:e3:37:a9:ee:51:
                    c1:ee:b1:1a:c0:05:3f:bd:35:dc:9c:61:f7:c5:63:
                    a4:97:4f:2b:1a:0d:ef:c7:98:4a:c6:78:ec:7e:ff:
                    e1:ce:12:d3:5a:d3:2d:2c:a0:8d:b5:de:e1:a4:a4:
                    35:87:40:f2:ff:6d:7c:76:de:2e:b2:21:c6:e4:e3:
                    17:30:84:a4:c7:9d:f3:a5:97:0f:a5:dc:06:d3:42:
                    0e:b5:90:bd:22:64:30:e0:eb:87:a0:0b:36:34:b0:
                    29:65:c0:62:59:21:21:fd:8e:e9:66:55:8c:73:14:
                    81:f3:f0:09:33:26:a0:e4:b6:f6:ef:86:3a:ae:78:
                    f7:0b:91:00:03:85:10:16:46:86:20:54:23:26:5d:
                    09:92:96:f5:27:68:ce:37:b2:1d:cb:bd:9a:5b:48:
                    63:8e:7f:05:69:ef:1d:d6:6f:b4:4b:4c:24:68:f5:
                    c6:cb:da:40:6c:b4:1b:39:23:6c:05:9b:05:07:8e:
                    15:6d:35:16:21:b1:43:34:1d:72:7d:ab:b0:8d:a5:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:0D:2B:39:A6:30:EB:CF:7A:2E:4D:FD:4A:57:C9:A0:75:95:27
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/D0F8C1B2558E11F0AA71D85AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fefd::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:cf:b7:dd:c7:e4:60:03:e7:16:09:6b:ae:fa:5f:2b:c6:
         22:fc:31:55:4f:97:da:0d:13:56:38:0c:92:d3:c4:02:9c:85:
         23:5a:b6:c0:b9:1c:6d:09:39:70:38:79:93:0e:11:a6:3e:89:
         56:1f:fd:f3:20:d8:da:12:eb:37:f6:82:76:e1:19:2f:1d:3a:
         3f:12:ff:7a:7e:39:b6:cb:31:48:18:94:b6:cb:74:56:8e:bc:
         16:e3:56:23:a3:6f:56:84:7a:62:f4:42:75:69:a7:06:2d:ce:
         8c:dc:ba:54:ee:c4:95:80:80:e3:0e:e1:2f:e0:8b:c2:6b:e7:
         4c:18:47:8d:26:ff:a1:ad:96:8e:fd:7b:24:1a:07:bc:14:61:
         08:25:a2:6c:89:ac:7f:ec:f5:ad:56:39:4e:e6:d4:a1:2e:9b:
         52:0c:05:66:2d:74:9c:42:ab:68:1c:cf:71:29:1e:b8:b7:5a:
         42:7a:88:a0:10:cb:f4:8f:da:07:dc:25:6e:43:35:1b:c7:91:
         f6:0e:82:1c:c9:fa:09:10:75:f7:1b:69:53:a1:9c:b4:e0:d6:
         c1:06:61:b2:01:29:5b:fc:cd:a8:4f:cf:90:42:b6:9e:d7:c9:
         44:22:60:ef:9e:15:73:af:89:e1:4f:31:eb:c4:15:87:c7:29:
         e1:1e:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:03:03 2025 by rpki-client