Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/7D883CF033F911E98674843BC4F9AE02.roa
File:                     7D883CF033F911E98674843BC4F9AE02.roa (raw, json)
Hash identifier:          kvRz79x323/sz1CS5sLMmHqk7HExlk2aKA5DVgo+je4=
Subject key identifier:   19:62:6E:62:0F:D4:35:9C:8B:C9:EC:95:F9:59:E3:08:57:1C:F5:3C
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       3585
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/7D883CF033F911E98674843BC4F9AE02.roa
Signing time:             Sat 14 Jun 2025 14:50:54 +0000
ROA not before:           Sat 14 Jun 2025 14:50:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     681
IP address blocks:        2404:138:4002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 14:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Jun 14 14:50:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684d8c4e-16b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:75:7a:6c:d0:a9:e1:97:c4:81:9d:ee:d5:
                    87:d5:96:de:12:1a:b6:66:96:8f:30:e1:89:d3:5f:
                    fc:6f:c6:cf:36:98:63:54:10:e5:d2:b5:7f:d5:17:
                    fa:d5:9b:da:90:22:28:d6:6d:0c:3b:1a:57:ba:93:
                    57:8f:dc:43:b7:62:cc:c1:c1:e2:bd:86:cd:5d:a8:
                    39:b5:93:49:3b:2d:ba:4d:55:41:bc:7b:38:26:27:
                    be:22:95:db:c0:3e:12:75:a0:53:7b:91:33:4d:bf:
                    71:08:f0:98:2d:0b:0d:48:6d:bb:df:80:38:f1:81:
                    b9:29:61:59:c6:93:0c:c9:0c:87:d1:c8:78:22:fe:
                    54:99:25:84:27:1e:53:59:cf:9e:25:bd:4c:b1:98:
                    da:f2:39:d0:39:8f:d7:a1:a8:5a:67:a4:8a:10:65:
                    d1:39:77:f2:cb:15:0b:36:6b:67:0c:c2:ee:01:67:
                    91:cd:cc:b5:18:d4:91:df:41:24:da:cb:98:0c:ef:
                    de:e6:57:9b:d7:98:18:fd:30:82:a3:fa:c2:fb:ed:
                    15:76:01:e8:3e:ee:58:b0:c9:e4:9d:25:43:82:c2:
                    d8:18:4c:2e:98:9b:0d:90:16:a9:ef:5d:5d:ab:d3:
                    76:84:29:7e:48:34:56:17:bc:bc:35:c4:15:eb:2f:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:6E:62:0F:D4:35:9C:8B:C9:EC:95:F9:59:E3:08:57:1C:F5:3C
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/7D883CF033F911E98674843BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:138:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:4e:22:b2:56:93:68:5d:19:f9:2e:2f:d8:01:3e:0a:15:
         de:b6:57:d3:98:3f:07:d4:00:9f:b8:8e:8b:2d:9e:2a:80:2e:
         bf:1d:d0:0d:4f:68:d6:b6:3b:1e:a3:96:48:23:fb:78:4a:4a:
         57:bd:a5:40:17:e7:99:c9:2a:0f:38:dd:7f:f1:0f:a6:28:f8:
         2d:4a:c4:fb:96:3e:22:25:b2:dc:ff:7d:4e:07:07:33:27:ca:
         65:e1:4b:d3:39:44:cf:75:5d:48:3c:56:c4:12:de:2f:b0:cb:
         8e:a6:3c:cb:d7:98:c0:43:ff:45:e4:51:67:93:9d:8b:9b:30:
         df:b5:e1:16:08:1c:a1:c8:4c:bb:32:fc:81:4d:65:90:43:28:
         94:d5:c5:d6:9b:ca:9f:63:8a:00:66:9a:c4:68:b0:e1:a1:f8:
         6b:31:6c:62:27:40:f5:8d:0d:41:67:79:98:84:72:76:2b:0e:
         10:8c:e4:3e:0f:1c:4c:8f:c5:70:7c:f7:e3:21:51:20:73:31:
         e7:22:68:29:c2:67:e1:cb:49:da:b1:14:b1:9e:b6:fb:f6:e4:
         c1:5e:9e:af:70:9c:d6:c6:8b:1d:25:80:bc:d7:5a:f5:20:8a:
         e8:37:8d:7d:0e:3f:5a:2a:93:a2:e6:e8:90:c2:d2:93:32:0d:
         bd:19:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:22:57 2025 by rpki-client