Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/76FCBDA6353311F0BE188334C4F9AE02.roa
File:                     76FCBDA6353311F0BE188334C4F9AE02.roa (raw, json)
Hash identifier:          ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=
Subject key identifier:   EA:D1:92:A1:32:BE:55:9C:F1:C5:83:C1:73:2C:3D:25:F2:6F:B0:35
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       30
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/76FCBDA6353311F0BE188334C4F9AE02.roa
Signing time:             Tue 20 May 2025 04:32:41 +0000
ROA not before:           Tue 20 May 2025 04:32:41 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     393437
IP address blocks:        2404:de80:400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 06:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: May 20 04:32:41 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=682c05e8-190e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6d:fe:eb:e1:b1:cb:91:5f:71:c9:d4:af:5c:
                    4f:57:a3:3e:9e:ae:18:91:75:04:8b:ee:26:75:0e:
                    f3:b8:0e:ac:60:d1:57:f8:cf:17:16:c8:79:d2:d1:
                    a9:d7:36:98:48:fb:ed:fd:0a:33:34:e1:77:c8:7c:
                    b1:5b:dc:e4:f9:90:92:dd:6d:e7:e1:6d:23:12:da:
                    ec:9d:75:4b:c3:e9:95:42:1f:d4:8c:9c:7f:3b:31:
                    63:99:a1:95:cc:a6:e1:16:c8:8c:43:30:f7:a7:0a:
                    97:af:83:59:cc:9c:d9:b2:f6:ce:aa:16:11:1c:82:
                    f1:6a:84:2c:96:04:9e:70:c9:53:05:31:e3:ef:61:
                    44:c4:69:bd:c2:5a:da:85:c6:e6:09:ba:dc:9a:2c:
                    6b:47:4f:15:49:0c:34:bf:25:c4:73:00:ee:4e:8a:
                    b0:82:a4:ff:93:f5:64:0b:45:84:aa:6e:2a:b8:76:
                    a3:2f:11:6c:bc:44:b6:24:43:56:6e:c6:47:e0:70:
                    bf:95:66:51:40:96:ec:09:05:ec:66:39:4f:07:a7:
                    7e:24:f5:57:3e:15:66:71:21:a1:aa:71:1b:99:66:
                    7e:ec:c7:68:f4:33:2c:ff:0e:7b:a5:7d:8a:59:77:
                    f2:c6:73:bd:20:ef:d4:5b:19:6f:f3:72:db:8a:cc:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:92:A1:32:BE:55:9C:F1:C5:83:C1:73:2C:3D:25:F2:6F:B0:35
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/76FCBDA6353311F0BE188334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:de80:400::/39

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:5f:de:76:97:87:f8:a8:9c:87:7f:8f:2f:aa:88:9e:a3:
         86:33:6b:f8:c6:22:b3:77:bd:bf:c6:24:04:a4:f9:aa:f8:be:
         15:ba:d7:d4:6b:aa:ea:a6:ec:cc:c1:77:bb:dd:06:59:d3:ed:
         3c:89:e3:2b:5f:98:2d:eb:24:b0:08:33:71:f1:05:e9:eb:c2:
         66:7b:f6:31:df:0d:a6:14:48:bf:ab:cf:29:01:2e:bb:d5:4e:
         81:ab:21:24:82:b0:5f:fc:8a:44:83:9f:86:04:95:fe:3a:bc:
         53:53:ef:62:04:42:9a:19:98:24:7a:27:b3:d1:ea:97:91:c9:
         e7:88:35:b5:f3:d3:a6:c0:92:00:2b:4b:63:74:2f:61:e6:07:
         83:a5:9d:48:b6:54:68:39:be:31:fc:61:a7:7c:dc:fd:7b:f4:
         ac:0c:6b:f1:8f:4e:8e:f7:0d:86:9c:cf:45:21:5f:6c:08:09:
         f9:d0:70:4d:3a:65:e2:b5:65:17:7d:03:e9:29:5a:4e:13:04:
         80:a1:24:65:ed:68:3f:56:b6:39:ac:55:1f:d7:f4:07:ea:b7:
         ee:22:11:9d:cf:b6:c3:da:08:69:01:6f:18:68:a3:75:c7:bf:
         89:0c:17:ce:7b:dd:b2:1f:1b:73:7b:75:5f:2c:bd:40:2c:62:
         52:d9:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:46:18 2025 by rpki-client