Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/F3B00CD2666C11EEB1B4711CC4F9AE02.roa
File:                     F3B00CD2666C11EEB1B4711CC4F9AE02.roa (raw, json)
Hash identifier:          NLX9iBQc5qpA5HiI79qnyQxZYjEiAaFpUSGQqEwDv14=
Subject key identifier:   88:74:CC:D7:F9:D4:6F:B7:44:0D:1B:EA:7D:68:15:3A:29:D4:9D:F6
Certificate issuer:       /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Certificate serial:       02F3
Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/F3B00CD2666C11EEB1B4711CC4F9AE02.roa
Signing time:             Fri 01 Aug 2025 02:38:39 +0000
ROA not before:           Fri 01 Aug 2025 02:38:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150180
IP address blocks:        2001:df0:ddc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
                          rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
        Validity
            Not Before: Aug  1 02:38:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688c28af-0c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:da:9c:c5:dc:f7:b4:97:b3:d9:e8:43:96:
                    b2:c3:8c:4f:3d:bb:2b:66:bd:30:10:8f:6f:5c:51:
                    91:a6:22:61:b7:fb:71:bd:8f:2d:fd:f9:79:67:c3:
                    57:34:b0:3b:26:39:70:a4:cf:3f:b6:a6:fb:94:8e:
                    76:d9:d0:ca:67:e8:b3:9b:53:9f:c8:f2:04:6c:eb:
                    60:d7:19:97:b7:7f:5a:f2:40:be:1a:33:40:4d:18:
                    bb:2a:26:28:73:58:5c:31:e1:34:65:fe:b6:b8:15:
                    52:a4:e8:f4:cc:d2:cd:d1:04:2e:ed:52:03:12:ac:
                    e7:19:ca:09:39:90:a1:79:0f:e7:35:f4:75:28:17:
                    b4:13:fa:4a:a3:af:9a:60:b8:92:d3:8a:72:51:41:
                    71:fe:50:09:51:53:21:55:bd:2c:b2:8a:c5:80:71:
                    ff:04:48:9a:76:8a:7d:51:58:22:5d:1e:54:e8:af:
                    81:7c:1d:de:ba:a0:59:4b:3c:46:e5:4e:be:2f:b3:
                    e8:8c:0b:1c:5d:7f:83:14:33:e7:a8:99:0e:53:f7:
                    fb:60:d6:26:2b:d1:ab:d5:6b:18:a4:d3:c3:a7:6b:
                    7a:0c:27:87:8e:25:61:12:02:7b:57:bd:e9:54:6a:
                    97:1a:ba:95:1d:2d:bd:ff:5b:8f:76:5b:9a:5a:f5:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:74:CC:D7:F9:D4:6F:B7:44:0D:1B:EA:7D:68:15:3A:29:D4:9D:F6
            X509v3 Authority Key Identifier:
                keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/F3B00CD2666C11EEB1B4711CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:ddc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:69:49:3a:83:1c:7f:12:e3:e4:90:11:98:fe:4f:cf:23:
         a4:ec:2a:01:17:3d:f1:6b:2b:19:2d:17:2b:de:81:42:83:b9:
         b6:bc:97:c9:96:0d:7c:84:68:e2:fc:15:c2:d6:a6:bd:75:83:
         b8:54:2c:24:bb:47:46:9d:34:31:df:c6:c3:fb:b4:27:d1:5a:
         e9:ea:7f:6d:7a:3d:13:15:3d:45:6f:08:f5:3f:32:32:3f:89:
         8b:d5:9a:b3:8c:75:9b:a3:d0:38:ed:a5:1c:24:48:1a:ea:c6:
         dd:dd:f5:69:84:a9:e8:f2:05:31:ce:94:6b:e4:48:cc:b9:29:
         28:94:6e:7b:60:9f:06:4b:22:83:da:fa:9a:a8:ab:26:86:dd:
         5c:a8:ae:18:6c:df:dd:49:b6:23:b6:84:03:14:63:f4:49:54:
         cd:92:2a:8e:e3:61:36:12:83:85:ac:74:de:18:01:57:91:18:
         85:38:47:33:8b:ae:bd:25:c7:49:c2:21:21:a9:d9:7d:83:14:
         f3:5e:a3:46:e3:91:57:5b:04:7c:13:86:f6:8d:0b:84:69:e9:
         7b:01:0d:5a:43:2f:7b:79:05:63:1f:5c:2f:6d:4c:40:c1:2f:
         e5:be:76:89:90:a6:ad:51:5c:9f:2c:9b:a7:e6:8b:37:0e:fe:
         11:a8:b1:75
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD
OTZFNkJBRTgwHhcNMjUwODAxMDIzODM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjMjhhZi0wYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5nranMXc97SXs9noQ5ayw4xPPbsrZr0wEI9vXFGRpiJht/txvY8t/fl5Z8NX
NLA7JjlwpM8/tqb7lI522dDKZ+izm1OfyPIEbOtg1xmXt39a8kC+GjNATRi7KiYo
c1hcMeE0Zf62uBVSpOj0zNLN0QQu7VIDEqznGcoJOZCheQ/nNfR1KBe0E/pKo6+a
YLiS04pyUUFx/lAJUVMhVb0ssorFgHH/BEiadop9UVgiXR5U6K+BfB3euqBZSzxG
5U6+L7PojAscXX+DFDPnqJkOU/f7YNYmK9Gr1WsYpNPDp2t6DCeHjiVhEgJ7V73p
VGqXGrqVHS29/1uPdluaWvUIGQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIh0zNf5
1G+3RA0b6n1oFTop1J32MB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw
RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTNCRTUvNjExQzUxMkNGMEYzMTFFQzg0QjI5QzgwQzRGOUFFMDIvRjNCMDBDRDI2
NjZDMTFFRUIxQjQ3MTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3w3cAwDQYJKoZIhvcNAQELBQADggEBAE34aUk6gxx/
EuPkkBGY/k/PI6TsKgEXPfFrKxktFyvegUKDuba8l8mWDXyEaOL8FcLWpr11g7hU
LCS7R0adNDHfxsP7tCfRWunqf216PRMVPUVvCPU/MjI/iYvVmrOMdZuj0DjtpRwk
SBrqxt3d9WmEqejyBTHOlGvkSMy5KSiUbntgnwZLIoPa+pqoqyaG3Vyorhhs391J
tiO2hAMUY/RJVM2SKo7jYTYSg4WsdN4YAVeRGIU4RzOLrr0lx0nCISGp2X2DFPNe
o0bjkVdbBHwThvaNC4Rp6XsBDVpDL3t5BWMfXC9tTEDBL+W+domQpq1RXJ8sm6fm
izcO/hGosXU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:50:31 2025 by rpki-client