Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa
File:                     315BBC4AA21C11E8B669A00BC4F9AE02.roa (raw, json)
Hash identifier:          MlrQFyNLV1dCVem/E1LF0TFmlekJWbf+VquXYnzkE0Q=
Subject key identifier:   75:6A:4C:64:44:D9:09:FF:D7:61:EB:2A:2D:1F:BC:04:6A:1E:15:E3
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       288D
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:54:13 +0000
ROA not before:           Sat 26 Jul 2025 15:54:13 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     23764
IP address blocks:        2402:e380:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10381 (0x288d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:13 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884fa24-754b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:7d:2d:3e:7a:97:d0:96:4c:4a:6e:7c:69:
                    7f:35:23:a0:e4:3b:25:77:30:65:88:0e:b6:a6:ec:
                    40:1c:15:43:13:39:52:7b:31:d5:b2:ea:31:18:e0:
                    0e:60:52:23:76:a5:f7:6c:81:8e:f1:3d:6d:ed:a2:
                    4c:39:b7:5f:73:6d:93:c9:ed:7e:01:b2:35:53:1d:
                    90:2d:03:62:43:ff:7b:84:73:0b:fe:20:59:28:6e:
                    e3:32:dd:97:49:b5:58:63:c4:ea:9b:ed:e0:57:64:
                    f2:d1:60:47:f9:90:1c:be:e9:74:8c:90:1f:b4:cd:
                    35:91:8e:2a:4c:20:6d:8b:d7:42:6c:85:b5:ca:63:
                    d3:fb:2d:b6:b9:66:10:e0:4b:6f:10:9e:07:45:58:
                    62:23:51:ca:43:24:3a:e0:19:22:5c:cb:8f:7b:27:
                    b3:36:b5:9b:8b:a7:10:2b:a5:3e:ea:ae:97:6f:8d:
                    14:a0:54:e2:ee:73:70:c6:c6:eb:ea:bc:15:19:ef:
                    62:68:c4:60:f7:05:0a:d4:a1:e1:1d:3e:c4:bc:5c:
                    a8:70:db:e0:47:cb:52:fb:6a:a3:ea:68:36:f4:ac:
                    83:dd:3f:79:f2:3f:1e:52:e2:38:61:5b:94:fd:bb:
                    7e:9e:38:a3:ec:53:21:c8:e0:54:8b:d7:b6:f2:e6:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:4C:64:44:D9:09:FF:D7:61:EB:2A:2D:1F:BC:04:6A:1E:15:E3
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:47:e0:d6:cd:9b:05:85:fc:56:38:f4:bc:81:19:5a:c7:92:
         10:30:a8:d2:b8:d5:82:54:7a:24:60:0a:c3:63:1a:4c:f0:bc:
         f1:51:3a:8b:de:e9:e8:6b:f6:f4:4a:57:2d:f3:a0:77:1a:09:
         1f:0d:55:90:8f:96:7e:9f:69:be:9d:59:20:86:04:24:22:b5:
         fe:20:f2:07:f9:e3:27:57:df:06:5f:f3:4f:3a:1c:0e:ac:44:
         39:68:03:b2:f8:e6:62:ab:54:56:3b:f3:7d:ff:bc:d4:ef:85:
         e9:1c:90:ae:d7:6b:ac:ae:5d:c5:e5:c5:62:8f:b0:6b:f0:42:
         d6:16:03:0f:98:3c:f1:c9:01:8d:75:9b:d1:41:bf:9f:7f:b8:
         69:91:97:53:06:fd:8e:c1:95:5b:f6:1f:f6:f4:a2:8a:69:03:
         22:43:09:80:cd:4d:8f:85:6d:b8:b0:cc:fa:e3:44:bd:83:c7:
         65:a9:31:fc:9a:58:e5:11:1d:64:fd:ac:23:eb:80:ae:92:ff:
         9d:8c:85:95:95:b2:d0:f3:63:05:a2:e7:c0:a4:da:ac:55:81:
         12:4d:a7:76:13:d0:f4:6f:91:1c:14:a7:d5:2f:d7:48:39:e1:
         91:6b:f8:49:09:72:fe:cc:62:7e:50:83:97:04:bc:72:91:c0:
         92:07:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:21 2025 by rpki-client