Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
File:                     350965D2992511EC94DB646EC4F9AE02.roa (raw, json)
Hash identifier:          WTyE6rqSY4kQszGX6OaOQtHFnpElpKKF9/fDHZfzs04=
Subject key identifier:   24:43:C6:EC:C9:39:A6:87:34:D0:08:D8:FD:EC:2E:A7:73:26:06:9A
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2886
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:54:06 +0000
ROA not before:           Sat 26 Jul 2025 15:54:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149500
IP address blocks:        2402:9e80:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10374 (0x2886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884fa1e-9719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f6:b9:67:51:54:2f:6a:c0:05:1d:50:a9:55:
                    6e:96:41:8e:b0:d3:89:af:40:1c:a1:aa:0d:68:c0:
                    39:d3:24:18:63:23:a3:33:76:4f:91:0c:35:39:75:
                    46:7b:25:da:7c:cd:22:f1:de:1f:b6:b4:3a:fd:1e:
                    01:0c:c7:b6:33:14:01:9d:36:2e:de:df:29:2d:4a:
                    46:5b:98:2e:71:61:7b:57:35:26:0a:1f:55:8e:61:
                    c6:45:11:e4:f5:31:d4:cd:56:83:1a:ad:56:e1:ca:
                    fb:23:f7:18:de:ed:ca:5b:ae:b4:33:73:c3:11:c2:
                    7e:dc:ca:e8:1f:d1:a0:b5:18:61:6d:42:8a:58:87:
                    e4:d5:62:15:9a:9b:68:16:fb:9f:59:d5:83:3f:f8:
                    9e:93:8e:36:8f:89:97:fb:5f:88:6c:fc:07:79:73:
                    2e:eb:27:7f:1d:53:05:7e:89:ed:25:2a:fe:99:db:
                    5b:bf:a6:1e:c1:00:72:c8:dc:cf:6e:c0:f6:41:e2:
                    18:76:88:83:c0:56:5a:ce:54:55:d7:b9:ab:56:5b:
                    7b:51:1d:37:82:99:0d:7b:8f:59:83:d7:06:06:ec:
                    28:dc:9b:f4:6d:63:c0:63:ac:4e:f0:cc:07:10:2f:
                    8b:d5:24:a8:0c:9a:a5:f5:3a:c8:c7:1b:4e:d6:06:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:43:C6:EC:C9:39:A6:87:34:D0:08:D8:FD:EC:2E:A7:73:26:06:9A
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:22:8f:e7:17:56:14:95:58:fd:68:a8:b4:c8:d8:0e:0e:59:
         f9:f1:28:a6:eb:1a:93:a6:1f:31:be:e7:b9:32:e3:41:58:9e:
         9a:b2:b2:40:00:24:dc:fc:96:69:cc:8a:dd:59:62:70:82:63:
         e9:20:c4:ee:52:82:56:22:05:81:f6:29:42:fa:f2:ad:0a:d7:
         bc:40:ca:b0:92:f2:fb:ce:2f:a1:98:8e:8f:19:ad:67:2d:2e:
         e6:78:b0:05:23:f1:78:bb:ed:f7:a8:9a:9d:1b:1a:d3:6c:23:
         dc:99:ff:65:d4:83:7d:26:21:84:11:f2:82:97:27:2f:d6:1b:
         e1:9a:ba:39:f7:40:88:0a:aa:fa:28:43:81:ca:b5:d2:4c:69:
         a1:08:af:6b:b8:d6:05:10:5f:90:24:87:fe:f1:39:fd:ea:7e:
         23:56:cd:6f:6b:72:53:34:ab:05:71:70:aa:72:af:7c:ba:48:
         0d:b2:42:13:61:c9:5c:b0:07:c8:5d:97:93:23:78:58:f0:1f:
         ef:71:8a:b6:a5:3e:23:06:49:3e:a3:74:09:af:c3:29:65:c0:
         0b:82:2a:ea:84:fc:5c:7f:5b:9f:eb:47:e2:52:b8:24:ff:15:
         d0:b5:3d:dc:89:5b:a9:c5:8d:28:aa:13:17:b7:00:61:a6:85:
         9b:50:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:09 2025 by rpki-client