Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/360880DAACC311EAB7256C55C4F9AE02.roa
File:                     360880DAACC311EAB7256C55C4F9AE02.roa (raw, json)
Hash identifier:          KJ1ieShxvJs7gtOWoATO3HHi/9GVv+NZW0fG46TDOMw=
Subject key identifier:   FB:1F:9B:96:DA:2B:91:3B:82:D2:1D:94:1A:71:EC:B6:2E:41:F3:34
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2878
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/360880DAACC311EAB7256C55C4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:53:50 +0000
ROA not before:           Sat 26 Jul 2025 15:53:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139073
IP address blocks:        2402:e380:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10360 (0x2878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884fa0e-9de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:c1:81:da:ec:95:49:df:a1:f8:0f:6d:6b:
                    47:67:e2:3d:12:e0:5c:2d:02:24:3d:be:91:2a:60:
                    af:fc:08:c3:9e:4e:3c:fc:55:0d:a4:b5:e2:82:35:
                    a3:9d:c0:ea:26:a4:d6:e3:47:50:55:e9:0e:0f:b0:
                    13:2d:b0:3b:77:34:ac:65:0b:b7:5c:20:42:c7:03:
                    e5:20:6f:39:d6:80:67:e2:b3:b6:af:18:6f:7a:50:
                    3b:a1:64:74:ce:05:26:6d:3b:c6:05:99:06:cb:46:
                    ba:f0:74:c5:b4:73:41:ce:ca:4c:d6:e9:a2:41:07:
                    5d:88:d9:8b:4b:19:8d:9e:73:38:7f:dd:58:4d:e6:
                    ec:99:d5:d9:5c:e9:08:72:38:04:6c:ab:f4:fd:ec:
                    00:22:f5:e8:61:a0:30:ee:04:4d:5f:a8:77:3f:02:
                    18:3f:0e:59:74:43:f4:88:82:e1:3e:f2:07:ca:c9:
                    be:51:86:f7:9f:cb:a0:9b:45:5b:6b:f4:cb:a2:0a:
                    dd:73:29:86:f1:e5:3a:01:5c:dc:b6:ef:28:e4:a7:
                    4b:1b:56:8a:95:d0:82:2d:fb:77:59:0c:b1:3f:d2:
                    e4:05:84:11:c7:a3:e1:b2:ab:fb:de:c8:a2:e3:7f:
                    0d:c7:3b:ac:0e:c2:9c:32:c9:67:c0:bc:b7:a3:2b:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:9B:96:DA:2B:91:3B:82:D2:1D:94:1A:71:EC:B6:2E:41:F3:34
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/360880DAACC311EAB7256C55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:c3:74:1c:df:1d:dc:12:69:4e:17:26:ae:06:1b:96:dd:
         f5:0a:52:8f:eb:e7:2d:e0:81:9f:f8:f5:a7:bf:cb:58:a1:be:
         eb:9e:b4:81:6b:fa:28:38:96:88:10:b5:5f:97:1a:36:1b:51:
         3c:b5:61:ee:49:92:ae:7c:06:22:e2:de:12:12:a5:5b:b9:7d:
         4e:ad:d5:2b:64:db:f4:0b:9e:16:30:b1:5a:f0:43:2c:1c:dc:
         57:15:4e:4b:de:03:84:05:a5:a6:45:0a:76:c4:cf:d0:80:d5:
         88:e1:5f:47:49:85:d1:b8:e3:30:00:d1:79:67:f0:e2:8a:4d:
         be:00:dd:ec:e2:6f:5b:20:1a:8c:d6:3f:d8:45:51:7e:ef:7f:
         9e:b5:52:67:57:eb:97:32:60:cc:7b:73:6b:80:c7:7d:b3:6f:
         d8:f9:f6:36:cd:23:63:1b:66:83:64:c3:cc:d1:eb:c1:76:3b:
         99:01:9b:d9:fa:be:e0:55:3a:61:59:43:ec:66:6f:dd:b4:f3:
         a6:84:80:de:9f:b6:15:55:a0:18:33:c5:c9:55:db:1b:c6:f4:
         ef:f9:52:d8:f9:65:12:25:5f:c3:3e:65:8e:c3:eb:af:97:89:
         50:93:7b:74:11:80:34:39:e0:e4:16:ca:e9:66:b0:97:5d:e0:
         28:2d:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:48 2025 by rpki-client