Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
File:                     6BF06690D18111EE9F4F1C6BC4F9AE02.roa (raw, json)
Hash identifier:          /VebVtB2gpNWgw6ZNvTnR7uVpqvqNucFCcPHuD6Y3mY=
Subject key identifier:   C0:EB:6A:A6:CA:5C:CF:E7:1B:53:E0:00:5F:E0:D0:E4:A2:22:B6:99
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2869
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:53:38 +0000
ROA not before:           Sat 26 Jul 2025 15:53:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136557
IP address blocks:        2402:9e80:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10345 (0x2869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884fa01-21d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:19:fe:3f:32:26:24:fb:7f:3a:80:d9:3d:
                    58:34:d3:da:11:a7:c9:23:86:8d:45:12:c3:df:c4:
                    bd:e3:be:8e:18:6d:9a:9d:f1:37:98:96:75:9b:e6:
                    25:4f:93:2e:04:0f:74:c9:04:7b:1f:9c:4b:c2:a1:
                    e0:d8:6c:07:a0:4a:eb:35:a7:e7:3d:ec:b8:a0:fb:
                    ab:e0:82:8c:a1:ba:f6:75:31:26:9e:7c:04:b1:0a:
                    50:64:48:e1:c2:63:45:16:20:09:0a:72:f4:82:04:
                    b1:81:be:62:0b:43:f7:37:5a:b1:03:28:f3:50:b4:
                    5e:19:2a:35:12:34:bc:7c:f7:45:c4:aa:46:bb:54:
                    bd:50:a1:aa:5e:eb:29:56:e9:2e:b1:e7:09:5a:7e:
                    14:86:61:8d:4a:4c:2c:9a:4f:fc:23:79:dd:1d:7c:
                    55:14:08:b1:72:53:29:78:85:e3:96:8a:21:2a:34:
                    15:be:22:ed:30:cc:3a:af:42:57:ba:6b:c1:d1:a6:
                    d8:47:e7:2c:9c:8a:b4:d6:ff:ae:fd:94:de:42:e1:
                    73:7e:4a:77:0e:c9:9b:c1:44:97:ae:21:ee:87:d5:
                    72:aa:57:a6:4f:73:9d:66:29:f1:74:25:bd:25:1e:
                    72:8a:f8:1a:35:9b:5b:bf:53:0a:2c:0a:74:d0:bc:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:6A:A6:CA:5C:CF:E7:1B:53:E0:00:5F:E0:D0:E4:A2:22:B6:99
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:56:0d:6b:b4:c4:64:0c:c8:a1:21:70:f8:cc:52:5c:f1:68:
         68:f9:d6:97:af:be:b5:6e:d4:99:34:ff:32:c9:62:86:63:e3:
         ff:7f:8e:84:97:a3:0d:4a:59:31:c5:f4:9e:05:33:c4:9f:f6:
         78:f7:60:7b:5a:e9:04:29:a3:2d:59:89:78:37:20:e8:61:68:
         c0:3a:d1:53:7a:09:c8:f1:a5:1a:d0:b6:77:83:85:45:61:4c:
         4e:2c:99:4b:91:08:5c:4b:81:4e:86:30:7c:22:c3:c6:11:52:
         10:f3:25:5d:c5:3f:6a:02:78:73:59:63:0a:e4:39:ce:43:bb:
         8f:2d:a4:2a:98:42:aa:af:f7:28:f2:56:b0:ca:38:e7:cc:35:
         aa:51:61:85:a6:66:38:58:54:73:de:c9:fc:0d:eb:8b:4c:3a:
         a0:d1:c1:66:9d:98:14:22:81:22:c9:46:b6:22:80:87:f8:d8:
         f3:ed:9c:1c:81:e1:6e:e7:7f:a9:43:83:87:73:db:92:91:55:
         13:a3:c9:f7:1e:67:25:e3:41:b5:ec:90:82:24:d2:b5:a8:ec:
         2a:f5:50:5f:c0:39:48:2d:e3:80:4c:f3:c5:0e:31:30:18:10:
         05:52:75:0c:db:f5:3a:0e:55:f3:18:b0:07:54:a9:aa:da:6d:
         6b:c6:98:49
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICKGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg0ZmEwMS0yMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6A8Z/j8yJiT7fzqA2T1YNNPaEafJI4aNRRLD38S9476OGG2anfE3mJZ1m+Yl
T5MuBA90yQR7H5xLwqHg2GwHoErrNafnPey4oPur4IKMobr2dTEmnnwEsQpQZEjh
wmNFFiAJCnL0ggSxgb5iC0P3N1qxAyjzULReGSo1EjS8fPdFxKpGu1S9UKGqXusp
VukusecJWn4UhmGNSkwsmk/8I3ndHXxVFAixclMpeIXjloohKjQVviLtMMw6r0JX
umvB0abYR+csnIq01v+u/ZTeQuFzfkp3DsmbwUSXriHuh9VyqlemT3OdZinxdCW9
JR5yivgaNZtbv1MKLAp00LwKGQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMDraqbK
XM/nG1PgAF/g0OSiIraZMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNkJGMDY2OTBE
MTgxMTFFRTlGNEYxQzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAp6AAAYwDQYJKoZIhvcNAQELBQADggEBABdWDWu0xGQM
yKEhcPjMUlzxaGj51pevvrVu1Jk0/zLJYoZj4/9/joSXow1KWTHF9J4FM8Sf9nj3
YHta6QQpoy1ZiXg3IOhhaMA60VN6CcjxpRrQtneDhUVhTE4smUuRCFxLgU6GMHwi
w8YRUhDzJV3FP2oCeHNZYwrkOc5Du48tpCqYQqqv9yjyVrDKOOfMNapRYYWmZjhY
VHPeyfwN64tMOqDRwWadmBQigSLJRrYigIf42PPtnByB4W7nf6lDg4dz25KRVROj
yfceZyXjQbXskIIk0rWo7Cr1UF/AOUgt44BM88UOMTAYEAVSdQzb9ToOVfMYsAdU
qarabWvGmEk=
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:00 2025 by rpki-client