Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
File:                     EB263BE4DBF011EBA6E54586C4F9AE02.roa (raw, json)
Hash identifier:          M40kD4TonG66uQYOaNCDeRUYMjqNRbMx31D02gr8fIs=
Subject key identifier:   D5:0F:19:7C:3D:2D:48:31:52:14:5F:64:3A:75:02:15:2B:A4:D3:15
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2882
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:54:01 +0000
ROA not before:           Sat 26 Jul 2025 15:54:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142561
IP address blocks:        2402:9e80:200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10370 (0x2882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884fa18-54ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:3b:99:c6:ef:0f:48:06:dc:9d:51:27:21:
                    1f:6f:2e:9c:04:6b:44:3d:a8:bf:6e:80:47:45:c6:
                    e8:8a:77:56:17:88:a0:db:92:42:7c:7d:13:55:c5:
                    a0:a1:74:57:bf:42:a4:7b:ac:3a:1e:eb:f8:58:5d:
                    3f:05:47:c4:c2:6e:e4:88:90:a8:5f:9f:ee:2b:00:
                    8e:c8:26:ec:ee:d6:96:9d:14:62:37:69:44:46:94:
                    5e:83:df:2b:42:c0:52:e6:a3:cc:c1:91:26:76:c5:
                    68:42:a7:c0:b0:d7:35:38:45:02:3c:3c:f0:39:ae:
                    68:94:a1:74:af:cc:3b:0d:5c:1e:c6:10:a0:57:6a:
                    4b:90:22:90:c8:e6:60:59:de:f9:95:60:32:e8:35:
                    2b:e2:3d:e9:b9:31:74:bc:f3:30:78:6d:c4:62:bf:
                    23:2a:15:df:4f:f3:61:97:1f:0c:e4:a2:c0:1e:73:
                    70:f7:21:cc:33:55:33:ba:27:52:49:0d:c8:a6:1f:
                    09:07:40:75:9b:dc:0e:df:f3:44:d9:67:b7:22:cd:
                    ce:d3:8b:2e:75:85:86:9f:67:0a:26:df:e4:39:78:
                    c2:fc:24:e6:88:a8:46:76:37:9d:52:88:3f:33:0c:
                    c7:70:d2:03:e6:86:4f:64:bd:db:30:6c:78:00:e5:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0F:19:7C:3D:2D:48:31:52:14:5F:64:3A:75:02:15:2B:A4:D3:15
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:5b:c4:39:47:cc:b3:38:8a:a7:7e:e7:d0:c7:06:9f:d1:
         7a:52:fd:47:f8:b7:8f:d9:8e:7e:c3:0f:ec:92:21:3c:b5:24:
         2c:c5:14:d3:38:64:b5:25:59:45:46:0d:db:5c:aa:63:49:ca:
         dc:9c:8c:a4:b6:d0:08:3c:78:f2:58:8b:d5:f6:c3:ee:3e:ee:
         80:aa:d9:13:52:33:8b:37:0e:7d:36:f4:dd:f9:22:b1:e2:cb:
         77:1d:9c:ea:b9:5b:da:85:95:7d:3d:c6:2b:81:53:a6:ba:8c:
         9a:e4:05:a7:5f:c4:0a:10:b6:09:b1:85:24:01:ce:9b:90:2e:
         2d:a7:2e:2c:8c:76:e9:69:d8:00:eb:76:6e:1e:e4:bc:e8:78:
         60:09:13:24:98:91:51:4f:c3:d8:e0:3c:5f:ee:2e:47:93:d7:
         5f:87:5f:36:24:a8:82:f0:40:67:6a:35:f2:fe:0e:2b:f2:05:
         9f:af:e3:99:58:6f:a4:e1:84:5a:18:87:97:ee:a8:79:70:c4:
         e2:4f:e9:c7:01:36:30:05:4a:42:fa:22:57:e3:9f:1d:2d:54:
         64:c6:8a:ed:ac:11:10:cd:9c:dc:c2:71:c9:fa:0a:cc:08:34:
         c9:45:ad:96:28:4f:d9:ae:7d:00:8f:4b:b3:9d:1c:e6:e1:7a:
         58:e2:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:09 2025 by rpki-client