Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
File:                     CE24A9DE739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          ZJiErtj7JD3f7pzyajmZVPN6isJjBUZ76oGPIUUVwBY=
Subject key identifier:   F5:54:8F:95:4F:EB:8F:AC:8D:1C:6A:52:37:72:8E:28:F5:03:34:6D
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0154
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 05:42:50 +0000
ROA not before:           Fri 01 Aug 2025 05:42:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7718
IP address blocks:        2401:3900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug  1 05:42:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688c53da-4360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:73:9a:23:f5:79:9b:df:e4:02:bd:58:65:
                    1c:71:2e:96:74:4f:5d:eb:b8:e3:22:35:55:01:91:
                    59:e5:03:b1:31:48:cc:78:de:3a:86:e2:65:98:3e:
                    f7:d3:7b:53:b3:7e:4e:1c:c9:bb:3f:bd:e4:82:da:
                    14:11:b4:be:b8:77:6d:55:2b:37:f3:f0:b9:9d:96:
                    65:4c:1a:76:b8:4e:f3:df:e7:2b:a7:ed:a4:77:ed:
                    c8:7e:d4:fd:9c:ad:ad:06:50:f6:be:95:cd:b4:47:
                    b0:43:9b:13:5a:31:94:8e:af:32:52:c4:40:8a:a1:
                    65:7b:ed:a1:09:b6:8d:d4:21:b2:66:6d:32:94:ca:
                    d1:e7:a1:a7:d0:86:92:ec:05:29:a8:80:21:8b:ff:
                    14:1b:99:f1:99:69:62:1a:87:69:db:89:66:6a:9e:
                    ae:e3:50:ae:88:bb:59:5e:9f:58:e2:dc:ac:01:53:
                    60:9c:ec:44:43:86:9d:a2:94:b5:07:4f:7e:fc:87:
                    90:20:82:3d:66:f1:ef:a6:e5:7d:4c:05:d8:8e:41:
                    2a:c7:bc:0a:fd:6b:3c:ec:f0:00:2c:1a:d1:9c:10:
                    68:ed:8d:ce:61:52:08:77:00:75:6a:07:e2:24:03:
                    1e:e7:39:63:ca:e7:81:b1:b7:ef:f8:5f:dd:e5:9d:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:8F:95:4F:EB:8F:AC:8D:1C:6A:52:37:72:8E:28:F5:03:34:6D
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:d5:be:49:91:30:1b:21:98:f5:3a:1c:0c:e5:bc:90:2d:
         dd:f0:75:ae:96:8e:de:d8:02:af:23:98:20:18:ee:6d:79:4c:
         fc:e3:2b:fe:3d:de:14:61:d5:97:42:d3:c5:d9:22:26:05:20:
         94:5a:23:f1:79:2d:1d:dd:f8:6e:28:94:f7:75:00:e6:c4:fc:
         7f:6c:74:5a:a9:cd:32:f1:3c:63:98:5c:7a:f4:66:ad:47:84:
         7a:fb:67:81:72:55:77:c9:45:c1:38:d0:28:74:51:c5:42:53:
         3b:a2:eb:fd:0f:51:15:db:2a:8e:32:02:d6:0d:5c:7e:4c:f1:
         ae:b9:50:cf:cc:9e:84:a7:f8:c2:78:5e:83:ec:7d:b2:49:92:
         fd:ca:6d:f2:8b:19:30:79:35:e0:b7:bc:f9:e6:ce:5e:05:61:
         48:b7:f1:9c:e0:8c:c6:b2:90:eb:aa:93:3b:fd:c4:cc:2f:37:
         bd:72:a4:81:2b:14:e3:2a:77:b5:0a:38:74:e6:cd:c5:d6:d3:
         25:e6:a8:72:bc:4b:8f:41:11:ae:a2:d0:c5:9e:06:fd:1e:ac:
         7d:01:f6:8e:0c:77:73:3f:8e:fe:5c:23:3b:20:5e:28:b4:3a:
         8e:51:a3:9e:2a:f0:43:d5:c8:44:a4:ce:93:f7:57:62:62:b2:
         6a:f7:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:06 2025 by rpki-client