Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
File:                     E8780C5EAC8011E79D9EAC60C4F9AE02.roa (raw, json)
Hash identifier:          2gFzBsEhEhcTbqin7FXKA5BqnV1mEmGbBayottd+FiM=
Subject key identifier:   AA:D5:DD:70:E2:DD:85:EC:E7:7F:92:FA:B9:96:CD:1D:3A:82:3C:F9
Certificate issuer:       /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial:       18AC
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 16:34:52 +0000
ROA not before:           Tue 04 Nov 2025 16:34:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134410
IP address blocks:        2001:df2:bb00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
                          rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6316 (0x18ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
        Validity
            Not Before: Nov  4 16:34:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690a2b2b-752e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:7e:f0:5a:06:91:ba:17:9a:54:07:ee:78:
                    6e:76:8c:c3:cf:1b:b4:7e:5a:85:d6:90:78:fc:61:
                    fa:cc:3e:77:fe:af:ea:99:ef:4f:fb:b5:0d:48:df:
                    5e:84:8d:bb:3a:8b:75:c0:0f:4b:05:00:94:b8:f7:
                    37:29:a4:5a:d3:5a:77:69:b7:be:20:48:11:dd:5e:
                    82:e1:4c:01:1e:cf:18:a4:94:c4:19:e2:fd:12:df:
                    16:a4:64:4f:03:0f:6e:96:84:ff:5d:c4:7f:7c:7c:
                    37:fd:a7:cc:4f:4a:20:82:39:0a:cd:ee:2d:bb:78:
                    ab:46:db:09:6d:ff:d0:1d:57:55:7b:54:03:32:2e:
                    95:a7:09:87:b0:50:5c:e7:ab:a5:ed:b9:cf:eb:8c:
                    09:86:88:8d:5b:c3:86:34:8c:6a:d5:e1:e2:b1:ef:
                    d3:68:c6:f3:8d:46:d3:21:b0:52:b5:91:94:fa:e2:
                    09:a8:b0:b5:9e:84:a5:69:1a:99:d2:bc:76:46:2b:
                    e6:f9:10:de:7e:e7:9b:89:8e:f6:76:73:25:24:f5:
                    09:3b:73:c0:03:2d:a4:33:3c:a1:86:7f:80:f2:59:
                    67:9d:36:d7:b4:da:50:c9:f1:ab:05:2e:b0:9e:00:
                    d4:6a:08:81:3e:3a:bc:58:7d:f0:e8:46:d8:e1:1d:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D5:DD:70:E2:DD:85:EC:E7:7F:92:FA:B9:96:CD:1D:3A:82:3C:F9
            X509v3 Authority Key Identifier:
                keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:bb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:44:a2:35:1f:7d:73:55:3c:11:25:e3:44:12:c7:7c:3a:f5:
         12:fe:7d:fe:43:c9:2e:b6:fe:01:45:05:87:22:a9:95:26:73:
         76:77:9f:79:30:74:46:13:95:91:f2:fc:6f:20:a1:7d:20:9d:
         25:e4:31:2e:3f:51:ca:68:a7:39:1b:38:2c:16:b1:a5:6f:24:
         5c:fc:8c:ae:12:18:d4:b3:bc:ab:38:9c:8b:70:e2:86:a9:30:
         64:5f:99:82:23:fc:93:01:84:14:7c:83:81:4c:c3:31:9a:05:
         1d:1d:fc:05:9f:2a:c2:fc:13:86:2f:77:6f:1a:d7:5f:ec:e9:
         74:1a:8e:62:c0:e0:80:8c:58:46:e6:18:5f:91:07:5a:f8:42:
         c7:25:20:67:a7:15:be:f4:d4:d7:3e:a8:6b:f8:d3:71:eb:2f:
         c4:d7:66:fc:51:25:24:15:f4:f8:75:56:bd:8e:d6:0f:47:15:
         50:65:65:8d:2c:a4:65:36:6d:28:e6:46:fb:22:19:3e:d3:14:
         bf:88:57:68:46:b8:7a:da:2a:3d:c8:8a:00:63:d6:11:ed:09:
         36:37:df:66:03:36:f3:b8:60:38:27:57:f8:36:73:69:be:85:
         a6:6b:4e:2c:02:6c:ea:d5:8d:d4:f6:0b:41:e6:70:6a:f1:98:
         b8:77:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:37 2025 by rpki-client