Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
File:                     99AB65EEDA2C11EFAC53882EC4F9AE02.roa (raw, json)
Hash identifier:          LfZGAfyu1X1XJTr/vcwjFbw+uPCbKT4FYiAcrfY1D/8=
Subject key identifier:   AD:13:B2:5F:27:B7:66:3E:D4:B9:D0:2F:B7:D7:54:26:21:83:BC:16
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       60
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
Signing time:             Sat 19 Jul 2025 07:43:20 +0000
ROA not before:           Sat 19 Jul 2025 07:43:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        2401:c2e0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Jul 19 07:43:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687b4c98-eddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:d4:e0:c0:35:3b:92:82:90:22:3d:6f:cc:
                    4f:e2:ae:ca:75:d1:c0:84:2d:d5:36:2f:3c:9c:22:
                    61:ab:e3:37:ca:db:23:04:f9:b9:ae:4f:ab:07:f2:
                    be:80:5b:d0:a3:e6:da:e7:48:ab:f3:07:b8:d1:53:
                    59:b4:f3:a5:a3:e2:4d:a0:8d:66:c8:2e:ac:48:65:
                    74:b8:2b:20:dc:70:3f:c5:92:41:55:18:a9:04:9c:
                    eb:ff:cd:84:c7:b5:8f:d8:92:28:15:33:d3:7d:4f:
                    2f:8d:29:db:76:0e:79:77:89:76:99:21:77:e2:40:
                    68:37:2c:58:82:2d:04:09:67:5d:ee:fa:ae:07:ce:
                    d9:f5:d5:f4:04:66:00:64:b3:8d:9f:eb:27:0a:8b:
                    61:cd:5b:71:7f:31:2f:e9:54:b3:66:14:be:58:27:
                    d6:d6:0e:e3:80:80:b4:36:12:87:f0:03:30:23:79:
                    cc:ee:b4:58:49:90:15:10:9c:cc:93:d3:9e:7a:e2:
                    e1:c8:da:71:be:0a:cc:bc:84:7f:7d:2b:e5:32:f5:
                    90:ca:c0:de:9d:3c:31:9f:f6:3f:4c:b0:3e:98:74:
                    de:fa:e7:37:13:d3:6e:4f:ef:b5:36:1a:df:ec:60:
                    2f:f3:e2:da:4b:a2:95:54:0e:44:4a:b9:c7:8a:e9:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:13:B2:5F:27:B7:66:3E:D4:B9:D0:2F:B7:D7:54:26:21:83:BC:16
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c2e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:a5:f3:69:5d:f5:40:4d:cb:d7:a6:6e:a2:5a:bf:46:11:77:
         a4:67:a9:64:55:04:7d:2f:58:a9:68:8b:5a:28:7d:4d:50:eb:
         51:9d:30:9f:1b:15:d5:b6:ba:c9:62:83:6f:08:0e:36:93:8e:
         e7:49:ab:b6:7a:20:cd:3b:75:bf:72:ef:63:0a:c4:c8:23:e1:
         24:8e:e6:5f:51:4f:cb:ea:9e:ed:85:77:93:17:82:6b:70:0d:
         d6:5d:7a:2c:2d:a6:d2:3e:f0:f8:eb:2f:91:99:c6:0c:be:1a:
         fc:e4:a7:5f:f7:8f:25:72:8e:35:91:a8:8b:d6:b5:f0:f0:10:
         e8:cc:02:ee:1d:0c:33:10:22:3a:a9:54:17:6d:7b:fb:45:e0:
         72:3a:0b:27:1d:3a:cb:13:24:0e:f0:b6:ce:37:6e:8e:ac:65:
         ca:a5:17:0a:9c:15:68:97:55:65:1e:82:dd:e1:74:b7:69:50:
         9d:96:cf:60:ff:9a:33:66:17:2d:4b:92:ec:c0:48:ad:09:f5:
         b6:bc:16:2e:e7:6b:b7:8c:f2:8d:a9:29:9b:57:14:21:87:56:
         91:52:e9:89:3e:81:5a:4d:ea:d9:ca:86:ab:3f:3c:f7:71:63:
         d3:88:05:ae:72:54:83:b2:6d:a2:2c:39:7c:54:31:c3:6b:a7:
         c9:29:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:38 2025 by rpki-client