Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa
File:                     BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (raw, json)
Hash identifier:          3YeMlkcKDR/G7e8HpdLpzhvB3RsMdGgeM4Qv8rsxSYk=
Subject key identifier:   CB:78:91:8B:47:06:B6:BC:DC:AF:03:A5:E0:42:65:8F:7C:B4:9A:FB
Certificate issuer:       /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Certificate serial:       A0
Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa
Signing time:             Wed 09 Jul 2025 07:13:48 +0000
ROA not before:           Wed 09 Jul 2025 07:13:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153053
IP address blocks:        2401:ae60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
        Validity
            Not Before: Jul  9 07:13:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686e16ab-1989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:54:c0:e8:51:76:65:2e:e8:2f:94:85:91:
                    b5:a3:56:b2:a7:54:7a:13:89:26:2a:e6:6d:48:d2:
                    73:39:de:b8:64:3b:f1:21:7b:98:8c:e0:9b:37:b3:
                    24:b5:06:d2:b1:71:58:43:65:e2:3e:61:d7:4b:01:
                    7c:df:e8:f4:75:da:d2:f6:fc:35:d8:08:f0:03:bc:
                    70:44:21:7c:22:c6:33:9c:b8:6d:40:c0:c5:ed:18:
                    e2:93:0c:d4:fb:58:2a:0f:8f:44:49:ba:3a:d6:40:
                    49:79:69:11:79:1f:3a:6e:f5:37:cf:92:00:3b:85:
                    5e:15:0d:e1:40:f4:9d:7f:8b:14:cb:0b:9d:a0:b6:
                    9c:c3:b3:81:fd:ed:90:c6:d3:f3:aa:3f:0c:d6:4d:
                    2f:cf:fa:69:5b:f4:a2:32:a2:17:aa:4a:c4:64:3a:
                    1e:90:f8:f7:94:14:fe:0b:dd:8f:5a:88:2c:49:ab:
                    08:c2:eb:29:ca:b2:39:55:ca:e4:35:14:9a:9f:e1:
                    0f:1f:41:59:a1:b9:ee:40:74:84:0f:14:f9:76:8b:
                    a4:42:81:1d:ec:85:4a:54:ce:13:a3:7d:9e:3b:fc:
                    d5:24:f6:09:4b:4f:cf:57:41:31:d3:a7:df:13:a6:
                    16:9f:27:b9:7e:26:52:3e:4b:f5:2b:dd:ad:5d:63:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:91:8B:47:06:B6:BC:DC:AF:03:A5:E0:42:65:8F:7C:B4:9A:FB
            X509v3 Authority Key Identifier:
                keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ae60::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:57:8a:e0:7a:d2:b5:42:fd:d0:6b:ea:a5:17:2a:7c:4d:54:
         ae:77:a6:ca:d5:9b:4a:12:c7:f0:35:25:d3:94:df:e3:81:86:
         1c:b8:a1:56:2f:ec:90:d0:b8:ec:75:8c:81:a8:cb:8a:33:73:
         cc:f3:bd:4b:6d:e3:7f:ac:81:e5:4b:3e:a0:a1:e6:a4:10:8c:
         85:73:c7:42:03:a8:ed:08:94:b6:df:cd:c7:e8:cd:8f:30:9b:
         d9:bf:99:1c:72:32:ef:f1:91:e0:55:57:62:d5:b4:49:56:06:
         e5:1b:21:f2:73:77:e6:06:8f:34:53:91:53:40:23:46:bd:08:
         9e:72:f0:c6:28:ef:11:0b:75:d7:4f:1e:96:54:d6:ec:3b:5c:
         09:3c:4c:b8:c6:5e:cf:f3:02:07:67:45:ab:71:d1:53:a5:c1:
         5d:cb:68:37:5d:52:37:90:20:da:e6:7b:4c:bb:13:71:9b:56:
         36:aa:0d:48:24:33:f4:65:bb:f1:61:e0:dc:30:d5:eb:16:59:
         f2:c7:cc:b6:c9:f5:10:72:8a:df:95:01:3a:5f:9e:c7:54:83:
         16:79:50:5b:85:c3:6a:7a:30:25:1a:cb:51:87:51:fd:7d:45:
         bb:69:fb:2a:b4:03:55:70:c5:37:d5:41:77:c8:f0:50:16:0a:
         f2:1c:eb:3f
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzOTExMTAvBgNVBAUTKDUzRTdDRTk0MzUzM0Y4RDNDMDU2NDlGMjk0NjgyQTI2
RjgxNEYxNUYwHhcNMjUwNzA5MDcxMzQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODZlMTZhYi0xOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRpUwOhRdmUu6C+UhZG1o1ayp1R6E4kmKuZtSNJzOd64ZDvxIXuYjOCbN7Mk
tQbSsXFYQ2XiPmHXSwF83+j0ddrS9vw12AjwA7xwRCF8IsYznLhtQMDF7RjikwzU
+1gqD49ESbo61kBJeWkReR86bvU3z5IAO4VeFQ3hQPSdf4sUywudoLacw7OB/e2Q
xtPzqj8M1k0vz/ppW/SiMqIXqkrEZDoekPj3lBT+C92PWogsSasIwuspyrI5Vcrk
NRSan+EPH0FZobnuQHSEDxT5doukQoEd7IVKVM4To32eO/zVJPYJS0/PV0Ex06ff
E6YWnye5fiZSPkv1K92tXWMKwwIDAQABo4ICljCCApIwHQYDVR0OBBYEFMt4kYtH
Bra83K8DpeBCZY98tJr7MB8GA1UdIwQYMBaAFFPnzpQ1M/jTwFZJ8pRoKib4FPFf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS8wMTlGRjE0RTcw
QUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1OUEFWa255bEdncUp2Z1U4
VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThWOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQzOTEvMDE5RkYxNEU3MEFFMTFFRkE4NDhCMDY4QzRGOUFFMDIvQkMyMTNFM0M3
MEFGMTFFRjlDOUIyQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAa5gMA0GCSqGSIb3DQEBCwUAA4IBAQAgV4rgetK1Qv3Q
a+qlFyp8TVSud6bK1ZtKEsfwNSXTlN/jgYYcuKFWL+yQ0LjsdYyBqMuKM3PM871L
beN/rIHlSz6goeakEIyFc8dCA6jtCJS2383H6M2PMJvZv5kccjLv8ZHgVVdi1bRJ
VgblGyHyc3fmBo80U5FTQCNGvQiecvDGKO8RC3XXTx6WVNbsO1wJPEy4xl7P8wIH
Z0WrcdFTpcFdy2g3XVI3kCDa5ntMuxNxm1Y2qg1IJDP0ZbvxYeDcMNXrFlnyx8y2
yfUQcorflQE6X57HVIMWeVBbhcNqejAlGstRh1H9fUW7afsqtANVcMU31UF3yPBQ
FgryHOs/
-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:40 2025 by rpki-client