Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/6A4741C66BA211F09CAB7033C4F9AE02.roa
File:                     6A4741C66BA211F09CAB7033C4F9AE02.roa (raw, json)
Hash identifier:          qt3p4ti+HgUhcYfOioi1W0SuWYsI9xRszoHqIminWy8=
Subject key identifier:   93:21:27:A8:3D:40:D1:08:D5:9A:2A:F7:74:4E:9B:DB:63:80:00:42
Certificate issuer:       /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Certificate serial:       0670
Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/6A4741C66BA211F09CAB7033C4F9AE02.roa
Signing time:             Mon 28 Jul 2025 11:02:56 +0000
ROA not before:           Mon 28 Jul 2025 11:02:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132707
IP address blocks:        2407:47c0:2000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl
                          rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C449, serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
        Validity
            Not Before: Jul 28 11:02:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=688758e0-ec28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:f5:1f:f9:ad:44:6c:27:77:f0:1b:b9:aa:
                    9b:6c:48:4d:2d:58:b7:bc:97:73:fe:50:7b:96:e3:
                    f8:c8:18:74:ba:4e:cd:bf:a3:73:83:ba:f6:fb:b0:
                    9b:2c:6b:ac:65:e0:b7:3c:e2:8f:42:95:48:50:19:
                    10:11:ac:0f:57:f1:e6:4e:13:a5:f0:c9:53:fc:5d:
                    61:7e:1f:d2:ca:31:eb:33:c5:97:26:14:d5:28:5a:
                    80:7a:df:f6:2e:55:15:92:16:bc:cd:62:21:89:61:
                    a2:e9:85:67:13:3a:2d:83:c7:72:3e:47:c1:bd:4c:
                    55:8d:43:74:7b:aa:18:e3:a4:cf:69:e5:db:44:50:
                    ea:73:ea:ba:0f:cf:c6:8a:7d:18:48:7b:98:07:67:
                    43:63:35:03:18:ce:f3:01:51:55:00:e5:c6:1a:58:
                    19:13:cf:2a:45:9b:d4:72:61:d6:9b:c0:e1:bf:10:
                    c8:25:25:aa:06:6a:69:d0:68:40:74:6c:96:ef:04:
                    2a:a7:5f:ed:c9:38:22:8a:ff:58:72:02:49:82:97:
                    69:b0:69:f9:1c:3b:03:2a:b0:7b:e0:27:9b:44:6d:
                    10:cd:3a:a8:7d:70:d8:fa:aa:6f:cd:56:12:27:44:
                    5a:94:a3:9b:f1:55:a6:79:1c:ed:87:48:b3:9e:9f:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:21:27:A8:3D:40:D1:08:D5:9A:2A:F7:74:4E:9B:DB:63:80:00:42
            X509v3 Authority Key Identifier:
                keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/6A4741C66BA211F09CAB7033C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:47c0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:00:76:0f:75:c0:af:f3:db:fe:3e:2a:63:d4:fb:2d:dd:
         56:a3:08:49:ff:9d:eb:57:24:e3:97:9a:f2:30:b2:09:1d:58:
         31:ae:aa:13:a5:4c:e7:05:e2:9a:01:db:39:e0:7b:d4:2e:ff:
         bf:82:ac:bb:12:e5:36:2f:25:26:31:5c:a9:8b:26:eb:98:a0:
         7f:e3:de:29:f3:2f:f2:91:7e:83:79:26:46:78:36:6e:ec:20:
         a7:16:55:17:7e:f7:1c:b8:48:5e:30:10:3f:f4:0b:1c:31:d6:
         14:de:db:af:03:b8:6d:cd:ff:45:50:55:43:7f:ee:fe:6e:9a:
         0f:7c:a4:2f:5c:a1:a1:07:fa:30:57:48:74:3b:41:f0:6e:b0:
         21:b2:f7:21:1e:b1:e8:f9:c7:c5:d3:cc:e8:5d:77:b7:56:08:
         06:ae:f8:be:4d:5e:6c:59:08:fa:a8:a8:53:46:a4:95:2f:b0:
         f4:ae:1c:b0:c0:9d:78:6e:3d:4b:61:dd:32:c3:06:cc:82:b5:
         5e:e2:94:8d:46:d8:f5:e6:42:82:ba:0b:67:66:aa:3f:79:83:
         77:24:37:3a:0a:f0:fc:0c:90:60:d4:e5:af:b7:bb:1e:bb:e6:
         ca:43:95:10:87:5d:10:2e:bb:eb:31:fe:3f:cc:4f:27:4d:a7:
         78:65:5c:a3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM0NDkxMTAvBgNVBAUTKDQ4NEVCRjMzNzUwQjIxQ0FGMDI4RDBDRTIxOUI5NDYx
RDFGQkFBNjYwHhcNMjUwNzI4MTEwMjU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg3NThlMC1lYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxj1H/mtRGwnd/AbuaqbbEhNLVi3vJdz/lB7luP4yBh0uk7Nv6Nzg7r2+7Cb
LGusZeC3POKPQpVIUBkQEawPV/HmThOl8MlT/F1hfh/SyjHrM8WXJhTVKFqAet/2
LlUVkha8zWIhiWGi6YVnEzotg8dyPkfBvUxVjUN0e6oY46TPaeXbRFDqc+q6D8/G
in0YSHuYB2dDYzUDGM7zAVFVAOXGGlgZE88qRZvUcmHWm8DhvxDIJSWqBmpp0GhA
dGyW7wQqp1/tyTgiiv9YcgJJgpdpsGn5HDsDKrB74CebRG0QzTqofXDY+qpvzVYS
J0RalKOb8VWmeRzth0iznp8i2wIDAQABo4IClzCCApMwHQYDVR0OBBYEFJMhJ6g9
QNEI1Zoq93ROm9tjgABCMB8GA1UdIwQYMBaAFEhOvzN1CyHK8CjQziGblGHR+6pm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ0OS81OEVBNDhFQTlE
RDYxMUVCOTJDRjM3MTRDNEY5QUUwMi9TRTZfTTNVTEljcndLTkRPSVp1VVlkSDdx
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NFNl9NM1VMSWNyd0tORE9JWnVVWWRIN3FtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM0NDkvNThFQTQ4RUE5REQ2MTFFQjkyQ0YzNzE0QzRGOUFFMDIvNkE0NzQxQzY2
QkEyMTFGMDlDQUI3MDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQkB0fAIDANBgkqhkiG9w0BAQsFAAOCAQEAWcIAdg91wK/z
2/4+KmPU+y3dVqMISf+d61ck45ea8jCyCR1YMa6qE6VM5wXimgHbOeB71C7/v4Ks
uxLlNi8lJjFcqYsm65igf+PeKfMv8pF+g3kmRng2buwgpxZVF373HLhIXjAQP/QL
HDHWFN7brwO4bc3/RVBVQ3/u/m6aD3ykL1yhoQf6MFdIdDtB8G6wIbL3IR6x6PnH
xdPM6F13t1YIBq74vk1ebFkI+qioU0aklS+w9K4csMCdeG49S2HdMsMGzIK1XuKU
jUbY9eZCgroLZ2aqP3mDdyQ3Ogrw/AyQYNTlr7e7HrvmykOVEIddEC676zH+P8xP
J02neGVcow==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:25:40 2025 by rpki-client