Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/BE052770702E11F0A0DEEA12C4F9AE02.roa
File:                     BE052770702E11F0A0DEEA12C4F9AE02.roa (raw, json)
Hash identifier:          OHC1Lai90kPZXbPjZNHQeH48NvGag/35uNyXO/kBwSE=
Subject key identifier:   2F:DE:79:51:05:DE:8B:96:ED:C2:9A:9C:A9:58:3A:C4:96:77:A4:DB
Certificate issuer:       /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial:       65
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/BE052770702E11F0A0DEEA12C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 05:57:31 +0000
ROA not before:           Sun 03 Aug 2025 05:57:31 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     146943
IP address blocks:        2001:df4:f0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
                          rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
        Validity
            Not Before: Aug  3 05:57:31 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=688efa4a-47ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:4e:71:50:28:79:a0:0f:16:50:02:03:54:
                    3c:b1:ea:ac:50:40:25:e3:50:f6:e5:36:59:ea:98:
                    e0:23:b7:13:79:b2:9f:51:9b:58:cb:94:9c:d1:dd:
                    d9:a0:0f:b0:a7:00:89:ca:cc:28:33:a3:40:58:12:
                    aa:db:db:aa:a8:42:38:b4:dc:bd:bd:b2:c1:2a:c9:
                    cc:f8:15:c6:09:1e:49:30:8c:e7:d6:12:25:01:20:
                    24:78:4a:ea:f0:b2:cb:2b:9a:b9:04:ea:2b:06:90:
                    dd:f1:38:e7:91:b3:f1:45:c4:1a:4e:98:d6:c0:8a:
                    94:a3:8c:20:ec:f0:92:11:21:54:34:9f:c2:bd:35:
                    e3:f0:27:50:ae:ca:04:d4:62:7c:f4:2e:5c:5d:bb:
                    bd:45:30:43:e7:59:a0:0b:df:a0:27:12:d2:b7:ee:
                    b9:95:e1:aa:30:54:b9:81:94:cf:7a:9c:76:da:90:
                    5f:3a:84:78:51:f3:48:ad:b2:17:cc:ae:46:fb:3f:
                    d3:68:03:fc:4b:21:a7:f9:f6:e7:15:90:01:e8:b6:
                    fc:84:dd:b7:3e:7a:c6:b9:75:64:bd:99:d5:a1:e0:
                    5c:6e:97:80:bb:35:be:fc:a9:e8:9d:e4:96:86:5a:
                    d1:45:c1:81:af:bf:83:4c:8c:00:9f:3e:7b:5a:18:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:79:51:05:DE:8B:96:ED:C2:9A:9C:A9:58:3A:C4:96:77:A4:DB
            X509v3 Authority Key Identifier:
                keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/BE052770702E11F0A0DEEA12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:f0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:28:7f:63:7a:0d:b2:ad:bc:ac:6f:3c:02:48:47:ef:11:12:
         4e:bf:85:77:6f:3b:fc:ed:df:63:87:0e:02:00:f0:7a:14:c4:
         2d:64:dc:d9:c8:e6:8a:4d:45:3e:fb:d4:12:6b:db:43:eb:f6:
         8a:93:de:cb:f1:e3:be:74:a2:91:ae:f0:6c:1f:54:e2:fc:73:
         e4:65:42:42:58:64:42:7a:be:fd:2a:ee:2b:a4:f4:57:f2:15:
         9d:33:02:50:17:95:7e:1b:39:47:5b:89:ca:20:3f:fc:7b:44:
         96:f4:4b:08:d3:84:46:f1:21:4f:f4:60:52:4c:67:68:d7:0e:
         a8:b6:45:5b:d6:c7:d5:a4:89:23:86:2d:a4:b7:09:3a:ee:73:
         bb:de:e5:62:5f:4e:26:d1:79:e9:4c:58:2b:eb:9f:df:ac:85:
         86:ae:cc:a9:4a:cc:ef:dc:c2:22:4e:1d:fd:e1:61:0f:67:4c:
         f9:8a:ec:5b:c0:d9:49:b9:57:f1:18:60:c2:55:5e:61:29:cf:
         f2:2a:0b:fc:16:bf:e3:53:40:50:1f:a2:ca:c1:45:68:62:4c:
         6c:68:d6:d6:1d:06:fe:80:2a:c5:c4:3a:61:9e:33:9c:24:38:
         51:e5:a0:08:e6:d6:c5:a3:95:36:c5:77:65:f1:86:b3:38:d8:
         31:71:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:34:00 2025 by rpki-client