Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/BE8F165C873111E9AA82EC27C4F9AE02.roa
File:                     BE8F165C873111E9AA82EC27C4F9AE02.roa (raw, json)
Hash identifier:          3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=
Subject key identifier:   83:A1:08:44:1E:70:EE:AD:2C:03:AD:99:A6:70:13:F1:E1:45:14:D0
Certificate issuer:       /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial:       193A
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/BE8F165C873111E9AA82EC27C4F9AE02.roa
Signing time:             Thu 24 Apr 2025 16:44:32 +0000
ROA not before:           Thu 24 Apr 2025 16:44:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136409
IP address blocks:        2406:a900:144::/48 maxlen: 48
                          2406:a900:145::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6458 (0x193a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
        Validity
            Not Before: Apr 24 16:44:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680a6a70-de14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:05:26:af:97:9d:a7:81:a8:ee:e0:d1:49:
                    e2:e5:0b:94:31:13:60:4e:e7:35:cd:fd:65:8f:be:
                    6b:1f:a5:73:a3:76:95:95:88:70:55:19:2c:68:26:
                    5a:b3:1f:94:88:13:9b:4b:3b:9e:a1:72:b6:e0:f7:
                    31:c8:23:38:97:10:c3:fc:32:eb:b9:40:ad:d0:84:
                    38:1c:eb:91:a7:dd:d9:8e:63:84:52:75:25:4d:ce:
                    7f:66:93:83:fc:91:72:cf:06:a5:b8:ef:fb:45:63:
                    33:10:ed:d4:ad:04:5f:c0:8b:d1:b3:6a:76:8c:43:
                    ea:ee:74:12:43:11:c3:83:4b:3d:90:3f:b4:cd:ea:
                    dd:30:59:a9:f6:aa:77:84:90:45:84:63:41:22:13:
                    c6:1b:f6:82:f3:eb:23:59:fd:3b:b2:b7:20:6c:55:
                    fa:1f:6f:34:6e:25:7c:4f:cb:cc:b6:3c:a1:22:be:
                    43:39:19:04:f3:87:d7:fb:54:39:50:a5:19:08:34:
                    5a:0c:eb:c5:9e:7e:2e:03:df:28:07:4d:d7:b2:f7:
                    e3:76:7b:68:41:32:17:e7:5e:75:44:77:f1:6d:48:
                    99:46:66:3b:95:67:8d:2b:cd:6e:2f:74:ea:d1:9d:
                    dd:d7:61:92:5d:e0:77:ad:08:44:fa:86:30:d6:2e:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:08:44:1E:70:EE:AD:2C:03:AD:99:A6:70:13:F1:E1:45:14:D0
            X509v3 Authority Key Identifier:
                keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/BE8F165C873111E9AA82EC27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a900:144::/47

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:04:e0:3c:2a:33:b7:2f:a2:f6:1d:b8:fb:80:0c:48:b0:
         b8:27:68:9a:4a:23:da:2c:87:89:4e:d1:de:d6:f6:c2:e2:a8:
         d5:ab:b8:a7:00:22:0b:a7:ca:71:6a:67:51:1e:1c:60:96:ce:
         45:83:04:f2:5f:c9:00:fb:9c:71:41:a1:d0:07:77:8a:c6:93:
         2c:0b:2c:f6:38:63:19:22:a8:c1:32:ea:20:54:a8:99:c1:8c:
         83:bb:59:c7:2f:2b:07:f0:82:ec:58:fd:c6:88:09:87:05:21:
         1f:c2:eb:fd:d0:9d:97:03:c5:cd:94:f5:eb:bd:0f:c4:9e:00:
         db:6f:1c:37:39:eb:2d:d5:5b:aa:63:c3:8a:c7:27:7c:4c:48:
         63:4e:95:7d:29:a7:ad:d2:cd:6a:38:7f:d1:a7:6d:82:2d:96:
         c4:cf:cb:08:e4:41:e5:db:27:44:cb:75:16:c4:86:e4:5f:57:
         5c:98:43:da:84:2f:e7:b8:fe:a5:52:2e:5a:62:59:40:9c:2d:
         bb:3b:60:3c:7c:57:09:c6:fa:f4:7e:cc:31:21:27:02:b6:22:
         cc:a9:1c:f6:b7:95:41:19:06:81:86:e5:5f:81:f2:3d:e9:af:
         99:23:1a:d5:75:04:9c:bf:08:ee:86:91:55:20:01:84:b0:95:
         d6:7b:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:54 2025 by rpki-client