Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
File:                     1154663A54C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier:          0tjh7CxdHmjL/qPUXICMkekVGPVDxet1IoRpBq3Q/wc=
Subject key identifier:   6B:8A:50:38:34:1C:8D:92:BA:40:90:74:83:CE:20:D5:EC:C6:CE:2C
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0ED8
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
Signing time:             Thu 22 May 2025 20:07:42 +0000
ROA not before:           Thu 22 May 2025 20:07:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153186
IP address blocks:        2406:840:fc40::/44 maxlen: 48
                          2406:840:fefa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3800 (0xed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f840d-1636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:19:57:78:52:9e:a2:6b:bb:c8:22:2a:9c:
                    f5:c0:1e:3f:81:07:22:3f:2d:ce:cd:74:64:39:91:
                    b5:a8:f4:e4:08:38:d2:89:8f:89:34:09:aa:35:eb:
                    45:c8:aa:a8:af:2a:fa:97:37:d8:e2:02:ac:49:6c:
                    9d:b2:4a:17:d5:63:8b:78:ee:c3:5d:a9:14:23:d2:
                    0b:e0:ad:88:ef:19:52:c8:c9:35:f2:d1:a2:30:30:
                    c4:69:44:d6:e8:25:37:4b:2b:1e:09:91:e4:35:ba:
                    06:cf:48:e5:6f:42:a0:45:23:77:1f:aa:c5:98:36:
                    a6:46:d5:cb:e4:b8:61:ed:e4:f0:cb:a2:02:04:e5:
                    51:d4:16:3b:76:7c:32:03:0e:ac:58:f6:82:f0:13:
                    bd:39:47:7f:d7:91:14:14:88:8b:19:c0:0b:09:6b:
                    ba:99:81:5f:0c:5c:07:06:99:c6:b3:24:5e:34:29:
                    29:19:5d:4d:c2:c2:56:18:75:2d:40:d7:a9:28:53:
                    0e:7d:b5:e1:d1:d6:a3:df:0d:ff:43:55:b7:58:58:
                    26:31:16:45:f0:a0:42:eb:d5:19:29:cc:57:63:09:
                    57:29:6b:69:6b:7e:d7:06:bc:f6:4b:38:d8:23:cb:
                    62:53:25:3e:c9:59:26:f4:f5:cd:3a:d4:cd:51:db:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:50:38:34:1C:8D:92:BA:40:90:74:83:CE:20:D5:EC:C6:CE:2C
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc40::/44
                  2406:840:fefa::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:5e:0e:82:18:60:1b:87:7c:d4:38:bc:c5:e3:aa:4b:7f:
         6c:17:66:5c:da:91:32:c6:31:51:fd:a8:d7:e0:4e:cd:15:2e:
         2c:b5:1e:75:41:84:d3:05:4a:b1:7f:e2:9e:8f:c2:01:f3:08:
         2b:0b:52:9f:27:f3:b8:25:fd:3e:2e:93:c2:30:6c:ed:08:6a:
         20:9a:28:f5:12:77:b7:ed:c1:d1:7e:32:cf:1f:7c:8b:ae:6d:
         b9:9f:11:47:e3:31:6a:52:ed:c0:30:13:f1:5f:3f:31:3d:80:
         be:ce:90:35:25:21:83:bc:15:42:33:33:bb:9c:ca:06:33:91:
         ae:8f:79:3c:ed:3c:05:70:c5:ad:0f:b1:12:ed:6d:fa:97:46:
         ac:23:4a:4d:0f:bf:a7:21:8b:a5:da:75:59:55:d3:fc:c1:a5:
         d1:d3:67:34:42:34:a3:bb:6f:18:70:3a:b9:bb:46:5f:1e:33:
         25:e6:2a:5c:5c:0d:05:81:ae:d2:26:21:30:e1:44:d2:3b:cf:
         21:a5:93:7c:73:81:68:cc:be:59:3d:6f:ea:42:21:81:48:26:
         e6:23:6a:fc:7f:04:74:59:b8:8f:ec:61:0e:dd:df:51:84:15:
         2b:b6:d0:94:05:44:55:d0:c6:1b:8d:07:98:9a:70:4a:8d:f3:
         66:af:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:27:06 2025 by rpki-client