Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
File:                     B1B36E8A691911F08409AD61C4F9AE02.roa (raw, json)
Hash identifier:          MstGvfkW4GBYfFu6ex+YssVwSg/+x1eym31kTHP8Xuc=
Subject key identifier:   83:E9:FC:D0:E0:7A:AE:E0:DD:E5:C4:99:47:0B:C3:C0:2A:EA:41:C6
Certificate issuer:       /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Certificate serial:       02
Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
Signing time:             Fri 25 Jul 2025 05:39:13 +0000
ROA not before:           Fri 25 Jul 2025 05:39:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154083
IP address blocks:        2402:1c60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
                          rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 08:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
        Validity
            Not Before: Jul 25 05:39:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68831880-53d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:04:9a:34:fe:61:e4:77:75:ed:03:e0:5e:
                    45:85:7e:37:61:28:76:2e:65:e0:8f:c2:00:1c:5a:
                    d6:e2:2f:67:54:9e:f2:8f:a5:e8:3d:eb:e5:d9:ab:
                    02:3d:8b:0f:cd:32:24:cc:5b:77:5f:5b:96:67:d7:
                    25:7d:6d:62:fb:4a:d0:a4:8f:ce:e6:a4:b1:dd:c7:
                    38:74:a0:45:80:39:02:90:df:fe:33:54:87:19:40:
                    3c:ee:69:f3:0e:63:88:3a:da:4c:b4:1a:b5:47:4e:
                    d1:aa:a8:26:69:1f:c9:61:f6:46:92:5b:4d:10:43:
                    c9:84:17:32:0a:ad:4e:26:e1:2d:28:bf:7f:60:7c:
                    cd:65:6f:65:87:44:f3:65:9b:50:3d:a9:0d:48:a0:
                    77:d1:2e:b4:6e:1e:b5:1a:36:11:4f:7d:ef:2a:46:
                    af:e5:c5:98:62:a0:43:2f:bb:8d:41:1d:63:53:32:
                    2b:f1:a1:ed:0c:98:d6:9f:a8:6b:a1:a6:22:55:bb:
                    00:ca:e3:2c:0d:94:3a:a0:56:d1:7f:75:72:03:6f:
                    c6:92:21:2a:f7:cd:f5:59:f4:86:b0:c5:85:9a:41:
                    63:ee:0d:d5:c2:07:f6:2a:6c:a4:41:55:f7:58:0e:
                    2d:79:20:45:b0:e6:c6:68:31:be:1e:1f:d1:37:8b:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E9:FC:D0:E0:7A:AE:E0:DD:E5:C4:99:47:0B:C3:C0:2A:EA:41:C6
            X509v3 Authority Key Identifier:
                keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:38:62:f5:1c:8c:b1:0f:ed:27:c5:c8:ec:57:3a:7f:63:
         0d:3a:85:55:5f:91:ae:d1:27:cf:49:51:d4:b6:35:57:1e:2b:
         1c:33:86:b4:6f:d9:f9:ab:5c:8b:41:a9:8a:0a:cd:67:ed:2c:
         25:19:9e:96:94:ef:c1:09:dc:4c:aa:e0:4b:d6:06:9f:6d:fc:
         36:19:90:ad:e8:0d:1e:da:10:0a:cf:bb:eb:4d:1a:39:b8:96:
         91:27:68:5e:e9:49:b5:41:c3:78:80:c5:86:f2:3b:86:38:46:
         fc:ea:26:e9:4c:2e:5d:d1:5b:a6:ab:d7:b6:11:91:dd:6e:3b:
         eb:a6:53:65:eb:47:6f:62:de:48:25:d4:d9:a2:1d:4d:86:bd:
         77:61:05:0c:f5:de:6f:d3:78:2b:c5:27:4d:03:c0:d8:a7:ec:
         73:46:b0:fe:3d:e0:dc:9b:97:52:bc:04:1f:86:9e:0c:96:6d:
         f1:7e:34:e4:d8:1e:13:c3:2a:ea:29:93:57:e4:cd:12:42:94:
         d7:fd:5e:0c:f2:2e:63:14:7e:d9:e0:42:d0:63:36:50:86:2e:
         f3:6b:20:8c:e4:19:47:5b:93:c5:d4:e3:87:67:e2:e1:e9:4e:
         71:b1:bb:e4:1b:2b:c6:7e:09:e2:1a:18:65:e7:58:ae:ee:b3:
         94:bf:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 14:33:35 2025 by rpki-client