Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F6E1D901B7611F0B8CDFB6BC4F9AE02.roa
File:                     6F6E1D901B7611F0B8CDFB6BC4F9AE02.roa (raw, json)
Hash identifier:          cfaRkFYJc3B8Y7Ivy5d3F6fWYpYJk+Vz5pAdwzZeqwA=
Subject key identifier:   AE:C1:7E:68:0C:33:C4:19:7E:BF:DE:BF:51:09:D2:D4:BC:2D:50:F7
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4A60
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F6E1D901B7611F0B8CDFB6BC4F9AE02.roa
Signing time:             Thu 17 Apr 2025 10:26:34 +0000
ROA not before:           Thu 17 Apr 2025 10:26:34 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149103
IP address blocks:        2403:6a40:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19040 (0x4a60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr 17 10:26:34 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6800d75a-6472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:a1:53:42:6e:54:ab:1c:a1:41:34:c5:68:
                    69:ea:d4:c9:6e:7f:f9:68:aa:00:ad:6e:0f:10:4f:
                    d3:c8:f4:a5:f9:be:f5:15:d2:8a:87:10:c4:52:13:
                    c6:ac:55:72:2c:d8:bb:62:f4:e0:10:ad:55:fb:74:
                    f6:0f:7d:b1:3f:da:a1:8a:a9:74:97:05:08:4d:5f:
                    55:75:03:91:62:ee:e7:79:95:a3:90:e2:d6:89:91:
                    6b:60:1a:22:9b:36:ab:64:8b:93:28:bb:67:44:31:
                    8d:8b:d4:8e:6e:ab:a2:6d:bb:58:66:9a:2b:29:64:
                    bc:d6:af:f1:08:51:01:a5:8a:54:7d:ce:c4:88:5b:
                    7e:17:e9:02:c8:35:48:ae:9e:0d:f5:7f:23:f3:a6:
                    d5:a4:02:2c:40:91:a1:12:84:03:b9:38:67:64:a6:
                    bd:82:a9:62:31:f3:ad:52:22:21:f6:3e:ed:49:a0:
                    91:e5:a9:fb:cf:fb:28:70:45:7f:67:cd:7b:12:d5:
                    e6:7d:d0:3c:c7:ea:17:99:66:53:c2:da:4f:e8:ff:
                    4a:29:4a:c5:6e:11:78:4f:ac:b7:9f:5e:00:f8:c6:
                    34:50:bf:47:8b:79:33:82:42:98:f0:a1:a2:8a:16:
                    a5:43:05:8a:17:47:da:94:aa:71:ff:18:42:45:68:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C1:7E:68:0C:33:C4:19:7E:BF:DE:BF:51:09:D2:D4:BC:2D:50:F7
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F6E1D901B7611F0B8CDFB6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:6a40:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:b1:91:75:ac:b8:cb:b9:17:b2:ec:94:62:02:df:c3:5e:ca:
         20:83:e0:17:61:f6:01:7e:9b:4b:23:0d:b3:43:b5:7b:66:61:
         6f:19:4d:a1:dd:58:62:ec:b7:ad:cf:3a:a4:52:d0:5d:33:1f:
         ed:6f:ae:d9:e9:a6:1a:79:7e:cf:c2:1a:b2:b9:3a:44:ec:ba:
         f9:48:60:a6:92:c7:57:07:ca:4d:ef:b9:5c:e6:c4:3f:1b:81:
         46:46:85:2b:ed:14:14:3a:a1:c9:32:2a:a4:41:03:e3:e0:0b:
         e4:50:45:0c:4e:a7:10:8c:38:ea:c9:b3:2c:08:38:65:85:9a:
         3c:2b:71:21:9c:21:74:fd:8d:1d:30:2f:e8:ec:dc:ad:f3:07:
         9d:65:81:ba:c2:ec:64:e2:32:ad:f3:f2:c9:b3:ce:2b:6d:8d:
         fb:d3:bf:64:37:5c:c0:95:a4:08:86:81:2b:05:55:c9:4c:f7:
         10:41:7d:6f:e1:f4:97:30:10:f3:f4:2d:0b:83:72:3b:07:2f:
         99:93:f2:88:e8:dd:66:89:fe:82:b3:3d:d6:48:b3:16:1f:ac:
         a9:43:18:ea:80:3a:d2:3a:7d:2e:25:12:46:10:17:03:07:8e:
         f5:af:8c:a9:85:79:62:1e:60:15:39:9a:5f:55:c8:11:05:55:
         a5:a4:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:30 2025 by rpki-client