Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/80F371780E9711EB9A6C2B3CC4F9AE02.roa
File:                     80F371780E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          BL4tECo9e+3ufRZK8OCt2j/Uj2lw36IymgWS2+ZdHFQ=
Subject key identifier:   8E:29:B5:72:31:35:56:83:9F:3F:B9:B8:3D:7C:54:5B:8C:95:0D:93
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       07B6
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/80F371780E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Wed 16 Apr 2025 21:31:42 +0000
ROA not before:           Wed 16 Apr 2025 21:31:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131281
IP address blocks:        202.92.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 21:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:42 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=680021be-eb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:72:9a:bf:54:7a:ec:76:d8:07:a5:85:55:
                    fc:c6:84:40:a0:0d:0b:f8:c6:b7:ce:d8:22:11:51:
                    33:cc:6d:41:0d:0f:b1:5d:f1:c9:4c:97:78:61:79:
                    c2:bc:60:0b:66:41:8d:cc:3f:41:7d:02:5b:a2:62:
                    d5:95:c7:e8:9c:ae:a1:74:f3:a3:ef:22:94:b3:3b:
                    50:58:39:d9:ab:58:29:b8:fb:46:df:eb:5b:08:38:
                    f3:07:ce:9a:6e:ea:8c:e2:bf:80:35:15:16:0b:e5:
                    38:23:01:85:1d:8a:3d:1e:06:2b:c7:e1:ab:d9:27:
                    45:bd:88:6d:20:50:09:5d:9c:41:7c:81:a4:b1:33:
                    24:6e:89:94:b8:73:f0:ba:98:46:91:3f:15:9d:ec:
                    13:e5:3b:9c:85:ff:b1:a1:6a:80:bb:5a:18:e5:84:
                    9e:f8:27:d2:16:df:1f:b0:f7:0a:8c:4d:ed:d4:c3:
                    f1:b5:f0:2e:e0:51:db:16:5a:59:f9:24:76:7e:c1:
                    da:6e:d4:a1:2d:70:fe:58:be:e9:53:c0:c9:b6:34:
                    b1:7f:04:2e:b7:8b:f4:84:63:c4:a0:b9:9c:b4:ea:
                    9a:71:ea:f6:a1:62:94:de:54:f0:25:51:78:57:7d:
                    e3:5c:4f:7b:48:ac:a9:02:62:e0:a0:ab:8e:ac:b6:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:29:B5:72:31:35:56:83:9F:3F:B9:B8:3D:7C:54:5B:8C:95:0D:93
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/80F371780E9711EB9A6C2B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:7d:16:63:dd:94:32:46:89:ad:fb:4f:52:dc:9d:64:b1:
         f6:63:64:00:c7:0b:43:d5:eb:44:fc:b2:57:79:04:e2:da:d6:
         04:ba:bb:19:76:2e:f9:c8:05:e3:6d:42:59:94:72:f3:98:3d:
         30:4c:da:94:cd:b5:63:c3:11:7b:c1:e9:8e:22:99:35:cb:5f:
         51:e0:49:e8:7a:1e:61:1c:fc:80:b9:5c:e8:6a:eb:62:d2:97:
         bd:02:d2:fd:57:8a:1e:9e:45:1a:97:e1:d9:d6:05:ad:5c:9a:
         82:ee:2d:04:09:7a:9b:2c:98:ca:9d:5b:66:b3:08:fb:67:6f:
         45:47:3d:69:aa:0f:9a:5c:25:b1:cb:b7:7e:ca:32:eb:fc:4a:
         eb:84:e4:15:a0:9a:cb:67:72:d3:6e:1c:8e:cf:ac:cf:24:23:
         00:eb:69:0e:88:79:20:42:3a:3f:80:48:7b:6c:06:4c:86:01:
         df:c3:3b:6e:45:30:2e:2d:73:97:b8:e0:81:50:95:cb:78:44:
         a2:e4:6f:3d:2b:d4:d9:46:69:a7:8d:23:1c:1c:f4:d0:ea:3c:
         d1:bb:71:70:73:9f:21:bb:1e:b0:cf:27:1b:e8:1f:bd:b6:cd:
         47:2a:6d:f6:00:23:28:f0:39:21:72:44:43:d7:d5:8d:18:8e:
         b6:0c:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:46:18 2025 by rpki-client