Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
File:                     A98668464EEB11EFB3305C85C4F9AE02.roa (raw, json)
Hash identifier:          tWiWEgQiTh2MC49VXb2kimhBotEglhYAfcGxfEIxWjU=
Subject key identifier:   B0:4A:1D:5E:8C:52:9C:DD:9B:E0:C5:28:A9:14:7E:CC:ED:0B:44:6D
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       07B8
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
Signing time:             Wed 16 Apr 2025 21:31:44 +0000
ROA not before:           Wed 16 Apr 2025 21:31:43 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132793
IP address blocks:        202.92.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 21:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:43 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=680021bf-ffe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:53:ff:e3:bf:b5:24:c0:cd:d3:a9:ef:ba:
                    34:14:56:a4:c5:de:3e:ff:d8:95:34:b8:7c:d9:48:
                    48:ac:da:1e:70:5a:ae:74:a8:b3:7e:9e:0c:58:d4:
                    be:b7:86:d3:3e:e2:67:c2:85:d0:ec:b4:b0:0e:74:
                    29:0d:3f:05:0d:f3:52:79:d7:a8:db:14:40:71:54:
                    7f:5c:7b:e7:a0:42:61:33:e2:cc:e3:19:80:6d:90:
                    28:e2:3a:7e:07:49:1c:cc:62:5e:a6:26:4f:44:8b:
                    3f:3e:f6:1a:10:06:68:22:ea:ff:2a:d4:91:b7:e6:
                    55:e5:fc:6f:7e:65:6f:9e:23:d2:b1:cd:ce:af:3a:
                    55:e9:c9:b8:0f:73:5d:b0:46:a6:bf:d3:a9:d7:ca:
                    1f:94:11:16:a6:45:a2:ce:d1:bc:fa:5d:d0:a2:b3:
                    d0:f3:aa:49:50:ec:11:62:c8:b3:21:dd:9a:50:c5:
                    7b:e4:5a:f9:e3:6f:df:64:48:48:4b:03:dd:e7:38:
                    a3:a7:e5:7c:17:f5:63:66:65:29:e8:97:99:2c:db:
                    7b:f2:8f:b0:b7:b1:f5:2c:54:79:9c:66:52:62:49:
                    5c:26:17:50:af:0e:c2:34:b4:ba:0c:b4:07:3c:16:
                    b1:2d:9a:0b:cd:2f:2a:ad:e2:9a:21:5f:2b:e8:06:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:1D:5E:8C:52:9C:DD:9B:E0:C5:28:A9:14:7E:CC:ED:0B:44:6D
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:10:a1:8c:6b:81:a9:43:ac:8f:7a:f3:cd:71:df:f8:bc:
         e0:6a:cf:8b:b1:5f:58:08:0d:7b:dd:50:3b:18:b9:70:d7:64:
         ef:da:a0:2a:f3:26:1a:84:4d:bf:fb:ba:d5:b1:a7:2d:cb:ae:
         e5:ff:2e:00:85:ba:b2:ad:25:3a:07:c5:1f:19:5a:24:72:a2:
         7d:57:8b:81:bb:b0:0e:20:75:db:e8:36:99:69:5b:dd:ba:58:
         13:cd:f0:65:7b:d3:15:4e:92:de:a4:be:ad:36:53:52:36:03:
         c8:92:1a:61:dd:e1:b3:4f:3a:96:d1:2d:21:11:37:dd:d2:29:
         5f:bf:c4:3b:b9:ce:87:ad:7f:f7:8c:59:4e:54:87:81:9c:ef:
         4a:23:73:1b:fd:37:d1:59:45:ac:25:2d:48:c5:78:1a:e3:c8:
         68:6a:a3:6a:7f:ce:32:6e:75:ae:e4:f0:3f:55:32:02:83:b9:
         75:ab:33:8b:05:f0:69:42:f5:77:8c:0f:e6:10:36:4f:81:2b:
         23:c5:57:12:3b:7a:a6:fa:b3:5c:ba:46:6d:41:d0:4b:7a:aa:
         b5:f8:a5:ea:72:05:32:57:b9:09:12:69:10:57:7a:a5:33:86:
         46:c5:07:9e:52:8a:d8:ca:59:41:8b:ca:59:e8:11:ff:05:9c:
         bd:df:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:33 2025 by rpki-client