Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa
File:                     AA02862E890C11EE87862551C4F9AE02.roa (raw, json)
Hash identifier:          iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=
Subject key identifier:   2C:E4:8A:7E:1D:57:A3:A3:6C:5D:C2:10:FE:D3:E3:35:92:0A:A2:44
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       CE
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa
Signing time:             Tue 03 Dec 2024 04:38:25 +0000
ROA not before:           Tue 03 Dec 2024 04:38:25 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     140543
IP address blocks:        115.187.16.0/24 maxlen: 24
                          115.187.17.0/24 maxlen: 24
                          2401:4ea0::/48 maxlen: 48
                          2401:4ea0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5
        Validity
            Not Before: Dec  3 04:38:25 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674e8b40-7bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:d9:18:b5:e5:35:cf:13:a9:55:ce:50:f3:
                    4c:20:5e:af:5e:cf:a9:96:f7:49:57:67:eb:29:62:
                    4d:ec:6e:13:e7:18:2e:8c:be:31:b1:80:f3:8c:73:
                    19:40:cc:eb:4c:ff:11:77:b0:da:b8:34:af:c7:80:
                    4f:9e:5c:57:3b:07:de:ae:21:86:a8:42:49:7f:5d:
                    7d:06:b0:4f:b8:59:cd:a6:41:96:4b:2a:e8:0d:e5:
                    a2:c7:af:74:11:89:85:50:95:f5:d7:5c:ff:d9:90:
                    f8:51:8c:06:1d:d6:3e:90:17:a0:83:d3:97:ea:a5:
                    a2:4d:fd:ca:3c:00:8a:94:09:db:d1:34:d8:89:6c:
                    54:7e:e2:8b:d2:5b:d8:78:37:25:7b:46:a7:a6:ba:
                    f2:95:73:08:a8:76:b8:28:b2:95:7b:91:85:c9:a7:
                    00:40:01:c9:01:b4:f2:c2:4f:fc:02:db:e1:24:68:
                    d4:a6:76:75:58:bd:97:ed:12:30:83:9f:3f:b0:62:
                    2e:a4:da:b1:46:51:bb:a8:8b:1b:00:d0:54:9c:34:
                    c0:73:4a:9b:ce:1f:2b:fc:1a:84:af:1c:11:26:df:
                    0f:47:1e:0d:c3:b7:60:16:74:de:2e:5b:fc:3f:f3:
                    ae:03:7a:2f:88:2a:1b:05:e2:0a:b4:e8:93:9d:96:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E4:8A:7E:1D:57:A3:A3:6C:5D:C2:10:FE:D3:E3:35:92:0A:A2:44
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.16.0/23
                IPv6:
                  2401:4ea0::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:a0:c1:82:68:20:07:46:f3:72:d9:20:89:48:8a:fd:78:
         c2:1c:e6:c6:6f:38:68:c3:21:6d:c0:c9:e3:fc:17:75:81:ee:
         15:1c:14:0d:a4:e3:59:90:fd:9e:4a:10:d6:4f:9c:d1:48:b3:
         1d:13:cf:7c:94:75:68:24:2d:d8:b7:c8:8c:0d:31:75:42:6f:
         b7:da:ba:d0:70:7f:3c:f3:18:29:fc:ce:bb:e7:c3:18:fd:2b:
         47:c3:46:a7:a8:1d:5b:6d:95:47:6c:bd:82:7d:b5:6d:99:d3:
         ba:cc:ed:27:45:fc:2a:6f:14:a9:4c:1d:1b:c5:a2:11:67:e6:
         80:2e:6b:57:43:34:09:7d:aa:d9:92:c4:25:31:c0:15:15:42:
         df:2d:ff:81:42:2a:63:af:55:1e:8d:15:67:4e:e3:22:38:30:
         fe:71:fb:66:0a:15:5f:bd:b3:28:63:13:0c:81:18:20:c3:d4:
         8d:aa:1e:1e:c7:b1:4f:7f:07:57:98:74:0d:34:63:13:c4:45:
         81:8f:0e:0e:38:22:e1:1b:3a:6b:b9:7d:a0:23:41:8f:30:7c:
         bd:f3:24:e5:83:91:a1:8e:ce:6f:e3:e4:bf:7a:29:6c:cb:56:
         81:f9:8c:41:40:b2:50:08:1a:f5:13:ed:60:0d:92:0b:ef:6c:
         2b:1d:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:34 2025 by rpki-client