Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/4550C0B2E86D11EF9AF14D6FC4F9AE02.roa
File:                     4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (raw, json)
Hash identifier:          4BAJS9jEp9Ynl4OHeHezZt4j8Xs2i+3cxugcfAGWWgI=
Subject key identifier:   67:C4:0C:22:0E:A2:8F:B8:56:8C:56:4E:C9:E3:45:8F:53:09:68:1A
Certificate issuer:       /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial:       02
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/4550C0B2E86D11EF9AF14D6FC4F9AE02.roa
Signing time:             Tue 11 Feb 2025 11:42:28 +0000
ROA not before:           Tue 11 Feb 2025 11:42:28 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     45750
IP address blocks:        45.119.0.0/22 maxlen: 22
                          110.92.76.0/23 maxlen: 23
                          110.92.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
                          rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 07:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A557
        Validity
            Not Before: Feb 11 11:42:28 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67ab37a4-12a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:cb:12:9b:2c:b6:b3:ff:d6:4f:57:c4:87:
                    6a:3a:89:28:4f:a5:11:7a:ff:40:e0:c7:53:1e:2a:
                    97:1e:94:a2:02:c1:34:1b:9e:75:61:7e:3c:c6:5e:
                    73:bf:84:1c:cd:d9:60:05:5c:2b:34:22:b0:05:cf:
                    d2:a3:f9:10:69:34:e4:3f:14:56:0d:f7:93:59:a1:
                    ff:f8:eb:ce:8f:4e:5c:ac:bb:ce:70:80:2e:a6:0b:
                    36:5c:d7:12:2f:2e:c3:0b:2c:da:91:cb:23:4f:e0:
                    a9:13:b8:15:b6:53:ee:5d:4d:2f:f6:aa:7f:69:27:
                    ef:fc:ab:f8:56:ba:b6:4e:51:5c:d0:0e:9f:36:f1:
                    25:98:56:bb:7a:87:6c:78:8e:cd:b2:7c:64:c2:e9:
                    87:c8:f4:e5:71:72:d8:08:19:c8:cc:70:2a:6c:a6:
                    52:c0:83:dc:f3:07:51:bb:4a:b5:30:ea:a2:ef:4e:
                    13:45:21:9e:52:73:12:ca:46:da:65:02:f4:b8:64:
                    3a:7f:7a:b2:79:d9:9c:86:0b:c4:94:6c:90:f2:18:
                    a3:f4:e4:ae:c0:af:ce:1a:d1:57:4a:85:77:49:73:
                    52:95:f5:23:0c:49:f6:fa:bb:40:6a:58:fe:51:0b:
                    8b:08:03:07:fe:8b:31:e7:75:3a:f1:a0:a1:b5:b2:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:0C:22:0E:A2:8F:B8:56:8C:56:4E:C9:E3:45:8F:53:09:68:1A
            X509v3 Authority Key Identifier:
                keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/4550C0B2E86D11EF9AF14D6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.0.0/22
                  110.92.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:9c:d9:2a:67:25:31:2a:b7:19:f9:51:2b:57:e6:5e:bf:
         b4:2d:91:e1:4d:0e:35:ef:d4:7f:f7:6d:6d:d9:9c:14:c6:65:
         85:d4:d8:19:4c:62:e5:16:93:aa:14:61:ab:a5:1a:5c:36:c0:
         fc:f8:07:13:76:04:ad:74:9c:1a:79:46:d2:76:57:58:33:4a:
         b9:8d:9b:01:39:c2:5c:9b:a5:8c:2e:44:11:29:01:76:6e:16:
         85:c2:2b:6f:ce:3b:f5:6e:ac:7b:57:a1:59:c3:17:3b:f6:78:
         3a:9d:a9:a0:ab:a5:a0:82:d1:01:c3:8b:1e:22:71:03:62:09:
         f6:d1:01:98:13:f5:59:54:2b:cd:fa:4a:ff:95:b3:b9:38:56:
         f4:2c:26:b1:a3:d1:ae:41:cc:0a:fa:ff:ef:91:86:80:0f:51:
         18:59:00:49:70:4f:d5:01:32:30:f4:dc:8f:d0:ee:b4:19:30:
         4a:14:58:04:51:ef:75:79:98:a1:bd:10:23:62:37:32:0c:ef:
         4d:d9:4e:33:ee:72:11:8b:3d:25:f2:07:ed:41:f4:2c:d5:fc:
         0f:af:20:f2:8d:42:07:60:5e:57:ea:66:1d:2e:46:eb:bc:31:
         6f:70:8a:89:d0:20:24:80:23:83:b5:cf:20:f1:0b:10:09:d1:
         63:27:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:03 2025 by rpki-client