Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E260EBC4914011EDABD5F778C4F9AE02.roa
File:                     E260EBC4914011EDABD5F778C4F9AE02.roa (raw, json)
Hash identifier:          ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=
Subject key identifier:   16:75:00:BE:4A:46:04:42:45:5F:CB:B3:55:EE:AD:31:D7:FB:69:D2
Certificate issuer:       /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial:       019A
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E260EBC4914011EDABD5F778C4F9AE02.roa
Signing time:             Fri 13 Dec 2024 02:36:18 +0000
ROA not before:           Fri 13 Dec 2024 02:36:18 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     58735
IP address blocks:        203.214.166.0/23 maxlen: 24
                          2404:c400:dc05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
                          rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E9B6
        Validity
            Not Before: Dec 13 02:36:18 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=675b9da2-fef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:d1:8b:e3:82:75:f4:bb:9d:0a:10:94:99:
                    c6:71:a3:32:a1:1d:9d:91:dc:9f:82:9b:9f:b0:a5:
                    5f:11:53:33:1d:28:82:45:dc:01:25:95:3b:02:16:
                    a2:73:2f:e7:78:d0:fb:13:5a:01:74:f4:73:98:cd:
                    68:83:eb:1a:47:9b:55:bd:3a:6b:9c:34:6f:cd:6e:
                    6a:25:6a:08:38:33:e5:f5:55:ac:f3:e6:8a:cb:0a:
                    b7:eb:69:2c:20:34:fb:41:9d:b7:3c:fb:8e:2a:ad:
                    b6:cc:f6:df:1b:ee:32:ba:6b:9e:89:57:b1:ce:f0:
                    d4:83:58:f8:4f:27:cd:91:6f:77:31:c8:37:68:b6:
                    4f:e2:04:d4:fc:41:84:2a:a4:2f:7a:56:3b:3c:ce:
                    6e:22:69:e5:1e:44:78:60:ea:8b:1b:0a:57:76:46:
                    41:f9:5b:3c:c3:13:db:6b:04:a1:d7:67:af:4a:5d:
                    d6:30:38:6e:0b:86:4b:31:50:9a:ff:bc:67:0f:ec:
                    87:4a:a7:87:80:f1:c3:22:c3:f0:d4:88:d7:60:b6:
                    80:d9:fb:d4:d3:ff:8c:3a:3b:1f:ac:2c:6d:53:8c:
                    36:8d:44:65:53:11:8f:cc:25:37:35:d6:54:8f:9b:
                    ee:17:b6:1b:76:00:05:d9:0d:7b:c0:94:ee:17:cb:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:00:BE:4A:46:04:42:45:5F:CB:B3:55:EE:AD:31:D7:FB:69:D2
            X509v3 Authority Key Identifier:
                keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E260EBC4914011EDABD5F778C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.214.166.0/23
                IPv6:
                  2404:c400:dc05::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:06:68:79:44:a7:16:30:b5:c6:19:22:ec:27:b8:99:92:
         be:13:8a:30:a7:9e:30:92:fd:d9:21:0b:35:90:60:49:bd:dc:
         c4:7f:bc:a9:a0:24:4e:be:f5:a1:44:8e:6d:58:dd:67:a4:e5:
         40:94:59:59:56:d7:77:65:98:ff:aa:b0:63:29:ef:82:b1:41:
         77:0c:dd:cf:71:77:5d:d5:74:d4:c1:0e:42:a8:e7:e2:4a:17:
         40:9e:9a:a5:40:78:db:13:02:5d:3a:13:34:8d:35:33:fd:a8:
         94:54:2f:96:9d:ac:1b:65:ed:df:df:4f:98:78:f9:9f:12:1a:
         46:67:80:4b:22:88:e6:87:a2:de:df:e5:49:47:0d:40:fd:eb:
         0f:72:50:2f:fb:2b:04:06:a9:d4:e3:77:4a:3a:9a:7e:4e:19:
         9e:d9:82:80:5c:23:cb:b3:bf:57:e1:a9:13:19:7e:03:d7:2a:
         8c:48:1d:af:e4:12:5a:df:5b:f5:8d:ec:52:54:4c:c6:51:64:
         1f:45:75:48:21:09:2e:5f:e1:9a:5b:41:4c:68:fb:5e:ab:2f:
         13:b9:20:34:a3:eb:2a:44:a0:56:17:27:85:80:12:79:e8:bc:
         2e:d5:ca:b2:19:91:67:3e:69:0c:9e:36:29:90:80:81:f0:10:
         b6:41:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:06 2025 by rpki-client