Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
File:                     10581DEAC75D11EBB00EBD1AC4F9AE02.roa (raw, json)
Hash identifier:          JmgPCoqfxLnmCXZ9Kqg1cLPcucyGnFbjlpBzEMSmBKg=
Subject key identifier:   7B:90:58:6A:17:C2:83:54:50:88:5E:F8:A7:2B:77:29:83:E4:C9:20
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       058E
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
Signing time:             Thu 06 Mar 2025 23:14:17 +0000
ROA not before:           Thu 06 Mar 2025 23:14:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134555
IP address blocks:        203.2.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D
        Validity
            Not Before: Mar  6 23:14:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67ca2c48-0126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:4b:1d:5e:af:02:b4:3f:24:fc:e1:7c:20:
                    90:2a:c2:ed:c9:15:95:e1:57:1c:2a:f0:5b:4f:d0:
                    31:b4:ff:ab:5a:a5:b6:20:df:a1:55:3e:da:b9:5a:
                    fd:42:64:37:2a:09:e3:03:10:b4:07:ba:ab:82:ca:
                    e5:f7:c6:04:c4:93:b4:9f:4b:83:34:af:fc:23:ac:
                    b7:76:61:82:e1:f5:0b:5d:e3:76:5b:b4:2e:95:18:
                    45:77:d6:54:22:ab:83:a3:e6:68:52:44:a8:dc:f2:
                    72:ce:dc:a1:fe:2c:6c:93:54:fb:33:4d:30:73:27:
                    a2:e6:d8:51:3a:ea:57:65:67:23:33:02:16:8b:db:
                    01:c5:ef:1f:09:47:65:64:14:18:4e:14:1b:2c:e6:
                    ca:98:27:ea:30:5e:c7:b2:1e:eb:d5:e7:9a:ae:11:
                    f0:5b:c9:5e:34:72:48:ac:25:ba:dc:49:d6:52:09:
                    ac:66:b5:5b:00:68:82:5f:2a:59:82:09:80:b1:56:
                    45:dc:29:45:19:ba:94:21:d1:eb:10:cb:2a:3f:79:
                    b8:d3:d0:8d:2b:8d:2a:95:d3:b3:3d:f0:f4:4b:e3:
                    7b:0e:bb:7d:84:7a:41:a7:59:30:56:7a:a3:d2:da:
                    fc:10:a0:46:5f:be:8e:4a:fa:5a:f1:0b:0a:48:57:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:58:6A:17:C2:83:54:50:88:5E:F8:A7:2B:77:29:83:E4:C9:20
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/10581DEAC75D11EBB00EBD1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:58:b3:2b:f2:3d:79:19:7a:43:62:f9:9b:80:91:6a:10:f2:
         19:76:65:7f:eb:44:0f:05:a6:55:f1:9f:e5:7d:cc:d7:62:19:
         74:c5:0a:f8:25:76:10:55:fb:d0:40:e0:7f:8d:d7:76:2e:3a:
         7c:68:43:ce:f7:ca:67:5c:79:2b:9e:e8:9b:71:8a:d9:fc:99:
         74:6d:70:7d:7a:1e:5d:9f:ae:09:53:64:3e:77:98:ff:25:e1:
         13:ba:f1:a5:8a:ea:a9:e0:8d:d0:7e:0f:9f:83:d4:76:e3:10:
         04:6f:e1:2c:7b:93:dd:0e:ae:88:e0:cb:cd:2e:d8:35:43:72:
         e4:78:fc:0e:93:80:48:5c:76:9e:dc:85:ec:e5:e2:14:e0:de:
         36:ef:7e:e4:d4:4c:5d:dc:dc:32:35:56:94:fd:fb:1e:74:ad:
         fa:9e:d6:b1:1c:b8:90:99:cb:1a:d0:75:33:06:93:71:99:4f:
         99:6e:0d:ee:a2:f9:17:b4:a6:f7:07:fb:af:a3:c5:5a:ba:38:
         69:25:21:cb:2f:5c:e3:0e:45:7d:52:c4:a7:3a:3c:9e:96:9b:
         e1:e9:c1:78:af:0c:d6:41:88:66:a2:48:67:51:fe:bd:5c:f5:
         9a:d5:a0:5d:de:93:66:6f:d3:a4:52:bb:7f:f6:bf:d2:8b:7b:
         0d:55:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:37 2025 by rpki-client