Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
File:                     744F6602B5B511EEACE32B4DC4F9AE02.roa (raw, json)
Hash identifier:          MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=
Subject key identifier:   10:2C:27:4E:9B:A2:EB:23:5E:FB:90:95:CD:BE:55:7D:2F:95:43:AA
Certificate issuer:       /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial:       B7
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
Signing time:             Fri 03 Jan 2025 04:27:49 +0000
ROA not before:           Fri 03 Jan 2025 04:27:49 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     56304
IP address blocks:        192.156.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
                          rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FDDD
        Validity
            Not Before: Jan  3 04:27:49 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67776745-4648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:57:cd:16:7e:61:c7:01:ab:20:f5:c9:7b:
                    04:8b:02:78:fa:79:47:cb:39:4d:df:84:12:df:e4:
                    57:14:52:49:24:be:1e:f5:12:c5:a9:8f:44:90:77:
                    84:e6:b9:71:a8:f6:3e:5e:1b:cf:ff:9b:0d:b6:48:
                    89:93:eb:08:02:9c:87:1d:1d:54:19:05:50:76:08:
                    01:7c:b5:a3:aa:23:1e:9d:20:a1:14:4a:ab:9d:7d:
                    8b:23:56:9f:8f:16:b3:6a:fa:d9:bf:07:8e:9d:e8:
                    33:43:4f:f4:19:bb:23:79:e6:d8:56:f4:5c:a9:fd:
                    57:bc:a1:0b:ff:91:90:3e:33:66:be:3e:b1:b6:73:
                    bf:1e:4c:a5:0a:f0:38:b0:7c:47:f1:a0:ef:7a:da:
                    6d:a8:65:63:77:65:99:86:00:ad:cb:fb:dc:0c:4d:
                    92:5d:6b:02:ef:35:ba:36:d2:d9:f6:d6:3e:69:84:
                    c5:63:77:6b:66:11:e0:8b:b9:31:a6:9e:0e:8c:4e:
                    f3:97:6d:4d:ae:0c:7e:38:78:21:b0:93:d7:cf:5c:
                    f9:38:b9:01:2a:69:04:1e:a8:c1:46:c4:c3:07:21:
                    27:0a:d3:3c:bb:27:c3:01:7d:1e:6e:87:57:31:4f:
                    07:4f:d2:c3:ea:fb:51:29:d6:dd:24:5a:bc:ac:73:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:27:4E:9B:A2:EB:23:5E:FB:90:95:CD:BE:55:7D:2F:95:43:AA
            X509v3 Authority Key Identifier:
                keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:98:e8:15:9e:d8:d3:6c:c5:90:94:4b:f0:c0:5b:c3:05:
         c6:1f:22:25:0e:52:7e:6a:7c:9c:43:dc:1b:4a:ff:71:79:d2:
         02:9f:f5:9e:b8:6d:2b:02:3d:4e:24:53:80:4d:5c:97:f6:6c:
         cb:d9:7c:1a:39:41:02:52:0f:27:39:ba:f2:6a:67:25:e3:26:
         60:b1:28:93:78:b3:d8:37:ca:9e:9c:c7:27:f0:2d:c2:53:28:
         38:b5:89:66:9e:9e:47:b0:ca:f8:2a:5d:60:06:bf:85:d4:97:
         a1:f7:b5:bf:da:4d:7d:66:64:35:8f:3e:5b:e3:31:df:ca:ca:
         97:3f:02:30:03:5e:dd:39:9e:2c:ba:92:07:f2:81:da:18:21:
         4b:d3:ad:af:45:0d:d2:3e:3b:11:cf:84:d0:9e:7e:4f:48:61:
         0a:55:cd:9d:bd:a8:0e:41:8f:4a:48:1f:fe:03:24:2a:36:fb:
         60:82:4a:b4:41:f4:20:47:9b:71:f2:9a:97:d7:46:43:cc:98:
         9a:a8:21:df:be:e5:0d:c8:ca:96:a4:9c:a4:49:01:cd:ff:76:
         f0:65:e2:7d:67:ab:c2:f3:18:9b:cb:81:bc:52:2f:62:ec:8b:
         45:0f:ab:f6:aa:08:57:33:ec:ba:02:da:43:a9:3a:82:a6:cf:
         eb:4d:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:12:11 2025 by rpki-client