Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/920C07EECA9B11EFA931D42DC4F9AE02.roa
File:                     920C07EECA9B11EFA931D42DC4F9AE02.roa (raw, json)
Hash identifier:          GaP/RT3Ulee6uYT6wWpVO9XwFdzYE/to+5L81/i25gk=
Subject key identifier:   85:2D:76:58:66:A7:09:7B:A3:17:86:47:2E:9D:9A:43:BA:74:41:50
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       01F7
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/920C07EECA9B11EFA931D42DC4F9AE02.roa
Signing time:             Sat 04 Jan 2025 12:58:19 +0000
ROA not before:           Sat 04 Jan 2025 12:58:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206888
IP address blocks:        160.202.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35
        Validity
            Not Before: Jan  4 12:58:19 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6779306b-105d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:eb:59:08:b0:8c:da:65:45:e2:7c:42:c7:
                    49:bd:63:6e:e0:f6:bf:0b:2f:f5:40:fe:c9:43:ac:
                    52:03:b1:e5:d2:24:b8:e1:1c:d9:8e:de:05:db:3e:
                    ba:02:86:d5:f5:4d:8f:6c:7e:0f:57:0e:7f:7f:77:
                    f5:11:79:70:a5:7f:b4:08:77:08:85:c6:c9:2b:7c:
                    e6:9d:3c:ff:b1:7a:a6:8e:62:b5:96:98:c0:73:37:
                    7e:6a:f4:26:09:e4:f8:15:47:c0:a6:f4:34:90:0a:
                    8d:57:0f:c1:a4:e4:01:b8:47:61:eb:f5:13:9e:64:
                    97:aa:6f:e5:28:ee:68:67:63:da:ff:2f:24:14:e4:
                    68:12:85:c8:3c:38:59:12:3a:9e:f7:38:f7:33:37:
                    9b:db:af:55:fb:ed:4b:b8:98:c7:a0:67:44:8a:1d:
                    ec:77:6b:7e:44:37:ea:79:6c:ae:ed:b2:0c:41:91:
                    91:00:eb:3a:5f:39:d2:6f:64:10:53:ca:ae:b6:50:
                    2d:49:68:2d:50:97:19:cc:b6:50:8d:93:63:77:db:
                    3f:a2:fd:44:29:2f:3c:ac:37:13:5c:55:7c:be:05:
                    e6:12:13:9b:99:c4:b5:b1:be:91:65:d9:f5:a0:58:
                    2b:78:d2:13:55:6a:8c:61:d3:6d:ee:82:df:db:36:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2D:76:58:66:A7:09:7B:A3:17:86:47:2E:9D:9A:43:BA:74:41:50
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/920C07EECA9B11EFA931D42DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:d4:b5:45:08:b3:83:23:36:0e:51:eb:70:20:f6:ba:31:
         d0:b1:66:b5:8a:52:87:b5:9c:a1:a3:05:0b:bf:ca:81:23:02:
         6b:17:2e:63:79:88:cd:04:c9:d3:6d:15:4f:23:cd:7a:f2:00:
         eb:54:ed:96:5e:e5:15:f3:21:9f:b9:aa:c2:7d:42:67:47:03:
         45:6c:70:db:6e:ca:9c:22:5b:b5:4b:16:85:7e:b2:7f:8d:3d:
         77:b1:fb:75:f7:36:23:37:19:34:7c:75:44:78:1a:70:16:87:
         ac:28:a4:7b:22:21:01:14:d6:c7:61:6a:b8:28:3e:42:da:15:
         ba:9e:f6:c5:d6:42:a2:7a:8c:11:d0:82:43:2f:5b:9f:44:0e:
         f7:9d:c1:d4:d2:70:35:d4:db:b7:e8:48:af:de:b4:55:16:26:
         46:2e:5c:2a:37:99:b2:59:65:5d:22:05:e4:42:a7:01:1e:0d:
         76:15:cd:4b:5c:e3:d8:41:3a:1a:1c:83:03:60:25:4b:62:f4:
         99:db:ed:55:e0:f3:12:30:4e:df:a8:f7:3e:7c:a2:06:be:4d:
         0b:c5:a7:89:60:f5:8d:53:4f:d6:1c:7d:7e:f4:b7:e5:47:8e:
         b8:9c:c0:b7:f7:1c:14:96:ff:19:be:e1:41:ed:cb:2f:f4:f5:
         bb:5f:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:40 2025 by rpki-client