Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/78488CF4AD7411EAB93BA123C4F9AE02.roa
File:                     78488CF4AD7411EAB93BA123C4F9AE02.roa (raw, json)
Hash identifier:          Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=
Subject key identifier:   7B:4D:7C:1C:04:DE:FF:3A:04:E4:C5:EE:C1:A8:91:E8:83:A9:B2:E6
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       34C0
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/78488CF4AD7411EAB93BA123C4F9AE02.roa
Signing time:             Tue 04 Mar 2025 15:31:06 +0000
ROA not before:           Tue 04 Mar 2025 15:31:06 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     45758
IP address blocks:        182.50.95.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13504 (0x34c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A
        Validity
            Not Before: Mar  4 15:31:06 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c71cb9-0708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:89:0e:cc:d9:78:22:27:c0:ac:71:8f:61:
                    3a:65:b5:e1:7f:36:40:a9:31:47:ba:63:9e:4b:96:
                    11:d3:7d:de:1b:56:b5:60:a9:eb:65:70:5b:7f:99:
                    b6:c4:d3:0e:7e:81:61:78:8b:67:c1:ee:97:d7:27:
                    f2:a4:34:21:bd:86:7e:77:42:b0:dc:5c:e1:13:8d:
                    6d:7b:dd:ba:11:da:69:4e:12:6f:f8:a2:22:f6:99:
                    73:68:98:87:97:6f:0e:60:39:e0:41:6b:87:7c:04:
                    ca:11:f7:14:e6:13:7d:b9:90:2b:fc:73:ae:61:b2:
                    9f:6d:77:7e:80:ae:ac:cb:1e:d1:20:27:db:2b:b5:
                    2c:77:98:ef:91:20:d9:e6:48:b3:1d:46:24:ea:57:
                    63:db:8f:6b:7a:5b:1c:46:29:31:53:1d:20:3c:e8:
                    cb:37:df:63:5d:11:bb:e5:24:92:34:d0:12:8f:28:
                    78:99:17:4f:08:88:cf:25:75:2e:4c:82:aa:32:06:
                    52:d1:39:65:28:f8:50:20:3e:ea:9d:e4:84:52:3c:
                    0d:3f:1d:00:df:7e:fd:e8:6c:ef:92:e0:35:e3:9c:
                    5a:5f:ec:76:83:57:77:cf:26:a2:74:1d:6f:df:6a:
                    12:95:06:49:c2:6d:fc:e6:37:86:6a:4f:29:7a:78:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:7C:1C:04:DE:FF:3A:04:E4:C5:EE:C1:A8:91:E8:83:A9:B2:E6
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/78488CF4AD7411EAB93BA123C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:be:ef:fd:59:42:7f:a9:3c:a5:86:61:6d:f0:0c:e0:e6:e5:
         54:22:3c:02:ef:65:df:91:a9:07:8b:5c:30:67:7d:b0:ee:e3:
         f4:77:89:38:64:6f:1c:af:88:00:fb:b3:b2:80:8c:76:b2:80:
         2e:10:bb:8e:ac:84:2b:46:91:a4:4c:b2:9c:31:3c:bf:41:1b:
         45:47:8b:42:c1:79:9b:31:90:68:92:b6:a4:71:03:15:d0:46:
         4b:cf:d1:a0:2f:73:89:94:e8:b3:6a:db:2b:9f:23:be:86:10:
         b0:29:04:74:b6:43:a7:32:7c:2f:ae:75:84:67:fd:2f:66:7c:
         d3:42:6f:1e:76:4f:25:b7:ed:6f:3c:f5:b0:5c:f8:a6:91:5c:
         68:9c:9b:8d:79:74:38:6f:2e:40:77:37:58:8c:c0:1b:1d:5e:
         4d:6f:61:9b:46:fa:d9:02:38:d5:73:8b:04:e7:6c:22:57:92:
         e7:35:50:3b:a9:95:96:d4:c8:fa:fa:f8:9a:05:2c:d6:54:ef:
         86:1d:1c:e8:e4:f2:e6:1b:e3:5f:4d:28:77:3f:df:9a:41:ee:
         7b:23:44:95:b2:b4:2c:58:dd:ee:b1:3c:ea:d6:ab:d9:73:cf:
         13:91:e8:b0:58:0b:ed:f9:22:74:8e:10:44:cd:5d:f3:dc:a5:
         6b:e6:7a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:42:35 2025 by rpki-client