Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/BB8DC2EEDA3911EFB026B123C4F9AE02.roa
File:                     BB8DC2EEDA3911EFB026B123C4F9AE02.roa (raw, json)
Hash identifier:          ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=
Subject key identifier:   5C:A3:AB:44:3C:47:72:6D:30:C2:C0:11:97:AA:BC:84:63:A6:CF:65
Certificate issuer:       /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial:       9E
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/BB8DC2EEDA3911EFB026B123C4F9AE02.roa
Signing time:             Wed 05 Mar 2025 07:23:09 +0000
ROA not before:           Wed 05 Mar 2025 07:23:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     40065
IP address blocks:        183.90.184.0/24 maxlen: 24
                          183.90.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 05:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2
        Validity
            Not Before: Mar  5 07:23:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67c7fbdc-a205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:63:b1:a7:a3:8b:a3:6e:34:41:2c:0a:67:
                    7d:77:a6:8b:41:65:84:f4:43:a0:8e:93:13:5f:bd:
                    2a:c2:4b:04:b7:54:9e:65:c5:e3:57:d8:eb:30:e6:
                    4b:48:77:be:bb:1d:63:20:2c:51:6f:b5:65:9c:3f:
                    b2:fe:03:35:be:11:27:e8:44:0c:dd:28:cd:95:2b:
                    8f:2d:6d:f1:2f:fe:01:86:56:6e:71:a8:72:63:75:
                    e3:b9:c2:ae:fe:66:b9:ba:b5:c1:d8:3f:f7:d1:72:
                    96:50:d6:a3:02:fe:6b:0c:c6:85:06:46:3c:9d:d1:
                    d7:78:7d:e1:77:de:31:17:90:c1:5c:ef:ca:7b:17:
                    d2:c4:83:59:fa:a6:93:73:ca:96:7e:ab:d5:62:41:
                    04:f1:e0:c6:c1:86:e9:60:b6:dc:98:24:fe:43:c2:
                    18:8d:92:0e:d4:13:3d:db:0d:7b:a4:21:da:e9:eb:
                    62:32:eb:7b:6b:e6:64:f2:6e:52:97:e5:d1:74:87:
                    c1:e6:d1:50:4b:44:45:2d:62:ed:fe:32:53:42:ed:
                    40:02:cf:ba:74:33:1b:3a:3b:f7:7f:36:b5:6f:a1:
                    cb:bd:04:42:da:58:59:b5:3e:0b:19:3b:e7:ef:ff:
                    df:19:81:a9:09:77:10:6d:d5:45:85:eb:a6:cd:fc:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A3:AB:44:3C:47:72:6D:30:C2:C0:11:97:AA:BC:84:63:A6:CF:65
            X509v3 Authority Key Identifier:
                keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/BB8DC2EEDA3911EFB026B123C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:46:c0:c1:fc:ce:a0:b0:97:b0:ce:f7:0e:f4:1e:a8:32:f7:
         27:67:22:a6:b9:e4:5e:5f:55:e6:3f:31:30:f2:a2:70:2e:cb:
         21:17:75:74:47:40:7f:74:2c:e4:9b:1f:8a:76:0f:91:6d:e8:
         73:2d:1a:84:86:d0:63:c1:5f:77:f1:0f:bb:2c:71:a6:00:da:
         90:3d:e3:82:d9:5f:ac:fe:7b:7d:23:75:da:08:d7:ac:c8:86:
         34:5b:1a:ba:77:e5:f9:18:3b:e1:af:fe:7a:33:a4:08:93:51:
         0d:53:ca:a1:e4:9c:3f:9a:ef:fc:0c:ac:68:ff:ad:3d:9f:b0:
         d8:02:a5:3e:36:20:63:08:38:5e:55:3c:82:55:f0:75:1b:31:
         20:d6:f3:a3:ac:82:a0:72:24:7e:91:89:af:ba:c0:03:cc:aa:
         e3:f1:fc:fd:71:31:37:20:e2:5f:83:13:d9:26:31:86:a7:3e:
         7a:86:9e:24:2e:b6:35:88:a3:f0:1b:07:76:64:ae:c7:6a:94:
         48:87:9e:db:c3:18:dd:31:c7:bc:27:a6:9f:91:ce:fd:43:9d:
         69:c2:46:ea:85:7d:2c:b6:7e:43:7b:85:aa:8f:af:26:75:1b:
         a6:b8:c0:a8:be:41:7b:4c:89:a4:a1:c1:d7:9f:a7:c3:89:e1:
         91:f9:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:45 2025 by rpki-client