Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
File:                     9826D5EEB45011EE829AF51CC4F9AE02.roa (raw, json)
Hash identifier:          xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=
Subject key identifier:   93:4F:BA:E2:C5:60:45:A7:A8:23:3E:30:9A:F9:0E:0A:A0:F1:4B:8C
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3491
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
Signing time:             Thu 20 Mar 2025 15:21:12 +0000
ROA not before:           Thu 20 Mar 2025 15:21:12 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4847
IP address blocks:        118.188.18.0/23 maxlen: 23
                          118.188.20.0/22 maxlen: 22
                          118.188.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13457 (0x3491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F
        Validity
            Not Before: Mar 20 15:21:12 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67dc3268-2df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:5f:27:41:0e:43:89:12:d5:2e:64:cc:fa:
                    01:80:e2:ba:44:b4:59:1e:e4:46:ff:a7:1d:aa:3f:
                    f0:13:31:3f:7e:1f:fd:5e:42:2a:0c:b3:0d:ba:04:
                    f4:d2:88:ed:04:e9:ad:99:89:5a:0c:29:52:d5:0a:
                    37:ee:0a:99:00:ec:f3:2e:74:12:f9:c7:c9:cb:1d:
                    78:db:00:ab:69:c3:c0:33:48:25:ab:74:8f:8f:db:
                    88:04:d9:84:bf:35:36:57:08:7c:d5:bf:db:df:22:
                    fd:d8:40:0c:c0:83:d5:e5:9f:3d:80:b8:4d:dd:c3:
                    0e:28:16:c9:e0:fb:32:d5:62:54:cc:ae:1c:b4:20:
                    b6:de:85:62:54:9f:08:77:a1:a1:91:5c:07:4b:4a:
                    40:f0:93:2e:77:23:f9:87:4f:0d:1d:b9:e7:7e:07:
                    9c:f8:01:48:dc:3f:9f:24:f6:3b:c8:c9:e6:15:45:
                    1b:2c:e3:15:8d:2d:64:e9:58:49:16:78:a3:93:07:
                    a1:e2:2d:6c:ad:18:41:c6:4e:fd:f9:15:dc:fe:59:
                    f6:14:af:d9:4b:7e:6d:f6:ad:68:6e:5d:9e:d7:64:
                    96:8b:be:4c:1f:72:22:1a:48:58:d8:33:b4:f5:fd:
                    0d:55:4f:68:b2:c6:27:11:b5:3d:95:e3:f7:31:96:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:BA:E2:C5:60:45:A7:A8:23:3E:30:9A:F9:0E:0A:A0:F1:4B:8C
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.188.18.0-118.188.25.255

    Signature Algorithm: sha256WithRSAEncryption
         c9:69:51:45:de:a3:f0:87:15:0e:5d:1f:1a:41:cf:23:26:69:
         b7:0e:a3:ae:45:b6:0b:86:58:d9:7e:83:da:89:9a:2f:35:37:
         e0:41:34:72:fc:59:ed:25:1c:86:38:98:3b:a3:e9:51:48:be:
         53:bd:73:25:81:9f:cf:b6:88:df:e6:49:a9:ea:4b:9b:d9:5e:
         0d:68:35:65:ad:4c:01:f8:7e:1d:c9:40:17:9f:b8:48:d6:23:
         94:73:aa:bb:ec:e3:f7:dd:1b:a9:38:1a:0f:ba:d9:3f:fa:84:
         ed:72:95:fa:85:c3:6f:44:02:64:5f:0f:54:e7:77:d6:f1:99:
         7c:48:f9:d0:08:df:54:6f:4f:f2:7b:46:4d:d4:27:1d:99:42:
         56:55:a0:fe:05:56:1c:5b:7b:e8:f3:99:31:f0:37:de:4b:01:
         10:ab:19:55:3c:82:e6:82:9d:a7:f6:fa:26:a8:e0:61:20:f8:
         be:71:68:c6:33:a6:41:06:37:11:dd:39:f6:c4:52:24:e9:2e:
         c2:17:4d:ae:e6:f5:2f:c2:ee:f7:de:62:2a:1a:8b:db:2c:8a:
         93:26:9f:28:46:25:da:1b:c2:6a:a3:1e:b8:78:37:e3:12:d2:
         77:84:f6:f2:53:18:95:44:61:45:3e:b5:66:22:b3:fd:36:65:
         f2:a1:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:14 2025 by rpki-client