Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
File:                     11D961427C0311EBB2F8C86CC4F9AE02.roa (raw, json)
Hash identifier:          3Bh09Zn6mFO5Oea9UBod6MtwVZcXpjm+mtSvhM63HUc=
Subject key identifier:   8F:5D:53:11:6C:72:5D:A4:D1:74:0A:83:24:FF:13:EA:01:7A:6F:CE
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       34B3
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
Signing time:             Mon 10 Mar 2025 14:30:54 +0000
ROA not before:           Mon 10 Mar 2025 14:30:54 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     18025
IP address blocks:        45.64.248.0/23 maxlen: 23
                          45.64.250.0/24 maxlen: 24
                          2405:d000:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13491 (0x34b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A
        Validity
            Not Before: Mar 10 14:30:54 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67cef79e-3c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:c4:23:14:d0:34:e7:67:ac:0b:92:79:c5:
                    3f:24:82:80:73:42:dc:6a:b8:44:87:3e:f7:16:50:
                    b2:69:82:b0:98:69:36:9a:7f:47:3a:e6:e0:2f:fc:
                    61:9a:22:c0:95:f3:9d:99:7e:6f:a6:ba:f7:23:95:
                    ee:a6:d0:d6:12:88:4b:bb:a6:7e:05:f8:b3:33:56:
                    45:55:90:45:92:20:d3:07:f6:2c:c9:96:2d:72:00:
                    bc:85:d6:ca:ca:cb:7e:7f:25:6c:d9:cc:cb:16:bc:
                    87:fc:2b:e5:a2:a3:44:f2:5c:b3:5e:e8:40:e4:c3:
                    81:47:ef:ba:5a:4b:a9:2a:1d:9b:36:20:b2:e6:6e:
                    9a:61:de:64:d0:26:68:95:64:e2:e5:06:ea:d9:2e:
                    b8:65:98:57:86:d6:f5:99:52:2b:c8:6a:95:cd:fa:
                    8d:49:af:f3:ce:c5:13:42:f9:c9:2e:24:98:49:6e:
                    cd:71:04:38:e9:46:08:b1:48:2a:5a:9b:8c:7d:74:
                    9d:80:77:1b:96:3d:11:83:9e:53:bb:75:41:26:54:
                    e5:2e:16:4e:d2:49:9f:b4:91:5b:66:3d:72:c7:04:
                    da:c8:49:1e:d3:c8:cf:f9:b7:75:3f:fc:85:4c:b9:
                    da:98:59:5a:d1:1a:8d:10:0f:79:8d:a2:04:4e:75:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5D:53:11:6C:72:5D:A4:D1:74:0A:83:24:FF:13:EA:01:7A:6F:CE
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.248.0-45.64.250.255
                IPv6:
                  2405:d000:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:92:8f:52:ca:97:95:80:7a:e1:35:dd:92:c6:eb:8a:65:5e:
         6b:1c:13:94:a1:91:6e:d9:6a:30:8f:81:72:d0:1f:ea:22:d9:
         d7:81:d9:6f:70:60:45:e3:c0:b3:8e:cd:48:b5:0d:d3:95:a5:
         b1:b9:af:43:ab:3c:4b:35:c0:a0:85:50:7a:7c:ca:41:34:9e:
         9f:6f:92:4e:d4:67:60:39:5b:3f:5b:75:3f:7a:e1:a7:a0:bb:
         15:e9:16:21:c8:fe:7e:14:86:31:22:b0:1d:d3:4a:30:91:5a:
         71:b5:53:44:62:c6:5c:bf:a0:54:42:06:8a:1a:1f:d8:87:01:
         5d:b9:66:ad:a0:0b:ff:5d:83:69:c2:97:ec:16:d1:3b:b5:5b:
         85:34:c5:3e:01:cd:7e:4f:64:86:7e:d7:11:cf:9b:c1:bf:64:
         3f:58:02:34:af:68:d8:fb:4a:eb:54:84:4d:c1:3e:57:00:d2:
         bd:90:e8:fb:87:ce:84:c6:0e:47:1a:6e:cb:46:8e:3d:bf:26:
         2b:b6:d7:c9:5f:3e:17:4f:65:a2:7a:01:2e:95:9a:2d:94:90:
         f0:c4:35:18:45:25:8a:35:36:d0:e4:af:86:85:b1:38:c8:bf:
         e6:da:f7:aa:77:f3:ca:3c:76:b2:ab:9e:0a:ed:42:36:2e:2a:
         66:41:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:38 2025 by rpki-client