Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/C17B1042AD7211EFBD28595FC4F9AE02.roa
File:                     C17B1042AD7211EFBD28595FC4F9AE02.roa (raw, json)
Hash identifier:          6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=
Subject key identifier:   DC:88:75:9E:41:64:2C:C8:48:06:3B:45:DC:22:59:21:1D:67:CD:0B
Certificate issuer:       /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
Certificate serial:       1B
Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/C17B1042AD7211EFBD28595FC4F9AE02.roa
Signing time:             Thu 09 Jan 2025 06:21:17 +0000
ROA not before:           Thu 09 Jan 2025 06:21:17 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     9266
IP address blocks:        203.16.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 06:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D9C1
        Validity
            Not Before: Jan  9 06:21:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=677f6add-127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:54:6e:06:13:7f:e6:b6:ab:24:77:58:96:bc:
                    95:ba:4e:ae:f5:fe:3f:ac:e0:44:4a:ec:07:60:31:
                    00:97:d1:f7:61:ee:bb:3d:2a:8d:1d:4f:3c:8f:ea:
                    fd:05:37:1e:08:cb:74:78:b1:b6:05:98:bc:bb:a7:
                    1a:c8:b0:a3:8a:d2:60:a0:31:9b:6e:fc:36:bc:33:
                    89:2b:91:c1:e8:01:e6:07:74:f5:32:db:28:4c:b6:
                    e9:76:81:48:62:65:0e:4d:b7:b3:e2:8f:72:26:a4:
                    01:db:d4:91:35:17:83:31:56:53:aa:5d:40:61:87:
                    c9:bb:67:e8:48:99:8d:6f:69:57:1f:d1:99:65:e8:
                    df:ae:b5:cd:44:43:5e:48:74:65:8b:65:c8:53:c7:
                    1a:40:5f:cf:f7:80:1d:99:9d:dc:32:64:62:1e:72:
                    76:b8:d8:32:61:c8:bd:2b:e2:36:a9:32:96:15:48:
                    69:f5:7a:49:96:d5:12:b9:06:e1:81:5c:29:42:17:
                    57:e7:97:25:20:f2:dc:99:6e:08:d6:92:18:55:b0:
                    b0:f3:3e:e4:3c:c1:ff:90:d8:ce:f2:df:17:21:94:
                    62:62:db:9e:77:ba:b5:13:ba:ae:8c:9f:af:05:56:
                    66:0c:f8:a0:2a:da:bb:ba:1f:c4:4e:2d:e5:b2:b8:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:75:9E:41:64:2C:C8:48:06:3B:45:DC:22:59:21:1D:67:CD:0B
            X509v3 Authority Key Identifier:
                keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/C17B1042AD7211EFBD28595FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:3f:57:44:f7:91:f5:d4:c1:84:1c:a6:bc:b8:6f:9d:a8:51:
         6e:88:a6:b3:e7:95:4b:3a:47:fb:cf:f7:f3:09:e2:53:6b:db:
         08:3a:39:7c:17:d0:5d:b1:74:ab:be:2a:62:be:f1:9d:8a:be:
         2a:88:30:15:75:18:8f:51:7f:8c:3d:20:3b:3a:2d:ce:35:68:
         c8:51:60:9e:bd:bb:cb:6b:90:45:09:c1:b8:b0:52:06:e8:4d:
         0f:e2:00:2e:ff:52:e2:3e:41:c7:11:da:c5:b1:92:e4:29:73:
         cd:04:56:ef:5f:19:75:e7:a0:1e:0e:87:48:f0:23:aa:44:4a:
         00:fa:2b:dc:22:8f:d5:1a:26:20:dc:3a:fd:83:83:ac:5c:b9:
         c5:fb:ae:ab:2c:05:66:1e:df:a9:02:bd:37:29:01:4d:90:1c:
         76:7e:25:39:89:4b:53:5f:10:dc:4b:0f:99:42:5d:c2:30:69:
         97:4c:54:2f:2c:4f:06:fa:d6:c0:34:76:a7:e5:b8:45:3b:2f:
         49:73:e8:fc:0f:5e:1c:76:2d:f9:61:73:ca:8a:a1:3f:e3:2c:
         b5:0b:b2:4e:3a:d8:4b:95:be:fa:2d:4f:0f:75:9d:fc:0e:f5:
         67:61:41:a7:7c:60:f1:4a:2c:b9:98:52:ad:cd:04:36:f2:70:
         e8:f4:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:49:48 2025 by rpki-client