Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/0EF12B4805E611EF9685F580C4F9AE02.roa
File:                     0EF12B4805E611EF9685F580C4F9AE02.roa (raw, json)
Hash identifier:          0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=
Subject key identifier:   EC:94:71:5C:7B:2F:5A:BC:FA:90:3D:E5:7D:D9:45:7D:B6:20:18:61
Certificate issuer:       /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial:       7B
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/0EF12B4805E611EF9685F580C4F9AE02.roa
Signing time:             Tue 03 Dec 2024 05:09:55 +0000
ROA not before:           Tue 03 Dec 2024 05:09:55 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     38305
IP address blocks:        139.80.0.0/16 maxlen: 16
                          192.101.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
                          rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 04:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
        Validity
            Not Before: Dec  3 05:09:55 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674e92a3-0340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:12:cc:de:f5:cc:a9:b7:df:2c:d9:7f:d5:
                    7b:ec:f9:cf:44:a0:69:6e:23:3f:e4:31:1d:36:ec:
                    70:e2:b2:0b:ed:89:0a:bd:52:25:75:5a:6e:69:83:
                    ee:9a:b7:68:44:83:92:1c:0a:7c:a8:50:e1:55:27:
                    e0:91:ac:31:6b:f7:0a:16:f0:0a:f1:79:2e:75:a6:
                    eb:92:0e:cf:46:9d:01:33:b4:ef:e0:3c:38:b0:d2:
                    e4:4f:ba:b6:0e:7f:21:13:7a:fd:ba:da:69:04:c6:
                    01:38:93:b6:4c:3f:82:69:a7:95:35:75:0d:61:73:
                    1c:2a:9b:a2:88:c1:05:83:d4:bd:52:27:ca:4a:71:
                    7d:e1:e8:e6:d9:0d:87:06:74:8d:ca:d3:20:73:9a:
                    0a:3a:f8:2d:e9:c2:c7:6d:f7:39:21:f9:2b:27:94:
                    1d:55:62:d8:62:f0:99:19:ee:73:ae:61:88:99:ed:
                    7a:19:e4:65:c6:72:05:27:5f:fe:e6:6a:67:c8:79:
                    ab:cd:e8:84:f4:da:90:74:16:d2:dd:5e:5c:92:c8:
                    bb:63:c8:3b:7d:71:c7:f6:54:20:1e:ec:34:5f:12:
                    72:8e:f8:16:2e:6d:5a:5b:fc:f7:1e:94:04:75:89:
                    e7:0a:56:8d:47:8d:7a:ba:48:e1:12:65:3a:96:a2:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:71:5C:7B:2F:5A:BC:FA:90:3D:E5:7D:D9:45:7D:B6:20:18:61
            X509v3 Authority Key Identifier:
                keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/0EF12B4805E611EF9685F580C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.80.0.0/16
                  192.101.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:42:3f:ff:3e:f5:34:b5:63:3e:38:dc:b3:f2:30:ed:77:29:
         d8:25:ef:08:f5:24:47:d3:28:a2:af:41:3e:41:f6:90:0e:f9:
         98:30:ba:b3:dd:cf:4c:16:7e:48:db:50:5d:1b:59:3a:1f:73:
         41:cd:bb:9d:37:70:fd:ac:8a:0d:aa:7e:4f:96:c7:96:fb:94:
         82:41:37:04:5d:7b:a3:59:2a:6e:68:b0:97:80:7f:e5:f1:50:
         90:c6:a8:01:c0:f5:f9:39:d4:59:a7:5e:17:cf:b6:ab:d8:67:
         a9:11:60:4b:6a:60:7e:bf:c9:a7:15:44:cc:c6:b3:fc:dd:e1:
         89:c1:6f:82:10:96:1b:2d:62:36:65:2a:6f:b3:b2:b5:ad:50:
         1b:54:d9:44:50:9c:37:84:98:d4:52:79:55:4b:47:02:d1:8f:
         76:de:9d:7e:54:c8:78:bb:79:08:52:ae:01:42:44:3d:ab:a2:
         5b:08:77:a4:05:39:3b:20:a4:1d:22:28:b6:fa:0c:7e:ed:64:
         05:63:7f:2b:15:65:a7:52:af:15:6b:f7:a5:3c:f3:8a:bc:c7:
         4f:a4:d3:4e:0f:61:41:b6:90:e1:c9:75:83:00:ac:2b:15:c3:
         f8:7c:19:87:17:18:dc:7a:cb:ab:3c:f2:17:ef:f8:86:90:0a:
         a9:31:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:00:34 2025 by rpki-client