Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/661CE74E912511EE9FB03869C4F9AE02.roa
File:                     661CE74E912511EE9FB03869C4F9AE02.roa (raw, json)
Hash identifier:          Aip9w89ovKKGqYrukOFS6DwgaaU9mE2ENF2KcNHOmoM=
Subject key identifier:   35:38:1B:9C:59:A8:8D:FC:21:83:9B:89:96:0D:33:1E:85:9C:62:FB
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       0481
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/661CE74E912511EE9FB03869C4F9AE02.roa
Signing time:             Sat 25 Jan 2025 00:13:43 +0000
ROA not before:           Sat 25 Jan 2025 00:13:43 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     945
IP address blocks:        2407:9240:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC
        Validity
            Not Before: Jan 25 00:13:43 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67942cb6-c06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:02:d3:45:7e:94:b4:4d:80:d2:97:24:ba:
                    a7:7f:0f:73:02:77:fe:8f:c0:d9:b7:c0:1d:49:4d:
                    b3:f8:0f:6e:63:b0:3e:ee:87:67:3a:42:0f:c6:ac:
                    44:a0:ad:44:b0:8d:39:e6:17:17:e3:2d:07:6f:32:
                    36:5a:ae:ed:76:41:2c:d3:8f:1a:ba:a6:c0:4a:13:
                    97:a6:8a:a0:12:14:8d:b6:26:ba:a0:58:26:fb:1b:
                    e4:bd:b7:d1:e4:2f:30:65:d9:0a:fa:15:ab:e1:45:
                    47:89:67:b6:92:26:6b:a5:70:d7:2b:11:7a:da:5e:
                    bd:f5:94:c1:50:ba:e0:64:22:69:24:1a:8a:fd:89:
                    84:fb:a6:fb:76:d6:16:ca:27:c4:f9:98:5a:8f:65:
                    d4:a1:de:0e:9a:50:dd:f3:41:a3:87:87:c9:6a:0b:
                    d3:8e:09:81:12:ad:44:e6:b7:22:f5:82:7b:48:18:
                    dd:de:7c:75:1d:8d:8a:09:e1:05:8e:33:ad:96:42:
                    99:88:dd:09:4a:56:8d:7c:34:76:ce:4e:f7:9c:26:
                    a5:51:8a:22:b8:ab:b9:93:07:f6:23:96:4a:6f:2a:
                    05:32:fd:c5:8d:94:7e:d6:cc:01:ea:b9:90:01:87:
                    e7:99:3b:b9:75:3f:8c:a3:0a:22:48:88:7a:a0:fb:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:38:1B:9C:59:A8:8D:FC:21:83:9B:89:96:0D:33:1E:85:9C:62:FB
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/661CE74E912511EE9FB03869C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9240:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         38:69:51:ea:e8:a8:c2:d0:cf:65:89:45:aa:0b:98:21:14:d0:
         0e:ac:09:89:54:3b:46:5a:a4:61:35:c6:c7:38:32:e0:20:22:
         22:cc:91:55:b6:40:e3:20:fd:c1:70:cf:46:69:d1:a2:4e:1c:
         05:c9:42:34:df:18:42:8d:81:ea:b9:f2:56:a8:29:7f:f1:84:
         4c:d4:7f:df:39:ac:d9:b7:96:44:2e:3d:2d:f7:3a:bd:ee:ac:
         81:10:8b:ef:56:e6:e6:af:a3:42:7f:e1:d0:76:b2:47:62:f6:
         67:65:52:9f:72:54:ec:f9:ee:66:50:81:d7:cd:b4:bf:6b:46:
         84:28:5c:d9:0a:1f:a5:c9:08:67:9f:9e:75:d5:c2:bc:5c:5e:
         5b:3c:52:57:91:6e:4d:b8:30:f7:65:b6:b9:57:07:35:e3:1f:
         4a:9b:b2:86:35:14:e3:28:97:8b:bc:63:7d:4e:e8:24:b1:8a:
         d9:68:b8:fb:03:e3:d3:2f:72:97:57:ec:01:91:eb:0d:4a:25:
         15:aa:57:58:ff:6f:c5:33:88:3e:c0:58:9e:56:7c:56:6f:dd:
         c7:23:03:ca:40:b4:40:bc:32:30:05:aa:b1:cb:2a:9f:5b:24:
         f6:7b:48:1b:9a:70:2b:d1:91:8f:80:5f:fc:64:09:27:63:c4:
         3d:fa:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:04 2025 by rpki-client