Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/2227B66CF97B11EFA2B83631C4F9AE02.roa
File:                     2227B66CF97B11EFA2B83631C4F9AE02.roa (raw, json)
Hash identifier:          Qmv4NznXsRfVMeI2JKAwy+QoVAJUJQXFMJng7cjxgg4=
Subject key identifier:   07:B2:A0:24:BB:52:46:E4:06:9C:3A:8F:F2:04:BB:FD:56:FB:CB:CA
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       12EE
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/2227B66CF97B11EFA2B83631C4F9AE02.roa
Signing time:             Wed 05 Mar 2025 04:34:32 +0000
ROA not before:           Wed 05 Mar 2025 04:34:32 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4632
IP address blocks:        203.50.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4846 (0x12ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983
        Validity
            Not Before: Mar  5 04:34:32 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67c7d458-27fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:ef:21:65:51:d5:aa:45:5a:72:a7:e5:ae:
                    79:71:d0:4e:be:d2:5f:35:b8:f5:25:b4:c6:be:ec:
                    f5:48:93:5b:09:c6:ab:39:1b:02:9d:d1:07:51:3d:
                    60:39:2c:3e:61:d0:71:f1:1d:86:7b:44:fc:93:34:
                    d4:9e:ea:a9:31:5d:0f:a1:61:fb:5c:9d:51:08:85:
                    5b:48:fd:81:2a:3d:52:08:ba:5e:f6:1c:e8:f4:ec:
                    97:8a:80:f0:52:31:32:7b:8a:51:9a:66:5e:b1:8c:
                    46:a2:07:45:3a:e5:66:c4:20:90:a1:e5:8d:ce:23:
                    1d:14:1c:ca:0b:1d:df:7b:80:5d:c4:31:3b:28:c9:
                    fe:da:64:43:a9:7f:e2:01:b7:d0:2c:83:23:bc:e9:
                    d6:d7:c2:15:d7:31:24:60:54:ac:44:53:13:74:73:
                    ea:d3:5c:12:16:ec:70:d6:7b:4c:02:61:bc:46:cb:
                    75:f7:57:c4:d6:c2:36:0c:aa:27:6a:3e:24:44:9f:
                    c0:80:93:09:e7:17:29:d0:62:f4:3d:e2:1c:be:a6:
                    a2:38:bc:05:56:f7:9e:90:0a:a4:83:cf:12:dc:d1:
                    d1:a9:84:af:2b:5b:8f:ce:82:ba:41:91:21:23:a5:
                    18:ee:4a:8b:bb:42:74:61:e2:63:11:f3:96:73:4c:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B2:A0:24:BB:52:46:E4:06:9C:3A:8F:F2:04:BB:FD:56:FB:CB:CA
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/2227B66CF97B11EFA2B83631C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.50.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:28:f7:41:a4:30:db:45:0e:88:d6:6b:3c:49:25:45:ae:
         27:e9:52:fe:f3:c6:64:3e:45:6e:4b:9f:3d:80:b3:91:47:0d:
         e5:b8:70:f9:99:b1:75:ed:37:51:08:2f:09:4a:bc:15:94:31:
         c7:51:b8:28:6a:00:3a:9b:fd:1b:4b:99:4e:a6:12:d6:83:86:
         bf:5e:db:d0:95:cb:0c:ba:b8:f0:cc:b5:85:0d:da:df:cd:ec:
         8b:2f:56:11:76:27:b8:e3:7c:81:ae:e3:11:f2:33:26:39:a9:
         1a:38:93:3e:9a:84:04:92:9c:30:2c:c6:51:3b:a2:c2:97:88:
         8d:b1:5f:38:ac:76:16:76:fe:fe:de:46:0d:47:a6:ad:64:59:
         9f:51:b5:e0:da:a7:5e:e1:30:10:46:43:f7:61:1e:09:59:c3:
         ee:b1:71:8f:54:d7:e6:63:ed:e0:bd:50:3b:31:48:04:d7:98:
         34:8a:8f:b9:78:7b:94:eb:74:97:e9:5b:0c:d7:32:43:65:70:
         65:8e:cd:26:51:99:a8:c4:67:53:d1:22:b5:53:44:08:ea:54:
         29:3f:a6:7c:9c:90:97:a8:f7:78:ce:e4:ab:84:03:1b:dd:68:
         e8:52:6b:fe:fb:24:e6:20:1b:79:55:e1:b9:e6:ce:56:64:50:
         82:e4:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:49 2025 by rpki-client