Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/1FB96962DA1311EE81216D86C4F9AE02.roa
File:                     1FB96962DA1311EE81216D86C4F9AE02.roa (raw, json)
Hash identifier:          322ioaBzAzi6yUpdAJJxn+TJMCIFPpfe4ryfjRmmpZg=
Subject key identifier:   D2:96:AE:0B:83:D1:6A:F3:2E:C2:51:28:E1:0F:DE:4F:97:24:E3:EA
Certificate issuer:       /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial:       ED
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/1FB96962DA1311EE81216D86C4F9AE02.roa
Signing time:             Fri 31 Jan 2025 04:49:30 +0000
ROA not before:           Fri 31 Jan 2025 04:49:30 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     141045
IP address blocks:        203.145.36.0/23 maxlen: 24
                          2401:5020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D84
        Validity
            Not Before: Jan 31 04:49:30 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=679c5659-6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:2e:cb:c3:57:e6:15:68:f3:6d:17:bf:5d:
                    59:d6:90:73:6b:a5:db:7d:d8:16:63:e4:e4:04:e0:
                    5a:9f:30:bf:c8:77:78:1b:a4:cb:3f:f3:39:1b:04:
                    b8:8a:73:31:02:26:d0:8e:36:ff:07:88:34:16:d0:
                    da:78:17:90:86:31:0a:91:91:61:34:28:b7:f7:ca:
                    2e:9a:b9:eb:8f:aa:1f:9b:ed:96:7c:52:aa:a8:0d:
                    09:d2:e4:f0:cd:47:f5:2d:15:be:30:65:1c:3b:60:
                    8b:91:25:33:fd:fe:8e:63:7c:ac:2b:52:20:6d:37:
                    fd:bc:2b:30:5c:28:42:6b:fa:ef:4c:3d:89:28:eb:
                    44:83:c4:aa:d5:34:21:da:bc:13:27:8f:94:e1:20:
                    7e:fb:84:37:97:6d:7a:91:d2:71:d3:e8:75:02:60:
                    55:90:76:8c:73:a8:e6:80:63:bf:66:5d:16:50:85:
                    c4:94:4b:7b:b3:11:4b:72:84:6a:6a:ec:90:08:77:
                    35:42:1f:bd:54:00:68:76:9d:70:67:fd:25:12:21:
                    e4:55:c9:37:58:7e:45:ba:09:10:6f:a8:0e:7b:a0:
                    78:a1:f0:3d:45:71:18:2b:de:4e:a8:88:13:a1:ef:
                    45:af:20:2a:9e:b6:d5:4e:55:4c:af:b6:29:0d:36:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:96:AE:0B:83:D1:6A:F3:2E:C2:51:28:E1:0F:DE:4F:97:24:E3:EA
            X509v3 Authority Key Identifier:
                keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/1FB96962DA1311EE81216D86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.36.0/23
                IPv6:
                  2401:5020::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:48:36:53:3a:75:99:05:87:fa:86:1b:ee:8a:ad:91:e6:
         5b:86:0f:07:da:70:5f:57:92:22:60:34:46:ad:f9:22:81:e9:
         2f:45:89:ac:a2:4e:13:f7:be:c9:96:a9:af:4d:e0:8e:c3:55:
         36:30:54:ce:f2:c8:ff:13:61:95:54:fc:5c:63:cb:41:4c:33:
         d4:ce:d3:3e:bd:05:b3:83:35:df:79:65:61:eb:fc:8f:15:85:
         08:6e:e3:9a:22:e3:32:29:08:0f:f4:ee:7f:ac:38:6b:a1:a0:
         04:22:02:76:ae:69:ef:e0:7b:6a:dc:ca:71:db:ea:5f:46:c8:
         d5:3a:54:2d:f8:65:e2:df:09:b6:52:23:4f:b6:14:91:b0:1a:
         b5:e5:67:06:bd:b2:6d:83:3b:2d:15:57:25:65:e9:51:ec:1c:
         6d:f9:03:99:53:9a:e5:f3:af:39:b5:da:f3:95:ea:bc:64:8f:
         f1:81:ec:6d:de:e6:18:f6:f9:fa:aa:4c:9c:82:60:62:14:9b:
         10:8f:f6:0e:83:64:36:c9:a3:f3:f2:95:e6:4d:3f:4e:52:f1:
         08:7e:87:d4:0e:ae:45:95:a6:41:6c:ed:a7:c8:6e:a3:b4:21:
         0d:cf:55:4f:53:33:16:7e:fe:5a:78:22:78:63:01:1c:96:f8:
         4a:9f:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:37 2025 by rpki-client