Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/D4DE5FF8A01F11EC87D72549C4F9AE02.roa
File:                     D4DE5FF8A01F11EC87D72549C4F9AE02.roa (raw, json)
Hash identifier:          87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=
Subject key identifier:   1C:5F:E8:CF:60:44:3B:D7:3E:85:14:F4:BF:AF:B0:05:F3:D5:FE:0C
Certificate issuer:       /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial:       061A
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/D4DE5FF8A01F11EC87D72549C4F9AE02.roa
Signing time:             Sat 14 Dec 2024 22:21:37 +0000
ROA not before:           Sat 14 Dec 2024 22:21:37 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     24303
IP address blocks:        202.44.116.0/22 maxlen: 22
                          2001:df5:3780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
                          rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820AF
        Validity
            Not Before: Dec 14 22:21:37 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675e04f1-c546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:7b:04:73:6e:3c:2e:31:46:2f:c2:bb:b1:
                    db:b3:25:e0:b4:8e:be:af:bb:a4:a1:65:e0:34:f4:
                    3b:47:a2:cb:76:87:b7:e6:6e:03:3e:09:f6:b9:aa:
                    30:d7:21:3d:a5:6c:15:a8:2a:24:50:e8:6c:38:e2:
                    88:c1:4f:7b:e5:e6:85:da:3a:06:96:a2:00:25:00:
                    13:3a:6c:13:7f:c9:7b:44:78:85:5d:92:83:67:36:
                    13:5c:13:d3:ff:42:fa:34:92:2f:65:f0:ff:09:ee:
                    ad:98:3f:8b:84:11:c3:ee:3f:25:d0:e2:13:48:d9:
                    1b:93:b3:9c:13:c5:89:45:e0:2f:45:10:39:ca:37:
                    50:ef:1c:33:fa:30:3d:62:b5:7b:4c:67:06:b7:db:
                    af:08:b0:3d:f5:3e:5f:da:aa:f2:24:d5:c3:08:85:
                    25:c8:a2:29:52:74:48:8c:0a:03:54:0f:18:84:71:
                    9f:f0:d1:8b:18:8e:05:49:b3:a3:ac:b4:8a:26:f9:
                    8c:a6:ac:0e:d5:dc:3a:78:70:39:fe:c6:b1:ba:e6:
                    82:bc:1a:13:6a:48:57:59:c0:ac:52:55:89:d1:ad:
                    b6:65:b4:e7:f7:79:fe:df:8a:c7:87:fd:c6:4b:33:
                    5c:e1:d3:3a:19:87:42:1f:4d:93:af:20:89:38:c0:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:E8:CF:60:44:3B:D7:3E:85:14:F4:BF:AF:B0:05:F3:D5:FE:0C
            X509v3 Authority Key Identifier:
                keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/D4DE5FF8A01F11EC87D72549C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.116.0/22
                IPv6:
                  2001:df5:3780::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:74:1d:02:90:89:f0:7a:1f:82:f2:d0:99:34:e1:e4:31:
         4b:c7:cc:63:50:8d:10:07:27:8d:c4:a4:6e:22:24:73:00:77:
         43:96:40:50:e0:74:8f:ae:d4:04:4d:12:7f:0f:b0:4f:1e:64:
         e8:c4:4e:13:48:49:86:a2:10:bd:ca:2a:e7:8f:48:eb:88:f9:
         10:b3:55:48:60:30:aa:f9:ee:5d:c4:5f:7c:5a:96:21:1d:dc:
         f6:2b:a9:4a:b6:e6:13:3e:23:c1:fb:90:01:6e:72:78:8d:b6:
         74:23:f7:1b:f5:bd:39:fa:cf:21:55:f7:2b:00:ea:fb:8c:6f:
         94:62:bb:ca:f9:33:af:58:3c:5b:19:56:34:2f:22:98:73:1c:
         3a:38:04:da:4a:8d:33:22:1a:29:6c:83:68:a6:fb:cf:42:69:
         c7:23:93:06:c0:88:96:10:4b:70:a7:5c:e0:d4:d4:e2:a2:9e:
         84:d2:a7:04:27:d4:c3:7a:af:04:c8:62:63:93:3d:58:03:ff:
         5b:b4:5a:03:26:91:4e:12:ee:f9:57:29:f9:75:1c:d1:f2:d1:
         41:69:8a:60:2e:7b:09:50:9a:29:33:d4:68:9e:91:59:32:e3:
         01:92:ec:5d:e4:19:f8:60:8c:6a:9b:d9:af:70:30:75:c4:e2:
         7c:b7:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:51 2025 by rpki-client