Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/7F4ED0A0B83011EFA5108619C4F9AE02.roa
File:                     7F4ED0A0B83011EFA5108619C4F9AE02.roa (raw, json)
Hash identifier:          0rI/XzwPRIVwwabd+r6TwmOXeplcoAxng7nnkYKOe44=
Subject key identifier:   17:7E:D9:3E:5F:C9:B8:F4:2D:D2:4C:F9:D2:7C:BA:73:96:F3:F6:2A
Certificate issuer:       /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Certificate serial:       011E
Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/7F4ED0A0B83011EFA5108619C4F9AE02.roa
Signing time:             Fri 13 Dec 2024 01:54:47 +0000
ROA not before:           Fri 13 Dec 2024 01:54:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137582
IP address blocks:        203.11.73.0/24 maxlen: 24
                          203.32.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
                          rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DEF0
        Validity
            Not Before: Dec 13 01:54:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=675b93e7-d3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:36:57:b2:5a:0a:a1:c6:ee:21:0f:29:f9:
                    32:40:43:ec:55:8e:ad:75:76:87:32:83:34:bc:3f:
                    e9:75:d0:72:3c:28:48:16:15:e6:ca:6a:da:84:5e:
                    c9:94:ac:16:a5:29:36:9f:72:f6:f8:3c:b7:fe:b8:
                    6c:4a:81:ff:cd:ab:a5:b3:ed:88:57:c0:09:68:f3:
                    8d:18:c1:b2:27:8a:77:2e:6c:c8:7e:ef:55:9b:9d:
                    81:cf:ea:93:5d:17:12:05:42:f7:48:bb:ec:01:61:
                    b9:d5:49:c5:58:25:52:18:d3:38:86:9a:46:47:95:
                    a6:a8:e5:5e:08:17:99:cf:2b:7b:35:19:c0:4f:25:
                    d9:90:51:9c:d9:42:9f:6e:8c:f8:54:57:a0:4d:aa:
                    36:aa:85:f5:c2:e3:11:2b:88:fb:e3:c5:42:8a:3b:
                    56:f7:4f:41:29:10:8b:30:5f:0c:9b:b1:5b:96:80:
                    43:6c:f5:dd:fd:ac:d1:3b:15:e3:3a:cc:ea:df:5c:
                    50:2a:5c:5f:c1:b4:6f:32:18:b5:91:7c:c9:7b:a8:
                    b6:c9:fb:81:fb:26:07:76:10:f4:0a:ff:71:ee:2b:
                    13:1e:14:4c:74:f6:f8:77:2a:ad:cf:48:81:0c:1b:
                    fb:90:b6:4b:26:84:11:1f:d3:37:5a:99:7b:20:28:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:D9:3E:5F:C9:B8:F4:2D:D2:4C:F9:D2:7C:BA:73:96:F3:F6:2A
            X509v3 Authority Key Identifier:
                keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/7F4ED0A0B83011EFA5108619C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.11.73.0/24
                  203.32.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:9c:39:40:f8:5e:4b:be:92:b4:b9:ce:1c:be:51:0f:02:
         65:1a:4a:fc:41:8b:b0:3c:71:84:95:a6:af:ed:9f:a7:70:43:
         1c:6d:ae:64:c2:9e:76:f7:b8:a5:4a:25:4f:d2:eb:fd:20:2e:
         4a:e8:1c:98:87:cb:30:20:14:d3:a0:2b:32:9e:41:62:66:54:
         e0:09:38:c6:e0:7e:eb:45:3b:0b:c8:59:d2:bc:fe:99:d2:d5:
         54:ab:2c:c1:dc:92:4f:5e:91:cc:68:59:cb:38:81:ee:75:e7:
         35:59:42:bf:fc:dd:54:54:62:70:f4:b3:27:34:5c:08:93:47:
         6f:19:bd:fc:44:38:83:e2:ba:95:86:a2:d6:6f:f8:98:85:68:
         b2:47:01:b1:24:33:7b:0a:5a:81:e2:b4:9b:a7:fa:93:67:73:
         37:b5:f1:75:d3:9d:48:4c:5c:7e:69:fe:97:08:bf:36:2b:9e:
         30:85:67:31:5c:dd:a6:08:cc:f8:03:a1:61:76:9c:42:d7:82:
         f1:61:c1:9d:0d:a0:b0:f4:12:bc:b6:2a:f0:11:e1:a0:72:e4:
         82:93:53:a9:13:ca:bc:a4:36:6e:b4:9b:ac:5a:b2:11:dc:55:
         3c:57:c4:d7:a0:ee:44:ec:e5:ec:a0:1e:f9:21:42:0b:43:b2:
         1d:02:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:36:35 2025 by rpki-client