Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B0ED2EA7BF211EF90202B73C4F9AE02.roa
File:                     1B0ED2EA7BF211EF90202B73C4F9AE02.roa (raw, json)
Hash identifier:          79caLezr+QEJ1HIhzGdZCpZbxxSY4eC5k0Z85aqz+aw=
Subject key identifier:   55:56:0A:F9:D1:28:33:27:1C:E4:4C:96:1E:57:FD:C0:06:F9:10:92
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       9A3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B0ED2EA7BF211EF90202B73C4F9AE02.roa
Signing time:             Thu 26 Sep 2024 10:28:44 +0000
ROA not before:           Thu 26 Sep 2024 10:28:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     153244
IP address blocks:        2401:c360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39487 (0x9a3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Sep 26 10:28:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66f5375c-8026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:31:1c:61:58:11:84:a3:eb:23:eb:3c:7f:
                    4c:86:a7:91:d4:17:da:ad:e2:d6:2d:f1:d4:73:2f:
                    dd:a4:7f:e0:f9:9a:b8:e6:b8:10:78:a9:8a:b3:a1:
                    4b:83:58:35:b3:71:42:b4:62:df:39:ea:9c:5c:d5:
                    60:67:a8:9a:ec:bd:6b:fd:48:c5:2a:1c:b2:a9:0a:
                    f1:f2:15:ed:16:39:69:f0:0f:7c:4f:8a:e7:6e:a4:
                    d2:76:b5:2e:b3:0e:7b:02:d6:39:54:78:39:e5:8a:
                    01:94:7a:58:be:d3:de:4b:f5:b8:85:2a:c1:c6:4f:
                    ad:ed:aa:47:42:f0:29:e0:bf:29:46:47:a1:d9:45:
                    55:f4:37:28:08:ff:f3:ec:43:51:6d:9e:f9:fc:31:
                    df:b1:dc:06:a1:04:3b:92:ca:ff:17:29:4e:4a:92:
                    86:4e:e5:ab:49:bc:fb:3e:ba:75:30:7a:f8:09:f6:
                    34:a3:65:39:03:44:df:86:f9:b4:3b:1f:b8:a4:b3:
                    b5:01:9e:28:9d:23:63:c2:09:16:09:89:c6:68:3a:
                    aa:35:74:7e:ef:4b:75:92:89:05:d8:97:66:4c:b8:
                    b5:db:3a:35:6a:b0:ff:c2:a3:40:12:ac:9c:21:72:
                    1c:30:06:23:55:49:46:c3:10:21:b3:7d:02:a6:97:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:0A:F9:D1:28:33:27:1C:E4:4C:96:1E:57:FD:C0:06:F9:10:92
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B0ED2EA7BF211EF90202B73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c360::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:73:84:27:e9:92:f4:8f:0d:1e:90:e4:64:77:1c:2a:96:
         ae:05:74:30:db:16:74:9f:73:c9:9a:06:1f:43:33:ca:b4:bf:
         e6:a9:49:e1:bd:7e:31:3d:10:46:88:a8:9f:e3:5b:d0:80:ed:
         b2:85:e4:09:a5:67:e0:0d:36:f7:30:2a:a6:b9:fa:1a:dd:82:
         ce:e2:6f:5d:b2:a3:8a:99:aa:19:7d:39:b5:60:39:a5:a1:0d:
         d1:56:af:ed:f4:75:d9:60:32:f7:18:41:4d:41:77:cd:1c:33:
         cf:3d:f7:88:ee:09:39:87:e6:4b:73:43:77:87:5c:7b:2e:e4:
         d6:d2:cc:b7:4c:d0:d8:dd:6e:d5:0d:b5:ae:22:9e:cf:cd:fd:
         41:3f:31:fd:9a:9f:13:96:a4:c9:45:73:0c:24:fe:f4:fc:bb:
         0a:50:19:40:e4:bc:ac:fe:c2:e7:35:85:39:72:74:e8:ac:44:
         7f:e7:57:ad:1c:0b:6a:98:96:0b:52:13:e5:c7:ba:f7:e2:0f:
         06:83:4e:d8:4f:40:8a:c0:be:c3:b2:f9:03:bd:81:5c:42:ed:
         77:c1:b4:d4:4e:d9:62:4d:c1:60:b5:ec:63:5e:70:9c:cb:7d:
         c7:6f:c6:90:2e:5a:8b:a6:1a:ac:13:98:2d:dc:0b:4d:7d:da:
         98:1e:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:52 2025 by rpki-client