Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/18F7410671F311ECBA5DA710C4F9AE02.roa
File:                     18F7410671F311ECBA5DA710C4F9AE02.roa (raw, json)
Hash identifier:          tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=
Subject key identifier:   CE:1C:E1:49:72:06:DB:CF:95:F5:DD:31:57:E2:04:9A:57:E8:A8:F2
Certificate issuer:       /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial:       0C37
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/18F7410671F311ECBA5DA710C4F9AE02.roa
Signing time:             Mon 30 Dec 2024 18:26:41 +0000
ROA not before:           Mon 30 Dec 2024 18:26:41 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     45905
IP address blocks:        116.212.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
                          rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3127 (0xc37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F88D
        Validity
            Not Before: Dec 30 18:26:41 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6772e5e0-a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:49:70:50:6b:09:23:00:5b:49:2e:93:5e:85:
                    90:6b:b7:fc:aa:bd:2f:cf:11:88:c5:c6:fa:e4:02:
                    44:37:f0:5e:26:4b:54:9e:14:38:8b:8b:c3:07:21:
                    52:05:55:d0:58:be:1d:81:b2:bd:a0:b7:b1:cd:9d:
                    9c:6d:97:cc:c6:39:22:7e:7e:c2:36:55:ff:5b:f4:
                    ac:b7:2c:4c:5b:a4:4e:f5:fd:58:c7:75:4c:6c:84:
                    67:81:24:da:e8:10:dc:34:11:47:ec:d0:c5:c3:c5:
                    43:a0:09:ce:68:63:15:ef:90:42:8f:37:10:5e:76:
                    df:83:01:ee:97:40:5a:76:01:f3:2b:5f:c7:d8:20:
                    a7:03:86:08:7b:40:80:87:34:b2:cc:ce:13:c3:40:
                    4c:98:f9:3d:cf:4a:6f:43:e9:bf:18:08:42:7d:27:
                    c8:53:f1:c7:fa:c4:72:6a:f8:9a:63:89:51:7e:bc:
                    87:45:99:65:f4:d8:24:f4:b5:4c:47:79:7e:d9:a2:
                    70:8b:c5:6b:1c:da:86:ae:c0:4e:1f:1d:8c:27:d3:
                    04:4f:94:6a:12:8b:6d:44:26:77:0e:0e:90:30:25:
                    ab:76:c2:6f:d9:55:6d:5c:98:90:ab:11:4e:05:b8:
                    67:02:0a:21:b9:8d:62:6c:48:d2:fe:41:6b:cd:32:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1C:E1:49:72:06:DB:CF:95:F5:DD:31:57:E2:04:9A:57:E8:A8:F2
            X509v3 Authority Key Identifier:
                keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/18F7410671F311ECBA5DA710C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:46:20:04:a7:07:af:4e:c3:4d:d1:ef:0b:b9:c7:67:40:
         94:5f:70:8c:61:7c:6e:c1:93:8d:40:7d:4e:7a:f1:f9:2a:63:
         4e:15:86:17:d5:19:8e:7e:28:83:e4:fb:36:ea:8a:86:d8:f4:
         3b:e1:13:4c:db:fb:ab:76:28:d9:4a:d6:dd:e3:d2:48:60:4d:
         02:07:9d:a6:87:87:d2:35:d9:47:e4:b7:c4:5b:77:a0:81:53:
         0a:28:9e:01:1f:e0:6b:ea:68:a3:0e:b7:1d:77:52:c3:3c:f1:
         48:1c:9f:2f:2c:55:ad:8c:b2:b7:83:c7:b8:1e:14:3e:84:31:
         61:25:7c:89:60:58:2b:e9:1c:df:27:33:09:cc:ab:2b:39:fb:
         22:06:a3:96:62:22:c3:dc:32:6e:d0:91:48:61:2b:89:c3:01:
         c1:44:2d:de:71:3c:d0:8c:66:07:9e:19:2f:93:1c:2a:9c:6e:
         f0:88:7d:48:f4:f2:31:0d:7d:69:56:e9:5b:70:80:5c:f1:33:
         e4:1a:30:d4:63:2b:e0:45:13:04:b6:5b:4c:4d:31:8e:cf:9c:
         91:5b:34:1b:93:f1:91:1d:fc:f3:2a:6a:79:58:a8:48:bb:e2:
         90:86:e3:1a:3a:9d:18:9d:0a:c7:45:c2:76:bc:9f:4d:e7:46:
         17:0b:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:05 2025 by rpki-client