Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/C31D6D082BA611EF82D8BF21C4F9AE02.roa
File:                     C31D6D082BA611EF82D8BF21C4F9AE02.roa (raw, json)
Hash identifier:          cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=
Subject key identifier:   F9:EA:CF:F1:02:4C:D7:A6:92:2B:6C:47:98:FA:1A:4C:F2:5E:D0:39
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       129A
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/C31D6D082BA611EF82D8BF21C4F9AE02.roa
Signing time:             Sat 08 Mar 2025 17:06:16 +0000
ROA not before:           Sat 08 Mar 2025 17:06:16 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137966
IP address blocks:        167.179.15.0/24 maxlen: 24
                          167.179.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4762 (0x129a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436
        Validity
            Not Before: Mar  8 17:06:16 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67cc7907-d03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:3b:ea:f5:3a:ab:30:4d:22:72:47:93:52:
                    0a:35:8f:f9:bc:57:55:c0:1c:fb:4c:eb:9d:5d:43:
                    34:8c:b0:ca:a0:07:43:7a:fc:17:67:03:af:ae:09:
                    19:2d:a4:39:c2:17:d7:9c:e9:ea:4b:fb:67:92:30:
                    9b:32:8a:83:b8:bd:a4:32:7d:83:dd:51:46:73:ef:
                    72:6c:38:02:8c:ac:d3:4b:9c:93:a8:00:0a:f4:5a:
                    10:47:20:af:15:61:f3:c8:c7:62:c4:79:69:87:b3:
                    4c:98:41:7b:d7:aa:18:90:36:87:08:9b:84:6b:35:
                    52:e9:bc:4e:71:3f:45:23:01:a2:40:89:8e:53:f7:
                    8b:11:c1:8b:cf:f6:01:e8:a9:d7:00:fd:8b:66:d9:
                    d0:3a:8c:7e:51:3f:b2:0f:3a:b7:c4:1b:42:2c:ca:
                    2b:d3:26:0b:c8:f8:bc:92:a8:b0:6c:a1:6b:bf:75:
                    53:9c:df:06:ed:19:76:01:87:a2:10:fe:28:4a:f6:
                    7c:a4:a0:fb:bc:c5:82:1c:fc:1b:0e:82:91:d1:fa:
                    c1:f8:72:61:8c:50:94:64:55:bf:c9:6e:81:0a:df:
                    07:15:83:ac:99:2c:5b:9e:01:5f:de:90:51:25:95:
                    6c:a7:3f:51:50:fa:45:2c:79:84:a6:54:a3:d5:6b:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EA:CF:F1:02:4C:D7:A6:92:2B:6C:47:98:FA:1A:4C:F2:5E:D0:39
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/C31D6D082BA611EF82D8BF21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.15.0-167.179.16.255

    Signature Algorithm: sha256WithRSAEncryption
         d3:5d:37:18:90:fd:32:4a:5c:94:fc:0e:5f:36:b8:44:c3:db:
         52:c9:05:c7:7b:f9:db:8b:27:1f:32:c7:b5:9e:a5:ca:ec:1a:
         37:ea:94:32:db:fd:f6:95:a5:d5:66:0f:ea:d7:a1:08:d0:d4:
         57:ab:1b:36:7a:8d:df:a8:3d:20:e1:51:5f:a3:d3:6f:a4:51:
         fa:e5:29:b3:18:30:eb:7e:cd:c2:ac:e8:ea:a7:33:d0:ce:72:
         fb:28:4f:ed:8b:aa:db:1b:38:34:5e:14:15:cd:f5:10:e4:6f:
         54:b5:58:32:23:2c:67:32:c2:fb:7d:dc:52:2a:3d:e8:1d:58:
         13:b7:83:da:a5:a0:1a:d8:18:84:6c:20:e8:2b:03:8e:44:31:
         bd:f5:b5:8b:01:51:a8:76:16:f8:82:3d:c5:d2:7b:4b:6b:25:
         dc:35:9d:3b:0e:af:e7:a6:0d:cd:f9:1a:d5:14:e6:d2:c8:1b:
         05:57:5c:63:89:63:fb:12:a5:a7:e7:ea:22:2e:2a:6c:64:05:
         1a:5f:c6:c6:45:de:ba:49:93:fc:5a:1b:f3:a3:53:ee:b2:1d:
         e8:1c:b0:74:96:46:16:89:a1:41:7e:35:4b:62:7e:06:ad:36:
         6e:b7:18:b1:0d:21:05:9d:60:8c:82:96:7f:c0:5d:23:c7:96:
         c4:91:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:18:13 2025 by rpki-client