Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/766B426A7A9011ECA266DE36C4F9AE02.roa
File:                     766B426A7A9011ECA266DE36C4F9AE02.roa (raw, json)
Hash identifier:          j9zT2tbgYHNW+zQe8fJ7BxqX2WRK2n0Np1/48KzCevY=
Subject key identifier:   48:2D:D3:10:37:C3:C1:E4:A1:37:11:DA:AA:10:69:16:AD:B2:13:46
Certificate issuer:       /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D
Certificate serial:       03CD
Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/766B426A7A9011ECA266DE36C4F9AE02.roa
Signing time:             Thu 13 Mar 2025 00:26:00 +0000
ROA not before:           Thu 13 Mar 2025 00:26:00 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38911
IP address blocks:        203.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl
                          rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195456, serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D
        Validity
            Not Before: Mar 13 00:26:00 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67d22617-5147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:21:05:28:8c:56:e5:d6:80:75:21:c3:d5:
                    7b:58:4a:e3:5f:11:21:e9:c8:68:fe:00:79:53:90:
                    02:4d:c3:a8:35:4d:6f:04:c2:9a:fd:9f:99:fe:f5:
                    da:70:2a:e0:2d:b4:dd:35:c1:8d:60:23:94:e6:2d:
                    bf:fd:0b:27:34:55:9c:b8:43:0a:fd:1c:b9:b3:74:
                    3b:58:e8:21:51:11:69:6e:04:10:89:2b:71:86:dc:
                    8f:f0:52:61:37:6b:6f:c2:5a:db:a4:a7:1d:d9:2e:
                    0e:20:1b:39:a4:96:e9:e8:bf:66:83:00:35:2d:06:
                    14:bc:7d:2d:60:f4:c9:2f:32:9a:37:06:68:29:0f:
                    27:ee:fd:49:d8:a7:df:0d:54:f1:32:f8:e3:3b:e8:
                    d3:fd:03:14:cf:ad:0e:df:af:df:c0:b3:3a:90:54:
                    2d:97:57:51:56:53:31:52:e4:8e:7d:18:cc:21:69:
                    47:5a:75:36:79:e6:09:3c:83:c9:28:53:d7:4e:65:
                    aa:b5:25:22:1e:36:40:9a:2a:d0:ad:23:39:61:bb:
                    ae:14:54:70:e8:a0:ef:91:96:70:9d:fb:c3:b5:a6:
                    5a:7d:70:2d:5b:dc:96:20:38:aa:08:43:0b:d6:c6:
                    21:45:c2:3d:b8:2b:4f:01:4b:68:08:1a:c6:03:37:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2D:D3:10:37:C3:C1:E4:A1:37:11:DA:AA:10:69:16:AD:B2:13:46
            X509v3 Authority Key Identifier:
                keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/766B426A7A9011ECA266DE36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.100.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:6a:65:4c:8f:7a:48:af:cc:ab:1b:ca:77:f2:ba:c5:41:
         68:ce:86:86:c2:cb:fc:d6:9d:09:4f:e1:06:4b:9b:32:d1:c3:
         4e:8e:67:aa:2c:76:bb:ac:0f:f3:c7:1b:cb:65:d2:5d:e0:eb:
         38:b4:74:4d:d2:c4:c9:22:84:c6:8c:81:f1:7a:59:61:ef:cb:
         95:b3:39:c9:1e:06:f4:07:f9:d4:93:5a:ba:6d:2a:a2:0d:dc:
         1b:79:b4:f6:48:a8:8c:c8:34:1f:de:b2:66:0e:64:31:75:20:
         74:fd:19:30:f1:6d:8e:57:3e:33:3c:05:d9:5d:cd:aa:f3:7a:
         56:f0:e4:ae:b8:28:66:89:1f:25:55:44:de:ca:c5:d4:b0:d3:
         42:6d:6e:07:f6:5c:85:c8:14:07:4e:e9:d7:fb:65:74:e8:c6:
         18:bd:52:fd:5b:6f:b5:25:ce:4a:a7:e0:8a:64:68:0f:67:56:
         04:ad:78:a8:14:08:f9:12:27:19:f2:18:e5:7a:b8:a5:9d:98:
         60:7e:06:02:69:9a:f5:a2:ae:f8:42:7f:d7:ea:ed:6f:d2:8c:
         d3:5d:00:93:6b:7d:17:7e:25:7d:c7:93:ef:83:e2:99:95:62:
         ce:ce:06:1b:a1:47:e9:63:d5:7d:c6:e8:01:58:c0:e6:e2:e0:
         9c:3d:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:18:32 2025 by rpki-client