Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
File:                     DC50B57AE84511EB87AD6B49C4F9AE02.roa (raw, json)
Hash identifier:          TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=
Subject key identifier:   EE:09:44:0C:1D:37:C3:25:31:A2:EB:B3:00:62:C4:4E:E9:51:5B:4E
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       348A
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 14:40:58 +0000
ROA not before:           Wed 02 Apr 2025 14:40:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132890
IP address blocks:        182.54.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13450 (0x348a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C
        Validity
            Not Before: Apr  2 14:40:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ed4c7a-73a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:47:d2:d9:fc:a2:f6:0b:aa:b4:5c:8d:54:
                    44:ad:62:27:7c:4a:4c:2d:e6:3e:eb:b3:46:c8:6e:
                    91:8f:3f:79:eb:04:f9:a1:10:df:2a:9a:d4:f8:2c:
                    30:f8:26:a4:72:bc:8d:c7:e7:8b:64:43:d8:db:6e:
                    da:32:d1:76:38:30:9f:6b:55:9c:19:d6:44:6d:2d:
                    d6:3d:50:f5:75:dd:d2:4e:03:60:22:a5:54:00:fd:
                    44:91:66:b7:0d:05:6b:e5:92:d4:ba:33:3e:1b:d0:
                    76:d1:4c:82:0f:b5:77:4c:6b:5a:db:66:72:a3:5b:
                    c2:c9:a6:f4:c7:4d:6e:19:ae:83:15:db:bf:4b:96:
                    51:77:12:83:c6:66:46:e2:e8:60:7d:ff:99:73:86:
                    e6:fe:f8:26:45:ee:4c:5e:d0:47:26:cb:c7:a9:b6:
                    0d:cf:99:1f:b8:29:d8:9c:a2:5d:00:af:0b:27:84:
                    a1:89:de:00:51:fd:e8:16:e8:91:fe:07:ae:c1:96:
                    94:5f:11:ce:69:c3:ee:eb:e1:18:55:c7:4a:2b:f0:
                    ef:c8:c3:7d:c8:3a:42:97:ff:5b:3d:bc:27:f6:8e:
                    d0:81:f0:08:02:9a:3b:46:2a:3c:96:d9:ac:bc:49:
                    0d:e1:3e:2e:04:e4:b3:13:2d:4e:06:ff:03:44:52:
                    fa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:09:44:0C:1D:37:C3:25:31:A2:EB:B3:00:62:C4:4E:E9:51:5B:4E
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:6f:20:30:b1:19:41:d1:98:29:7c:d5:3a:71:43:4d:e3:
         b1:2c:c9:09:f7:a9:51:60:48:0e:c1:8b:10:99:fa:c4:75:58:
         41:bc:e9:29:d7:b1:c9:2b:3f:95:62:fe:32:1e:2b:03:62:d6:
         44:e4:c2:52:8f:d5:cc:48:e1:2e:bc:7e:83:67:33:b0:e0:cb:
         1d:55:43:67:34:99:e2:bb:25:34:4b:bc:76:ab:d8:55:c4:62:
         f1:04:b9:7e:4e:96:31:b3:4a:20:43:41:19:90:bf:5e:f9:81:
         48:ef:a3:6c:98:81:4d:6d:5e:29:36:98:ea:32:70:a5:81:fa:
         84:c1:2e:2f:72:a1:fe:20:b3:2e:ee:64:3d:b7:6e:a7:3c:d9:
         2a:0f:56:19:42:38:70:e1:13:1c:ae:36:cc:ea:5c:54:16:99:
         15:93:92:2a:95:46:d1:06:d6:66:25:0d:49:57:3f:da:69:b6:
         60:8e:64:0d:55:1a:49:d3:f4:e4:f6:b3:63:89:85:9e:a7:ba:
         8a:43:06:22:68:52:d2:8b:6b:e3:46:a8:5e:76:8f:f8:fa:d1:
         7d:fc:ec:a8:68:be:f2:21:52:0c:41:26:d7:e0:26:03:c6:9f:
         bf:e6:70:a1:87:9a:dc:ab:89:5d:52:db:3c:fc:d8:e0:5d:a6:
         61:dd:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:00 2025 by rpki-client