Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
File:                     F0D7EB5097FA11EE90066875C4F9AE02.roa (raw, json)
Hash identifier:          vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=
Subject key identifier:   D6:68:7B:28:6A:CF:81:7B:76:34:15:73:71:48:3B:2C:4F:D3:C9:7D
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       BA
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
Signing time:             Thu 05 Dec 2024 04:19:51 +0000
ROA not before:           Thu 05 Dec 2024 04:19:51 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        203.22.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A
        Validity
            Not Before: Dec  5 04:19:51 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675129e7-4079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:4e:6b:73:4b:c4:0a:19:4e:05:76:52:3d:
                    12:eb:32:11:62:ff:19:61:d9:90:cd:c6:d5:89:3f:
                    5a:6d:8c:0f:a7:4d:98:27:b0:7b:14:93:ac:1c:a3:
                    34:85:92:f4:4c:5b:a8:dc:44:4a:5e:14:7e:c0:57:
                    0f:b8:a1:7b:cd:1f:4a:4f:ad:f2:91:71:77:92:4e:
                    d6:36:1f:7d:94:f7:62:32:7e:f6:f6:52:12:5f:1d:
                    c5:05:4f:4a:69:c2:dc:f1:96:9f:ef:ae:f7:4f:c4:
                    67:77:92:8f:5c:2e:ee:08:d6:78:b8:7f:57:fc:7c:
                    8b:67:9c:db:d1:a2:82:9c:41:56:f8:b6:a1:f1:1d:
                    4b:57:4d:e4:23:12:70:9b:f1:59:98:9a:ca:03:27:
                    1a:e3:06:88:c0:1f:68:27:f0:d5:a7:ad:6c:04:84:
                    23:77:40:52:db:fd:7c:b1:fe:57:c4:3b:a9:d2:ed:
                    37:98:d1:e1:67:d2:95:ac:91:7b:b4:5e:3c:54:11:
                    7a:8d:55:ab:21:17:5d:19:b8:39:10:a2:d3:66:5d:
                    24:b0:da:79:b6:97:79:0d:af:68:f2:f5:45:75:c2:
                    88:f7:c1:e4:5c:b6:c5:02:31:db:29:94:f4:1a:3f:
                    4c:8c:b1:15:be:6d:46:9e:d3:4c:d2:dc:79:d4:04:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:68:7B:28:6A:CF:81:7B:76:34:15:73:71:48:3B:2C:4F:D3:C9:7D
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.22.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:10:4a:ea:f2:9f:ac:9f:11:5d:85:20:56:a1:18:64:0e:d3:
         dc:07:57:e5:bf:28:39:32:b4:21:65:39:63:bc:e4:5b:e0:ee:
         98:9a:95:f8:0d:80:b1:07:c3:24:18:52:86:77:ba:70:2a:c9:
         9c:14:a3:dd:ac:7c:70:fb:fd:da:73:69:a2:51:7a:23:9f:ec:
         9f:e4:64:26:87:f8:38:51:3a:50:67:19:1b:4d:72:f0:f8:52:
         c2:51:1c:5c:c4:26:cc:54:67:95:71:c4:44:a1:53:78:38:bb:
         2e:be:7e:c5:41:49:bb:ad:89:a7:1c:62:06:1c:b4:0e:70:b6:
         4a:e1:b0:c6:54:2c:ac:32:da:1c:dd:f0:f7:97:14:85:9d:6b:
         ee:27:dd:dd:d2:f5:93:58:1a:2c:a2:a1:6d:73:48:93:42:21:
         13:52:be:10:28:be:a6:f4:4d:e0:28:ad:f0:90:fe:b4:36:e1:
         ea:3b:ae:b9:85:e1:73:d4:4b:a7:e3:9a:5a:be:f8:7f:ed:3b:
         1a:71:fb:99:c4:25:53:6f:4e:10:f0:54:41:20:55:c9:e3:22:
         4e:3a:6d:bb:b0:aa:8d:dd:6f:38:99:29:d8:51:ee:dc:33:55:
         f0:35:cc:9b:96:21:29:ea:8a:7c:b7:77:d3:5a:ce:7f:2c:4a:
         be:62:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:31 2025 by rpki-client