Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F4B54F3CFD8F11EFB6B55C35C4F9AE02.roa
File:                     F4B54F3CFD8F11EFB6B55C35C4F9AE02.roa (raw, json)
Hash identifier:          4uhihAOiC0OKtMBhnmLA+GbAiFyFbInpr+PV4xmOtrk=
Subject key identifier:   42:FB:94:3B:C0:56:AE:6C:01:B2:FC:04:4F:97:A4:37:27:16:11:30
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       055F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F4B54F3CFD8F11EFB6B55C35C4F9AE02.roa
Signing time:             Mon 10 Mar 2025 09:13:40 +0000
ROA not before:           Mon 10 Mar 2025 09:13:40 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153433
IP address blocks:        160.250.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 14:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A
        Validity
            Not Before: Mar 10 09:13:40 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67cead44-6132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e8:0e:4d:2a:67:9d:5b:15:0a:18:78:b7:f3:
                    e0:5e:3d:4a:7b:cf:df:64:32:e5:cd:79:60:d7:d7:
                    87:5d:4b:aa:2d:ff:97:bb:a8:56:d3:cb:d7:26:c6:
                    bf:f4:5d:b3:e7:1e:c4:1e:ca:b3:ae:87:20:14:b2:
                    4c:63:6b:c4:fb:85:bb:3a:55:77:8a:b9:a6:9b:ab:
                    43:4a:98:61:e9:62:5d:84:ed:b6:76:84:b1:1d:85:
                    1b:b0:5d:1c:83:66:af:a6:16:13:4c:16:47:ea:3a:
                    75:9d:18:5d:c8:39:35:3f:16:1f:c9:18:1f:7c:38:
                    87:d7:d7:45:a6:96:7d:32:50:6a:cb:24:f2:ff:30:
                    23:14:a2:27:c2:92:d4:e2:a8:56:fb:88:f7:6a:7e:
                    17:bb:cd:7e:8e:46:57:3b:65:95:d7:8f:c4:9e:79:
                    5d:88:f1:f5:d4:f6:25:9c:07:4d:33:50:3e:bc:fc:
                    0d:f9:37:f7:c8:7d:44:6c:9c:a3:43:2c:67:a2:f0:
                    4a:31:7b:f0:82:c1:6f:c4:aa:57:16:5e:07:7d:70:
                    a2:c4:22:6f:ea:af:a1:54:09:98:c9:3d:5f:af:99:
                    95:74:4d:23:ff:93:a4:08:7f:34:ba:fb:a1:64:63:
                    09:50:83:29:3d:79:98:61:5c:18:4b:c2:24:d0:5a:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:94:3B:C0:56:AE:6C:01:B2:FC:04:4F:97:A4:37:27:16:11:30
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F4B54F3CFD8F11EFB6B55C35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:60:b9:80:6e:20:ea:3c:a7:5d:f4:c4:54:c7:f2:94:73:bf:
         17:21:04:1b:87:c9:56:9d:8b:0d:69:92:74:7b:45:53:88:50:
         6c:32:6b:bb:af:f8:52:d4:f7:a7:a7:ff:34:30:20:89:8e:54:
         f5:d8:6f:42:20:71:6c:ec:29:68:52:c9:13:b4:b7:bc:20:fb:
         fc:12:9a:8e:b7:f6:af:16:5b:3d:48:6e:79:c8:5c:7a:6c:3e:
         a3:58:fb:5e:55:90:5e:0c:07:8d:c6:db:ff:d0:80:e2:3b:2c:
         74:a9:04:21:6b:ce:f0:0b:4b:8e:37:c6:b9:8d:25:20:33:7d:
         a4:28:63:bd:fa:51:78:90:24:4b:b5:fa:e4:63:a5:57:ac:7e:
         c2:3b:69:97:87:a2:c2:c1:2f:89:e8:64:65:e5:33:7d:ae:78:
         ec:8a:8e:ec:44:52:c3:23:cf:a0:1e:29:35:e9:91:9f:32:24:
         5f:09:c1:8f:64:c5:1e:0d:87:24:4c:84:ee:c0:26:e3:90:ab:
         08:73:64:24:30:1b:b4:90:cb:66:c2:30:23:fc:37:81:3b:2e:
         6e:6d:c9:10:75:c7:84:20:dd:10:c9:23:f4:5e:54:03:f5:db:
         b5:3e:50:b1:81:70:60:de:32:df:bb:fa:8e:2a:28:42:bc:2a:
         0b:21:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:33:38 2025 by rpki-client