Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
File:                     7E87079C721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier:          92w1fye0SxPyuMXOUo3oQSR/PutSLU3xezGSyrJIQ0o=
Subject key identifier:   B3:12:01:73:F1:CC:F1:8E:C0:42:B6:C5:59:6D:18:5C:EF:B0:D6:62
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       B4
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
Signing time:             Sat 21 Dec 2024 05:49:55 +0000
ROA not before:           Sat 21 Dec 2024 05:49:55 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     140618
IP address blocks:        202.28.72.0/24 maxlen: 24
                          202.28.73.0/24 maxlen: 24
                          202.28.74.0/24 maxlen: 24
                          202.28.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2
        Validity
            Not Before: Dec 21 05:49:55 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67665703-11f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:49:ce:ce:1b:5a:7c:81:fd:74:97:0b:3b:
                    7d:ca:e9:f7:5f:e1:2e:83:70:36:d7:ee:5d:89:ff:
                    11:82:36:0f:f8:3e:49:2f:3c:59:f6:89:e3:36:48:
                    09:dd:cd:30:1d:18:6d:d4:d0:f4:65:e2:7c:04:b8:
                    de:ae:a5:8f:be:01:07:2b:8c:81:4d:67:75:b5:7b:
                    65:d3:29:71:09:30:f7:26:50:2b:4a:39:75:93:98:
                    60:b0:c6:ef:49:4c:8f:58:3d:9e:4c:1f:24:6b:5d:
                    a1:1c:4b:ab:27:db:a3:37:96:92:89:e6:b2:44:51:
                    ba:f6:6f:04:4e:26:1a:21:0a:34:57:eb:61:dc:92:
                    8e:4d:c9:6b:ac:0b:53:25:9b:4a:d2:9c:00:cf:4d:
                    61:6f:91:77:bc:01:b3:a8:fe:76:fc:99:c5:98:b4:
                    66:29:23:1e:4e:17:fe:98:cc:28:3c:3a:a1:86:ba:
                    39:b2:3f:45:7f:2b:26:3c:73:43:ae:b3:10:d0:19:
                    75:ac:54:7e:9c:d5:32:e1:04:5a:73:80:32:d7:07:
                    38:a6:f6:6f:ca:58:ca:b8:dc:d9:1e:e1:d5:6d:6c:
                    3d:71:ea:2b:b5:8a:81:52:76:57:df:f3:6d:44:2a:
                    fc:15:aa:9b:27:11:5d:38:4d:8b:98:ca:98:7e:7d:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:01:73:F1:CC:F1:8E:C0:42:B6:C5:59:6D:18:5C:EF:B0:D6:62
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.28.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:01:2c:3e:8c:9d:83:fe:a2:e9:63:4b:b4:18:e8:07:f2:bc:
         1d:8f:4e:6a:f3:5f:6e:a4:4f:61:d1:52:71:9a:6d:a6:e1:4f:
         ea:24:d6:4c:0e:d9:21:38:10:0c:1c:1c:30:94:c0:6a:d9:2f:
         05:78:84:ee:16:8c:17:50:ca:77:e2:f4:09:5a:97:98:a1:98:
         7b:c1:6f:e1:17:e9:24:06:82:3a:40:62:a1:32:e8:b1:49:03:
         dd:cb:fe:01:32:bf:74:58:5d:90:ac:55:47:d8:e9:23:c7:b6:
         17:63:ea:a5:1c:96:16:32:f1:ea:a0:a5:2a:4b:13:24:ac:92:
         5a:da:5a:6a:a9:e3:c9:44:6a:59:a3:17:4a:cb:5d:29:bb:29:
         94:bf:d6:06:1f:3f:30:54:8a:56:c8:e5:23:c7:14:42:98:79:
         c4:f9:54:47:5f:23:80:fc:df:8f:4e:80:6c:1b:60:9f:31:a4:
         5f:a2:b7:1f:44:38:4b:a8:6b:45:8c:e5:a9:1f:b1:37:f8:98:
         3c:28:91:87:b6:ad:a0:89:83:35:fd:de:a2:d9:f2:a9:50:98:
         1c:d0:bb:84:d7:dd:55:43:8a:04:d4:e4:e4:d8:93:c2:58:b2:
         fc:39:25:74:bf:3e:9a:ef:c9:57:e1:04:1c:89:e8:c7:b6:2a:
         4a:2e:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:54 2025 by rpki-client