Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
File:                     800D4798721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier:          lqqr7PYBbbuOzacrEjlVn4sD+OUoWqUYPsZYfcsefLE=
Subject key identifier:   D8:02:3D:05:BD:5A:DD:6D:92:6E:0F:CF:D8:78:D2:09:67:F4:67:14
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       C7
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
Signing time:             Sat 21 Dec 2024 05:50:17 +0000
ROA not before:           Sat 21 Dec 2024 05:50:17 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     45575
IP address blocks:        2001:3c8:900c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2
        Validity
            Not Before: Dec 21 05:50:17 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67665718-0ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:6d:37:17:10:b3:8a:11:36:2f:9b:fa:1b:
                    f0:7c:86:c6:74:e5:90:a8:45:89:5b:62:ac:c2:97:
                    2c:74:e0:79:68:19:e4:3b:4a:01:b2:80:8f:57:b0:
                    fc:06:cc:e6:e3:ae:a3:41:28:a2:71:d8:41:67:d5:
                    74:4a:d9:c1:1e:8f:3a:7b:00:4b:6a:43:ec:22:1f:
                    a8:3c:27:0d:41:90:08:13:e6:25:06:7a:f0:d3:53:
                    ce:5e:da:fe:f9:4a:4a:b6:75:8d:f2:5b:4a:13:dd:
                    47:89:cf:7b:37:34:2d:4d:23:39:8d:eb:c8:56:77:
                    1a:07:1c:0e:1d:09:75:2e:0c:5d:91:cf:bc:5d:80:
                    4b:c4:9d:32:de:8d:cc:31:57:dd:28:e3:55:fa:44:
                    16:48:72:5b:53:a6:6f:db:11:78:a7:8e:30:5e:6c:
                    de:dc:2b:99:9a:6c:56:46:f1:ee:65:1b:75:55:24:
                    c6:e0:da:31:90:a1:4b:25:65:a0:47:23:f0:a9:15:
                    dd:54:b8:56:c3:e3:77:ee:3d:9c:32:ef:79:b4:7c:
                    84:2a:d0:3c:4e:5c:2a:1d:72:f0:51:ea:e8:b0:a5:
                    66:43:88:f8:a4:fa:02:7c:50:e8:00:d4:a9:42:ec:
                    d7:a2:90:7f:19:7f:b8:c2:ce:6a:4c:53:71:88:f3:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:3D:05:BD:5A:DD:6D:92:6E:0F:CF:D8:78:D2:09:67:F4:67:14
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3c8:900c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:08:e1:f2:57:34:fe:0d:0e:db:1a:21:73:78:d2:59:ad:
         07:d8:94:2a:ef:fb:f1:46:01:93:8e:a2:55:84:ac:09:42:83:
         e0:ce:8a:b4:01:89:e8:23:f9:63:40:5d:34:bd:7d:b9:c3:96:
         78:c6:03:2b:55:4f:a6:34:3c:38:eb:fd:27:6e:54:56:48:2d:
         8c:f6:e0:7b:e0:13:dc:52:5e:f6:12:47:d0:3e:4d:eb:44:c9:
         2a:b8:2a:2a:1f:25:0e:3c:15:9e:10:0f:0a:6f:72:1b:d3:53:
         d3:9f:b1:cf:cb:59:40:1d:55:02:71:27:18:b3:51:cf:9e:43:
         36:36:c1:13:83:c3:85:4d:7e:ea:e5:ed:e7:37:01:29:4a:af:
         4e:1d:da:26:9d:cc:15:79:5b:3f:f2:43:2e:53:dc:24:a9:3e:
         9c:4a:31:8e:6c:52:f6:00:af:26:72:7e:03:f7:3a:61:4f:86:
         69:00:25:c0:4a:34:10:e7:88:77:51:fb:d8:45:d6:e5:f9:0a:
         9c:2b:ba:de:71:d9:0f:67:0c:1a:4e:fa:fd:de:26:53:b4:b6:
         1d:2b:0a:b6:c2:10:f2:81:b0:7b:6e:cc:94:28:8f:93:fd:66:
         3b:39:22:07:af:2e:85:c3:88:9a:2d:ea:1e:e0:35:ac:55:a5:
         5c:22:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:53 2025 by rpki-client