Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C179FC90721511EF9D7B9F3DC4F9AE02.roa
File:                     C179FC90721511EF9D7B9F3DC4F9AE02.roa (raw, json)
Hash identifier:          7XG0QFqdElMNLfDW+DbKEyaqsGLADVZ26BkuIhlQoJ0=
Subject key identifier:   85:02:18:E0:15:D9:24:95:51:28:0B:B2:DC:B0:3A:FB:CA:41:16:53
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       A7
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C179FC90721511EF9D7B9F3DC4F9AE02.roa
Signing time:             Sat 21 Dec 2024 05:49:44 +0000
ROA not before:           Sat 21 Dec 2024 05:49:44 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     135528
IP address blocks:        202.29.37.0/24 maxlen: 24
                          2001:3c8:2a07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2
        Validity
            Not Before: Dec 21 05:49:44 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=676656f7-1cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:67:4e:b5:5f:cd:8b:0c:9b:2e:e0:eb:76:1d:
                    c2:a2:0b:e7:7a:e0:43:d2:fb:bb:3c:f9:69:ca:a6:
                    9a:15:9b:89:18:b5:b1:9c:43:83:ec:26:00:2a:81:
                    17:67:d5:27:ce:31:6f:bf:e7:bb:df:e1:89:a2:2a:
                    be:1d:fc:66:20:0b:9f:06:24:93:69:56:3e:d1:6a:
                    06:8d:e7:7a:72:d1:49:b7:4c:65:e9:17:b8:08:f3:
                    81:51:78:f8:85:78:3e:ba:a7:d3:1a:9f:c3:a1:51:
                    ce:9c:10:9c:36:f6:6e:fa:81:0d:5e:41:36:ed:a8:
                    57:7f:ef:63:9f:e9:94:bf:b2:0a:e7:e6:69:a7:b1:
                    30:d1:c4:67:6d:ef:e5:0f:5e:40:6d:97:f9:3d:09:
                    3e:cd:5c:1f:01:34:4b:70:e2:31:79:4a:cc:0f:dc:
                    db:07:b7:f1:8f:cb:3c:b3:85:4d:d1:a7:96:88:9a:
                    fc:fc:3f:29:14:58:c6:25:5c:91:6d:ff:2e:9f:7b:
                    c2:b7:3c:a7:c8:71:8f:e0:1e:61:18:bf:63:e2:0d:
                    bd:09:09:7f:c1:4e:98:af:c2:2b:bb:4b:0f:26:1c:
                    62:72:35:78:8b:fd:87:f6:f3:39:89:5b:d0:02:23:
                    64:c8:b0:bc:2b:10:05:7a:f1:00:f5:63:36:5c:9c:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:18:E0:15:D9:24:95:51:28:0B:B2:DC:B0:3A:FB:CA:41:16:53
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C179FC90721511EF9D7B9F3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.37.0/24
                IPv6:
                  2001:3c8:2a07::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:a8:ff:61:70:a9:bb:49:b7:cb:4a:6c:59:9a:bc:01:25:
         6d:89:dc:cf:ff:80:5d:ae:3f:c7:9a:e3:f0:9e:1a:a2:21:db:
         16:7a:34:b2:91:4e:a7:91:c5:52:0b:dc:c0:3d:92:6a:a3:e4:
         a5:cb:f9:32:ab:99:ba:bf:d8:31:be:46:5f:31:96:66:67:05:
         f8:ea:4c:6c:5c:2a:c6:19:75:66:49:bf:86:bb:cb:a8:87:1f:
         b8:69:61:f7:d4:25:fa:60:7d:a9:0c:33:55:66:80:64:28:40:
         25:2a:0a:af:51:ac:04:bf:71:df:73:92:2e:11:48:89:12:a1:
         6c:c1:d3:29:49:78:bd:9d:7c:a8:13:59:74:0e:e4:77:ab:fc:
         71:be:94:07:d6:2a:d7:5a:7a:28:3e:f3:7e:c8:c4:89:2d:5f:
         5a:18:50:e4:a1:4b:53:0b:eb:6e:8a:24:e2:0f:6f:07:a3:0c:
         9e:be:a4:8e:44:7c:60:a1:b5:84:6b:a8:d2:63:9c:c6:ea:b3:
         7e:fd:bb:fe:eb:2f:e5:3d:94:00:24:1b:25:13:d5:f8:cc:ea:
         35:5a:ca:45:0e:36:43:00:de:69:62:06:de:89:b0:a7:b6:e9:
         9e:66:13:b8:a5:f0:a1:17:76:bf:b7:6a:bd:2a:54:d9:26:c3:
         bc:b1:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:04 2025 by rpki-client