Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
File:                     D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json)
Hash identifier:          zI9Q5YVnQd4VkVi+XQs5CAmw/xkd9rw0TUnzDmPGpmw=
Subject key identifier:   E6:41:DD:FF:7C:23:4C:00:40:74:A0:D4:53:5B:36:9C:46:1C:AB:7D
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       C1
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
Signing time:             Fri 07 Feb 2025 05:38:53 +0000
ROA not before:           Fri 07 Feb 2025 05:38:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132139
IP address blocks:        185.81.70.0/24 maxlen: 24
                          185.81.70.208/29 maxlen: 29
                          185.81.70.216/29 maxlen: 29
                          185.81.70.236/31 maxlen: 31
                          185.81.70.238/31 maxlen: 31
                          185.81.70.240/29 maxlen: 29
                          185.81.70.248/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC
        Validity
            Not Before: Feb  7 05:38:53 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67a59c6d-9e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:53:e6:82:f8:ab:d9:58:54:81:aa:81:4b:
                    ae:fd:87:9b:f4:73:5f:95:be:63:3c:28:bc:60:85:
                    00:b5:b2:a2:d5:bc:58:10:93:00:fa:9f:d3:02:60:
                    91:ec:51:0e:e2:53:1c:4e:13:0b:d5:42:e9:2b:70:
                    71:75:ed:20:cd:a0:a1:c0:8b:1d:4c:12:54:0c:b8:
                    4e:c6:d9:ce:a7:70:e5:42:ff:16:24:b5:0a:5e:54:
                    dc:63:0c:bd:49:4e:bb:4d:97:89:a4:f4:45:7c:61:
                    04:c8:af:7e:56:e0:50:a5:a3:a4:fe:a5:aa:56:ed:
                    43:5a:62:2f:cf:f9:a2:21:5c:d3:b7:ff:37:f7:1a:
                    e7:e8:61:f2:32:65:b2:a2:d2:78:56:7d:ac:35:91:
                    46:1d:2f:bc:b4:da:46:50:5d:14:33:6c:18:da:52:
                    d4:35:88:23:8d:b5:12:fb:69:42:af:99:c9:23:61:
                    be:ba:7a:4a:ec:11:57:9e:e3:11:a4:8a:c4:52:7e:
                    e0:e4:24:15:f3:0d:60:bd:93:e3:74:dc:9c:95:7e:
                    dc:29:37:22:96:96:df:df:e0:9f:4c:fa:57:f1:6f:
                    2d:65:51:6b:a7:62:f3:2f:26:1c:c5:6b:1a:86:59:
                    bb:c5:50:6e:08:15:d0:84:47:1f:7d:42:d9:84:97:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:41:DD:FF:7C:23:4C:00:40:74:A0:D4:53:5B:36:9C:46:1C:AB:7D
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:45:67:30:8a:5d:b5:e8:8c:5f:6b:d0:f6:22:c9:1d:d1:63:
         5e:97:c6:9d:2f:d4:eb:0f:05:3e:a0:2e:fc:60:fb:64:06:f8:
         09:d3:23:85:07:58:5e:8d:15:26:bd:ea:58:95:c6:14:20:98:
         a8:dc:ec:8f:9f:dd:dc:59:8d:e3:5e:56:88:3b:ff:60:b9:7d:
         a1:9a:ce:50:9c:a0:01:a6:9a:9d:8f:a9:4e:aa:7c:3c:d5:07:
         50:02:3c:25:8f:14:a4:d7:77:e1:1a:12:c4:0e:d6:c4:19:38:
         bc:a0:d5:9c:80:2d:c9:d3:19:ac:9d:e4:d3:fc:5d:a6:c5:52:
         7c:ac:d7:bf:29:b7:32:93:0a:b1:bc:57:55:21:0b:35:2d:f0:
         04:4d:d6:00:c7:4b:30:9e:d8:f4:37:20:4f:20:78:1a:07:e0:
         24:f3:a2:0d:93:ab:07:17:f8:59:c7:ac:f6:67:36:8d:7c:dc:
         c1:6d:bc:bd:b7:92:70:d0:fa:b2:60:3e:f6:4a:6e:c1:ee:15:
         cd:2c:5a:fb:7a:53:5e:03:23:a1:51:0a:db:d4:1b:b6:ca:40:
         ec:53:2f:5b:14:e2:89:82:08:7e:cb:ed:3c:df:c4:d6:6a:97:
         16:25:ca:1c:32:9c:f2:cb:8e:f7:9e:6c:d8:33:25:57:ac:3d:
         b1:08:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:00:17 2025 by rpki-client