Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
File:                     C14680A887BF11EF8804736AC4F9AE02.roa (raw, json)
Hash identifier:          V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=
Subject key identifier:   21:66:53:79:B3:9F:D5:09:CA:ED:5F:C6:1B:0D:6D:8C:95:B3:50:DC
Certificate issuer:       /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial:       2E
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
Signing time:             Sat 21 Dec 2024 06:20:17 +0000
ROA not before:           Sat 21 Dec 2024 06:20:17 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     152144
IP address blocks:        210.87.106.0/24 maxlen: 24
                          210.87.107.0/24 maxlen: 24
                          2401:5760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCA92
        Validity
            Not Before: Dec 21 06:20:17 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67665e21-485d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:27:99:26:22:ea:e5:a4:8a:15:eb:7c:a9:00:
                    8a:dc:79:45:13:5c:03:48:0a:35:62:ad:8b:56:59:
                    c2:43:20:a5:a0:1b:eb:3f:c5:78:18:06:6d:8e:86:
                    c9:52:e7:4a:17:f3:a7:7a:2c:27:eb:d5:15:44:9d:
                    73:ce:90:44:5f:61:67:04:32:e0:02:b8:c5:06:dd:
                    5b:1e:6a:d3:09:0e:38:72:8d:8f:7e:f7:ec:88:9d:
                    1c:b2:17:d9:e4:a0:96:f4:9f:f2:c5:7d:fe:3a:5d:
                    dc:0a:d3:37:71:a4:50:8c:5e:cc:2f:8a:2f:fe:09:
                    b8:bc:e4:e3:66:0f:c2:7f:bc:78:b5:00:f0:20:5f:
                    f2:3f:e9:df:58:0a:c3:dc:d5:bd:19:ad:d6:45:fb:
                    b6:b7:1b:cb:e8:ff:ad:e6:a5:a5:06:de:0b:e6:e1:
                    62:c2:a9:40:96:ca:94:94:a4:e0:1e:92:c3:ba:0f:
                    ac:b8:60:99:f9:fe:f3:3d:d6:16:83:7c:0a:d2:db:
                    ad:19:ae:8d:90:fe:a2:91:9c:16:02:29:95:5c:22:
                    ea:6a:6c:70:90:43:de:ce:ca:56:10:26:89:33:ca:
                    ef:5f:b9:65:3d:60:05:b8:f4:00:ac:21:12:ed:b2:
                    ca:8b:d0:9c:3e:45:72:f3:1b:91:16:10:6d:bb:6a:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:53:79:B3:9F:D5:09:CA:ED:5F:C6:1B:0D:6D:8C:95:B3:50:DC
            X509v3 Authority Key Identifier:
                keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/C14680A887BF11EF8804736AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.106.0/23
                IPv6:
                  2401:5760::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:8c:fb:b9:c3:54:78:31:0f:ec:ad:f8:af:81:d8:c6:fe:
         86:80:83:3f:12:b4:5f:87:a2:31:4f:bc:bb:1f:ae:fb:72:09:
         3f:20:5c:4b:d7:bc:f0:20:28:fd:73:0a:55:47:e2:8d:00:56:
         53:34:2a:de:f6:46:04:1c:76:3f:4d:3c:e1:04:43:97:8b:47:
         c8:58:08:9d:c2:3a:58:f9:43:c8:c9:bf:d9:59:0e:b5:ad:19:
         c1:94:a5:a6:43:e5:cd:3f:94:02:1b:69:e1:a6:82:ca:11:03:
         d3:73:e2:c1:81:dd:cb:f7:60:56:7f:ec:bb:91:1d:1b:13:c5:
         42:9b:d6:10:c9:45:e2:0e:38:d8:a0:c9:56:83:f7:85:0c:75:
         23:a4:60:7d:7d:b2:bd:4d:1a:1d:1e:7c:9e:20:63:1e:d5:e1:
         17:12:9f:15:e2:83:c3:99:c3:c8:71:92:53:d8:70:be:22:19:
         78:fb:01:4f:79:c8:39:5e:2a:ac:29:d8:78:b1:2d:9c:38:34:
         c4:b1:a6:23:59:24:c7:05:a4:2d:ad:a3:61:ab:9d:7b:f1:e3:
         fc:be:ec:4f:98:7c:25:09:4c:f3:32:be:4b:e3:c3:a9:81:a3:
         3d:72:2f:0f:e6:80:30:d3:c3:1a:7f:6c:0e:1b:21:bb:6a:92:
         62:f5:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:14:03 2025 by rpki-client