Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
File:                     18066BD682CD11EE82EA6452C4F9AE02.roa (raw, json)
Hash identifier:          Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=
Subject key identifier:   4C:46:FD:4F:5B:56:CB:3B:7F:9F:A5:11:47:5F:65:3E:CE:B0:ED:2F
Certificate issuer:       /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial:       D0
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
Signing time:             Sun 01 Dec 2024 04:27:47 +0000
ROA not before:           Sun 01 Dec 2024 04:27:47 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     152103
IP address blocks:        180.131.134.0/23 maxlen: 23
                          180.131.134.0/24 maxlen: 24
                          180.131.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB916
        Validity
            Not Before: Dec  1 04:27:47 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674be5c2-d197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:ba:1a:c2:b4:ab:e8:d5:88:b4:bb:f8:fc:
                    e6:ad:9e:40:a2:35:9d:45:6b:9c:d5:7e:dd:78:64:
                    e1:77:d2:b7:d9:3c:ad:ec:8e:be:08:69:97:b7:77:
                    d6:9c:a8:1d:31:79:81:39:bb:10:41:29:d3:98:a6:
                    96:e5:2b:ff:a2:a8:d6:56:67:1c:89:c7:5d:6c:91:
                    44:f5:be:7d:a8:7a:26:d5:a8:be:63:d7:3b:f1:69:
                    08:4e:a7:2c:fd:d8:0b:18:b9:09:fe:da:d9:9c:4e:
                    e5:91:18:4a:57:eb:63:c4:cd:09:1a:5f:f9:fd:85:
                    b4:24:78:0e:f3:78:65:bd:20:b9:35:b8:9d:93:2d:
                    25:a1:5e:8b:58:13:1f:39:cd:8c:29:de:ba:dd:fa:
                    b8:86:37:8f:8b:37:7b:1a:31:2a:47:4b:b6:b3:26:
                    0f:05:8d:0e:a2:70:f0:25:49:f8:72:c1:b0:11:59:
                    1e:7a:86:f0:65:97:81:77:94:61:cf:04:71:ff:37:
                    00:4d:6a:8f:30:a4:d3:5f:b4:3e:99:7e:90:f8:16:
                    a9:10:fe:d6:f6:63:3f:4c:1c:59:00:c3:79:2a:ae:
                    27:7d:f2:1e:a4:7e:3d:3c:e2:2e:02:4d:52:da:02:
                    b1:a3:ea:e3:9a:8a:45:cd:22:d5:8a:e5:fb:57:b0:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:FD:4F:5B:56:CB:3B:7F:9F:A5:11:47:5F:65:3E:CE:B0:ED:2F
            X509v3 Authority Key Identifier:
                keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:84:f3:85:34:8e:1b:a7:8b:f9:7d:0d:b2:d1:94:33:9e:01:
         e7:0e:14:48:e7:63:bf:13:ee:10:25:02:db:81:d9:c9:e0:4f:
         10:43:85:aa:55:58:ca:f4:62:66:dc:e0:bc:80:fe:77:4b:2c:
         26:d3:22:90:80:20:4b:b3:d6:85:3c:b1:b2:1f:97:c4:1d:7f:
         3b:b2:b1:8c:75:d3:36:ae:45:f4:5c:3c:ef:62:74:a0:40:16:
         55:fd:4e:f5:83:f6:d6:60:7a:95:52:55:c4:9e:5f:14:1e:c2:
         51:7e:99:e4:aa:8a:f5:44:0e:52:57:73:94:4f:49:98:5a:8f:
         80:4d:0a:43:0d:5b:74:96:66:99:4d:39:5d:91:00:9e:78:67:
         5d:24:da:d0:7e:b0:d0:c9:a0:56:fb:dd:b8:7e:da:46:02:ad:
         d3:e9:75:f0:94:8f:f6:a4:7a:37:c9:b4:b6:c1:85:c8:d0:23:
         b1:ae:01:58:2f:4f:76:c9:b4:eb:23:25:bf:df:20:d7:1c:fd:
         66:ca:6f:24:79:50:b8:17:ee:8f:8e:91:31:5b:70:a9:1e:0c:
         6f:20:b3:73:af:94:e9:58:30:5a:5c:68:24:e6:27:e4:2b:db:
         d5:5f:c4:c3:6f:6e:98:d5:1e:59:3a:f6:34:03:5e:97:f2:a1:
         53:18:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:58:38 2025 by rpki-client