Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa
File:                     902F4AAC567011EFA451BD7CC4F9AE02.roa (raw, json)
Hash identifier:          qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=
Subject key identifier:   F0:71:C2:98:9C:DA:67:D9:13:C1:E2:C1:2B:93:63:22:55:A8:CD:17
Certificate issuer:       /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial:       32C8
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa
Signing time:             Fri 20 Dec 2024 15:51:57 +0000
ROA not before:           Fri 20 Dec 2024 15:51:57 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     58867
IP address blocks:        163.47.176.0/24 maxlen: 24
                          203.175.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13000 (0x32c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF863
        Validity
            Not Before: Dec 20 15:51:57 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6765929d-99e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:14:71:68:63:1a:fd:0b:35:2e:45:39:a3:
                    93:22:bc:b7:99:e1:fe:df:33:45:3e:49:fa:b6:ff:
                    d5:ca:23:aa:11:30:e7:76:4e:9e:b1:16:a5:b1:64:
                    f3:db:f4:6a:f1:cb:54:4f:b9:ac:56:75:9b:70:2c:
                    dd:e3:b9:c2:bf:3d:a0:b5:03:ec:01:70:b5:4d:00:
                    89:aa:c4:c4:ee:28:aa:ae:aa:70:89:79:35:87:d5:
                    82:8a:0b:f5:48:55:32:08:3f:ce:f6:df:35:a9:2d:
                    95:fb:c4:ba:36:10:e9:16:1e:10:63:86:e8:27:aa:
                    05:82:cc:8e:84:db:eb:44:83:7d:51:ed:45:63:2a:
                    16:d0:34:9d:d2:11:63:20:f7:db:1b:8d:37:86:18:
                    46:24:17:e3:a0:05:20:1b:e0:8b:ba:bf:3c:c2:6c:
                    b7:44:dd:a1:02:00:86:a8:56:11:f2:45:b3:7b:c6:
                    c2:5a:a4:db:77:99:30:cf:19:6f:c7:2c:87:27:a3:
                    b6:85:91:62:25:c9:87:a4:d2:5d:21:2e:a5:51:30:
                    4e:4b:0f:bd:27:bc:bd:83:35:bc:f7:14:3f:83:09:
                    37:cf:1a:80:ba:9c:7d:56:47:d2:a9:25:bb:c0:41:
                    53:4a:89:e7:eb:48:b5:e1:19:76:b0:dc:63:bd:1f:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:71:C2:98:9C:DA:67:D9:13:C1:E2:C1:2B:93:63:22:55:A8:CD:17
            X509v3 Authority Key Identifier:
                keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.176.0/24
                  203.175.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:79:f5:c6:12:38:fd:68:3b:dd:e7:0c:0b:ad:08:bd:02:
         a7:d7:60:d9:97:62:5e:d0:03:f5:e3:b5:ae:43:17:9b:94:82:
         c8:94:4e:35:2a:ff:9b:41:9f:4f:a9:50:48:0d:ba:77:42:76:
         8b:88:15:17:df:88:e9:61:62:f2:6e:c5:49:55:dd:a4:0c:3c:
         21:91:71:23:16:e9:ec:63:f4:1b:55:8f:c5:47:00:c3:a2:7b:
         61:ab:d9:d3:b9:c9:0f:bd:3e:5e:e2:95:1e:99:97:42:a2:b3:
         90:97:87:f8:db:42:9b:bd:02:68:58:6f:56:43:53:ef:f5:3d:
         dc:10:65:ea:7d:28:fc:db:ca:af:93:3a:63:83:ad:e1:5c:1f:
         52:e7:9d:d1:38:22:d8:47:1c:c1:25:93:83:1f:f7:73:09:1c:
         b6:8b:6d:25:ab:e8:7c:bd:2d:3c:95:8d:ef:7a:72:16:a1:e5:
         3f:a7:0b:6a:a3:c3:21:cb:29:8f:41:c0:36:7d:fb:af:ca:b6:
         df:f5:f7:09:ce:d0:fc:ee:59:72:85:3e:2c:66:d8:34:03:92:
         6f:b6:55:e7:dc:17:fd:e1:16:00:02:37:58:76:27:61:15:7d:
         a3:e3:b0:11:d2:6e:9d:ad:0a:34:7b:f7:9b:42:0e:5e:91:23:
         fa:ac:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:53:52 2025 by rpki-client