Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa
File:                     1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (raw, json)
Hash identifier:          ve0e1EeJW++Sl+gdEO2t3mWGIPAEc7CUq39Ok7FXatk=
Subject key identifier:   CB:64:87:A5:6E:79:CC:18:73:78:68:81:A6:52:67:02:16:3C:9D:ED
Certificate issuer:       /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial:       1A03
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa
Signing time:             Sun 19 May 2024 08:59:33 +0000
ROA not before:           Sun 19 May 2024 08:59:33 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     55569
IP address blocks:        116.51.31.192/30 maxlen: 30
                          116.51.31.196/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6659 (0x1a03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D
        Validity
            Not Before: May 19 08:59:33 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6649bf75-ec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:72:6f:2e:40:dd:cf:62:f7:95:68:d3:87:
                    e0:f9:c0:2f:e1:8d:30:63:d7:4d:f5:d3:c0:54:b9:
                    5b:3a:4b:1b:08:3e:29:6b:96:2c:8d:af:e3:02:42:
                    45:0b:2e:25:85:db:4c:b3:36:17:f8:d2:2e:7d:f9:
                    bb:2e:54:56:d2:38:2e:90:75:7b:f6:2c:06:1c:af:
                    63:62:a4:e6:0d:b9:8b:a1:06:ed:df:30:af:e8:e9:
                    9a:55:66:f9:a5:e4:6f:eb:7f:88:49:9b:e8:ec:2a:
                    4c:60:14:19:88:cc:a5:a0:61:08:d2:3b:1d:cb:5f:
                    4f:c4:48:bb:43:3a:36:22:8b:81:ca:d2:d4:bd:79:
                    d9:4e:ce:25:bc:b8:0d:9f:eb:6b:80:df:5d:7b:04:
                    d2:95:2e:1e:2c:7d:13:7b:11:19:ba:af:75:e4:49:
                    15:c3:45:23:a3:b8:d5:fb:e3:3d:6e:b7:6f:0d:d9:
                    77:46:a4:41:4f:7f:6e:8f:51:2f:cd:f4:41:3a:10:
                    60:39:b4:6a:53:15:b2:0f:5f:38:21:3a:b7:b9:a2:
                    64:db:92:82:aa:72:e5:7b:a9:e0:c7:04:84:bd:a8:
                    1d:e9:1f:74:f9:70:96:22:87:70:7f:62:f2:b7:4e:
                    d4:5a:d0:60:e4:d3:3b:7d:5c:27:53:85:c5:4e:7b:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:87:A5:6E:79:CC:18:73:78:68:81:A6:52:67:02:16:3C:9D:ED
            X509v3 Authority Key Identifier:
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.51.31.192/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:09:07:89:7c:69:b3:04:bb:ab:4b:fa:e3:fd:95:1b:6c:
         86:04:47:bd:2f:eb:c3:a9:b9:6c:ab:0c:4b:03:ce:27:b5:aa:
         11:7b:9a:cd:11:98:81:2b:18:8f:2c:3e:10:51:63:e5:10:9d:
         12:84:47:22:b1:36:07:ca:6f:ea:cc:75:fd:cb:6d:6f:84:78:
         6a:1d:28:cd:e2:d0:18:72:f5:5d:60:96:72:78:82:ff:a7:df:
         f9:7b:2d:b6:03:fd:8f:40:86:a3:be:e9:b2:6c:aa:8f:c2:df:
         45:0c:3f:4f:99:96:70:af:78:d2:2d:c7:0a:e9:bc:81:8f:b1:
         db:93:51:ad:a5:59:0b:76:5c:50:bf:73:cc:1e:e7:f0:bc:9c:
         f1:8b:14:48:3c:ae:25:c3:27:5d:87:63:db:c5:e0:58:2b:5a:
         a1:52:10:f9:c1:9e:99:27:df:2f:88:f8:cf:d6:b7:60:1c:f8:
         5f:1d:11:d3:de:04:4a:b7:b3:8f:c5:57:41:25:7c:22:8b:53:
         ab:6d:38:e0:58:7a:53:7b:16:ba:b5:8f:27:1c:de:51:76:7a:
         21:b0:c9:62:95:ce:84:3f:30:bf:09:78:15:a3:4d:16:c2:bd:
         b0:30:18:98:da:20:8b:1e:3d:8f:4c:2f:6c:6e:cf:c7:cd:86:
         37:d5:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:17 2025 by rpki-client